Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34fe3e45-486e-311f-b55d-29b2b5e3e5ee.roa
File:                     34fe3e45-486e-311f-b55d-29b2b5e3e5ee.roa (raw, json)
Hash identifier:          93BeQFstX0gt2ZNacVdqWi+if+JbjcaKMWRJQ3BSpXw=
Subject key identifier:   95:B7:DB:5C:43:BD:B7:5A:A5:82:3C:FD:2D:9B:FB:69:F6:BA:00:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D5D66BFD232B3D5E52700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34fe3e45-486e-311f-b55d-29b2b5e3e5ee.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        73.231.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:5d:66:bf:d2:32:b3:d5:e5:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=dcfcf621-0c57-4130-873d-9f206122470a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:a1:6c:d7:5d:bb:60:79:50:75:38:c4:02:
                    8e:34:df:9c:21:14:ae:4e:bf:2f:97:d6:52:b4:12:
                    f3:fa:39:83:05:de:d7:99:9c:5c:16:17:de:bb:77:
                    9c:ac:bf:48:8e:bd:56:cb:cf:73:5c:6c:55:8c:22:
                    f4:51:e6:7e:9a:37:1e:f7:d6:f0:bb:f7:8d:de:ab:
                    9d:ae:8b:82:74:98:64:df:c1:00:06:f2:c3:aa:b4:
                    43:43:8a:cf:39:e3:c4:40:b2:b9:8c:05:5a:cf:ec:
                    ea:08:87:6a:3c:ae:d8:4a:a6:a7:e9:e3:fb:8f:82:
                    92:44:15:ee:3e:77:ed:50:89:b1:87:15:1b:1e:0b:
                    80:c1:1d:76:81:fd:bb:23:c2:81:e7:8f:2a:97:c5:
                    80:be:a4:aa:b4:3d:3b:cf:81:70:27:c1:95:ae:e6:
                    94:dd:84:ac:7c:ae:f6:56:6b:62:41:47:75:d6:20:
                    92:68:7e:4d:e4:d5:32:92:32:26:5a:72:2f:2c:92:
                    eb:6f:d1:82:c8:43:49:01:0d:0b:f3:a6:7f:78:4f:
                    5f:72:f3:1b:ce:4a:70:ba:e2:1f:9d:50:75:f1:84:
                    b3:ef:28:61:53:b3:7d:53:8f:1f:08:31:af:4a:c7:
                    23:e9:e5:2a:3d:bd:94:c6:fd:ae:e6:3d:de:e3:0f:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B7:DB:5C:43:BD:B7:5A:A5:82:3C:FD:2D:9B:FB:69:F6:BA:00:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34fe3e45-486e-311f-b55d-29b2b5e3e5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.231.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8b:e8:02:c0:76:bb:77:96:09:f9:d8:ed:7c:7a:d1:5e:7d:
         73:2c:18:ad:42:a4:8a:27:fe:1a:e6:62:de:68:38:42:9d:6e:
         af:1e:c7:23:1c:5c:c7:0d:71:53:b4:d6:ed:db:80:0c:26:e5:
         8b:f3:51:5e:fe:31:0a:50:15:dc:f1:f6:7e:65:52:2f:02:38:
         69:cb:2a:05:a4:84:5b:42:2a:e1:e6:9c:94:da:9f:65:67:e2:
         1a:57:32:29:0d:db:b0:34:32:18:44:f6:e0:07:81:f6:af:45:
         ba:0f:1d:89:2e:29:0b:0e:48:3f:a2:e8:5e:94:09:26:82:11:
         86:43:ed:eb:02:d2:bb:2d:02:42:65:34:7d:a3:fb:fa:8b:bd:
         78:5a:e6:59:91:0f:66:8e:ec:92:c9:0a:84:09:31:c2:28:29:
         af:d1:13:88:90:75:40:95:4a:74:b4:6b:60:7e:42:b2:9d:14:
         c9:89:b2:d4:da:fa:b6:e0:21:d2:45:16:d4:be:1b:cd:33:ad:
         76:a8:d7:e2:c8:c5:e6:f4:4d:c6:44:52:74:5a:0a:31:93:95:
         f3:2f:f5:f2:65:91:ae:c8:13:cc:11:12:2c:a1:de:42:ce:99:
         89:a3:ae:21:f5:5a:14:ca:cb:d7:0b:a2:b2:25:12:75:f8:6e:
         45:7c:f1:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPV1mv9Iys9XlJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZGNmY2Y2MjEtMGM1Ny00MTMwLTg3M2QtOWYyMDYxMjI0NzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnihbNddu2B5UHU4xAKONN+cIRSuTr8vl9ZS
tBLz+jmDBd7XmZxcFhfeu3ecrL9Ijr1Wy89zXGxVjCL0UeZ+mjce99bwu/eN3qud
rouCdJhk38EABvLDqrRDQ4rPOePEQLK5jAVaz+zqCIdqPK7YSqan6eP7j4KSRBXu
PnftUImxhxUbHguAwR12gf27I8KB548ql8WAvqSqtD07z4FwJ8GVruaU3YSsfK72
VmtiQUd11iCSaH5N5NUykjImWnIvLJLrb9GCyENJAQ0L86Z/eE9fcvMbzkpwuuIf
nVB18YSz7yhhU7N9U48fCDGvSscj6eUqPb2Uxv2u5j3e4w/jnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJW321xDvbdapYI8/S2b+2n2ugCKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzRmZTNlNDUtNDg2ZS0z
MTFmLWI1NWQtMjliMmI1ZTNlNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSedmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiL6ALAdrt3lgn52O18etFefXMsGK1CpIon/hrmYt5oOEKdbq8exyMc
XMcNcVO01u3bgAwm5YvzUV7+MQpQFdzx9n5lUi8COGnLKgWkhFtCKuHmnJTan2Vn
4hpXMikN27A0MhhE9uAHgfavRboPHYkuKQsOSD+i6F6UCSaCEYZD7esC0rstAkJl
NH2j+/qLvXha5lmRD2aO7JLJCoQJMcIoKa/RE4iQdUCVSnS0a2B+QrKdFMmJstTa
+rbgIdJFFtS+G80zrXao1+LIxeb0TcZEUnRaCjGTlfMv9fJlka7IE8wREiyh3kLO
mYmjriH1WhTKy9cLorIlEnX4bkV88SE=
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:57:45 2026 by rpki-client