Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b41c3a6-3e1f-3b93-8dc0-bc5c8d2ec27f.roa
File:                     4b41c3a6-3e1f-3b93-8dc0-bc5c8d2ec27f.roa (raw, json)
Hash identifier:          9XUwiEOSiDPTJlHyQ0Km6msuXrZDwl1AEYrvATYkJjI=
Subject key identifier:   6E:C1:09:F8:15:B0:B3:97:E8:F3:A5:99:F6:51:2D:F9:B3:99:D9:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4981201A446F52BBC9927740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b41c3a6-3e1f-3b93-8dc0-bc5c8d2ec27f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33660
IP address blocks:        70.89.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:20:1a:44:6f:52:bb:c9:92:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c3e8ad89-fffd-467d-a36d-561c9530928a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e5:84:4f:f7:08:a1:2f:67:5f:b5:4b:0d:3c:
                    dd:96:88:ee:e8:7c:c3:24:54:60:08:cd:25:5d:4d:
                    56:67:0c:e4:0a:e7:15:db:f0:43:85:43:2c:f2:f9:
                    a5:76:7a:f3:79:93:3d:36:0a:62:fd:50:d3:49:2d:
                    be:74:e9:5c:3c:d8:8c:0a:44:f3:5a:51:fc:3d:f8:
                    a7:22:72:96:24:17:80:3a:22:04:2a:e7:99:e8:92:
                    72:21:38:bc:22:fc:18:2a:62:3c:6b:4d:02:86:3b:
                    d8:7a:23:63:34:0d:4a:21:81:5e:2c:09:77:41:71:
                    27:74:84:d4:e6:0b:ec:4f:04:a4:26:ad:21:8c:f6:
                    c3:24:21:8b:f5:76:7b:a3:43:bd:5b:dc:dc:96:c3:
                    39:0c:96:85:a8:ff:05:dc:85:b0:04:3b:b0:c0:04:
                    9a:89:fc:e0:9f:b6:4a:c9:f8:3c:17:81:29:db:8f:
                    59:97:31:e1:62:24:a6:8e:5e:8d:02:9f:a9:6f:bb:
                    4a:e4:81:5b:ba:f4:05:90:aa:19:b1:30:1f:dd:5f:
                    46:43:55:5d:5c:89:c1:36:96:0b:0c:76:bd:cd:b3:
                    08:f9:b6:23:a5:dd:78:0c:fa:8f:63:2b:d5:47:72:
                    a9:30:24:5e:a5:b9:88:90:ea:8e:84:10:54:45:25:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C1:09:F8:15:B0:B3:97:E8:F3:A5:99:F6:51:2D:F9:B3:99:D9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b41c3a6-3e1f-3b93-8dc0-bc5c8d2ec27f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.89.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:16:9f:c5:01:09:d1:e8:00:45:2e:62:a6:16:15:87:9a:a6:
         b0:dd:ec:56:89:f1:10:86:81:b6:28:f1:97:3d:18:39:7e:45:
         21:45:7f:b5:fe:48:39:69:7f:df:57:e9:1b:9a:cd:d0:8e:80:
         4c:ea:5b:ef:a3:78:1d:c9:19:9a:66:2a:37:60:e6:6f:2c:f2:
         26:04:17:0a:3c:9e:a0:4a:a7:85:5e:ed:d0:f4:31:b4:61:15:
         19:2d:21:69:5a:3a:10:ea:bb:9a:6b:e5:52:5c:2d:f6:f2:f4:
         61:8b:78:a5:89:25:09:e4:76:84:02:ff:cd:a6:2d:d2:bf:7d:
         f2:60:c1:e2:f8:ea:6b:84:57:4e:7a:8b:1f:27:b1:18:b1:a4:
         35:3e:37:b2:c3:19:d7:4a:14:5c:db:2b:03:e4:69:16:97:e9:
         cc:02:97:7d:c2:c5:da:d2:33:a1:47:fb:0a:31:fe:9a:c1:6d:
         e9:1c:cd:af:c0:90:74:f7:01:9f:ef:78:1d:de:ac:5c:e4:6d:
         70:20:4d:6c:ee:9e:a8:8a:18:a5:98:eb:e6:4d:4d:c7:3a:7b:
         d1:96:00:c9:11:9b:a9:0b:2b:60:59:4a:3a:97:83:17:6c:a5:
         c9:fa:0d:86:26:b0:e2:ad:e9:04:42:7d:d5:88:5a:5f:2f:eb:
         5f:c6:29:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgSAaRG9Su8mSd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzNlOGFkODktZmZmZC00NjdkLWEzNmQtNTYxYzk1MzA5MjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uWET/cIoS9nX7VLDTzdloju6HzDJFRgCM0l
XU1WZwzkCucV2/BDhUMs8vmldnrzeZM9Ngpi/VDTSS2+dOlcPNiMCkTzWlH8Pfin
InKWJBeAOiIEKueZ6JJyITi8IvwYKmI8a00ChjvYeiNjNA1KIYFeLAl3QXEndITU
5gvsTwSkJq0hjPbDJCGL9XZ7o0O9W9zclsM5DJaFqP8F3IWwBDuwwASaifzgn7ZK
yfg8F4Ep249ZlzHhYiSmjl6NAp+pb7tK5IFbuvQFkKoZsTAf3V9GQ1VdXInBNpYL
DHa9zbMI+bYjpd14DPqPYyvVR3KpMCRepbmIkOqOhBBURSUnwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7BCfgVsLOX6POlmfZRLfmzmdnQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI0MWMzYTYtM2UxZi0z
YjkzLThkYzAtYmM1YzhkMmVjMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRln0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALoWn8UBCdHoAEUuYqYWFYeaprDd7FaJ8RCGgbYo8Zc9GDl+RSFFf7X+
SDlpf99X6RuazdCOgEzqW++jeB3JGZpmKjdg5m8s8iYEFwo8nqBKp4Ve7dD0MbRh
FRktIWlaOhDqu5pr5VJcLfby9GGLeKWJJQnkdoQC/82mLdK/ffJgweL46muEV056
ix8nsRixpDU+N7LDGddKFFzbKwPkaRaX6cwCl33CxdrSM6FH+wox/prBbekcza/A
kHT3AZ/veB3erFzkbXAgTWzunqiKGKWY6+ZNTcc6e9GWAMkRm6kLK2BZSjqXgxds
pcn6DYYmsOKt6QRCfdWIWl8v61/GKdc=
-----END CERTIFICATE-----
Generated at Tue Oct 20 11:03:04 2026 by rpki-client