Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458655ed-34b5-3266-a4eb-57b8c5a59e31.roa
File:                     458655ed-34b5-3266-a4eb-57b8c5a59e31.roa (raw, json)
Hash identifier:          185lhoG4YZbn+X0Yt/b/PQ3NPibghuCYB5kGdeZ2oxc=
Subject key identifier:   27:8E:59:EE:8D:BA:2E:99:41:20:40:10:41:CB:58:9C:C6:26:9B:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863F99E9CC4B1E1E1CE4800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458655ed-34b5-3266-a4eb-57b8c5a59e31.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        76.112.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:f9:9e:9c:c4:b1:e1:e1:ce:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=6f02ec8d-72e5-4cff-8e8e-cb55a2f46f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:99:ac:44:34:a3:b4:a4:f3:f9:b9:ab:02:
                    33:c5:9b:e9:56:a3:4f:b6:04:db:99:3f:cc:55:43:
                    3b:08:3f:e0:7a:09:4d:dd:be:24:c9:68:79:3f:e6:
                    31:ce:6b:df:7e:f8:4c:e1:17:6e:6a:1d:10:87:36:
                    13:1f:1d:62:84:65:85:cb:30:4c:3e:c1:7b:71:6e:
                    41:63:c5:e6:ad:cd:55:4e:83:3f:09:b8:17:da:32:
                    69:50:f4:d7:0f:12:8a:94:6c:73:35:ab:b0:00:95:
                    80:88:ba:26:c7:4e:4d:8a:7a:ec:d8:5b:24:aa:2f:
                    dd:65:ab:a7:44:00:a4:f0:9d:d7:4d:1c:f2:b7:cc:
                    f2:b7:ec:ca:0b:bd:3a:5d:20:de:5a:fd:98:48:f1:
                    87:e8:d4:6e:78:6a:a0:0a:82:00:76:e6:88:f3:0d:
                    fe:d3:7a:41:de:33:27:d1:fc:de:67:db:2c:87:55:
                    27:85:1d:ca:e7:6b:38:12:05:bd:69:8f:03:3e:29:
                    57:0b:79:41:58:1c:93:82:b3:b2:c7:bc:27:c1:24:
                    33:a0:9e:6f:d5:01:ed:72:57:eb:18:9c:52:e4:85:
                    87:15:f3:4e:8b:ad:3c:06:db:7b:9a:f2:35:03:27:
                    12:95:2d:1c:0e:ce:2a:14:34:b8:3d:41:a6:ff:72:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:59:EE:8D:BA:2E:99:41:20:40:10:41:CB:58:9C:C6:26:9B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458655ed-34b5-3266-a4eb-57b8c5a59e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:c3:17:41:03:f3:3e:f8:2c:ea:2a:4e:12:80:de:23:a7:21:
         af:f8:fc:98:c2:9a:e9:de:81:7d:e9:79:48:1b:59:d8:48:10:
         86:fb:5f:d9:52:24:72:cc:ee:05:99:7e:3c:28:10:ef:38:fe:
         0d:fc:0b:82:cd:1f:74:df:cf:46:32:0c:29:07:ce:2a:8f:c3:
         c5:af:68:bb:03:ba:a2:38:76:15:d7:61:15:24:90:e8:54:57:
         b5:6a:55:4b:b5:0e:5b:38:d5:b3:60:73:4d:b4:6e:ff:3e:8b:
         ec:64:cb:35:0b:bf:d1:d9:7c:05:74:12:7b:d1:34:13:3a:e5:
         73:87:d6:e1:79:93:47:1f:5b:e1:ce:bf:9d:12:8f:2f:05:59:
         58:dd:7f:0f:3c:9f:43:2c:b7:2b:e4:10:d5:32:a8:5f:07:f9:
         1a:39:25:76:e4:83:e2:e5:3d:cc:0f:26:1b:12:18:dd:80:e4:
         f1:bc:10:f1:d9:56:ae:81:4d:e7:42:48:d4:ef:1e:64:29:59:
         be:1f:bf:db:73:33:51:de:01:be:2d:6a:7a:6f:f7:22:4f:da:
         0c:05:e7:57:65:45:fe:97:79:23:8f:b8:2f:c1:82:08:e2:43:
         b5:26:f3:8a:8a:5a:fb:a7:c9:0e:36:45:3c:ca:24:c6:f2:ec:
         47:4c:a6:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY/menMSx4eHOSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
NmYwMmVjOGQtNzJlNS00Y2ZmLThlOGUtY2I1NWEyZjQ2ZjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2iZrEQ0o7Sk8/m5qwIzxZvpVqNPtgTbmT/M
VUM7CD/geglN3b4kyWh5P+YxzmvffvhM4Rduah0QhzYTHx1ihGWFyzBMPsF7cW5B
Y8Xmrc1VToM/CbgX2jJpUPTXDxKKlGxzNauwAJWAiLomx05Ninrs2Fskqi/dZaun
RACk8J3XTRzyt8zyt+zKC706XSDeWv2YSPGH6NRueGqgCoIAduaI8w3+03pB3jMn
0fzeZ9ssh1UnhR3K52s4EgW9aY8DPilXC3lBWByTgrOyx7wnwSQzoJ5v1QHtclfr
GJxS5IWHFfNOi608Btt7mvI1AycSlS0cDs4qFDS4PUGm/3KTsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCeOWe6Nui6ZQSBAEEHLWJzGJptJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDU4NjU1ZWQtMzRiNS0z
MjY2LWE0ZWItNTdiOGM1YTU5ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATHAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALbDF0ED8z74LOoqThKA3iOnIa/4/JjCmunegX3peUgbWdhIEIb7X9lS
JHLM7gWZfjwoEO84/g38C4LNH3Tfz0YyDCkHziqPw8WvaLsDuqI4dhXXYRUkkOhU
V7VqVUu1Dls41bNgc020bv8+i+xkyzULv9HZfAV0EnvRNBM65XOH1uF5k0cfW+HO
v50Sjy8FWVjdfw88n0MstyvkENUyqF8H+Ro5JXbkg+LlPcwPJhsSGN2A5PG8EPHZ
Vq6BTedCSNTvHmQpWb4fv9tzM1HeAb4tanpv9yJP2gwF51dlRf6XeSOPuC/Bggji
Q7Um84qKWvunyQ42RTzKJMby7EdMplE=
-----END CERTIFICATE-----
Generated at Tue Sep 1 12:02:07 2026 by rpki-client