Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52126a17-77f3-30f2-9be8-b7a72e21189a.roa
File:                     52126a17-77f3-30f2-9be8-b7a72e21189a.roa (raw, json)
Hash identifier:          Hf8r2nFPAdIDlbr/OyolyM0B9imFdbsQqt2MtOV1XmQ=
Subject key identifier:   07:9A:6B:4C:90:52:EB:FE:6A:DF:E2:CD:33:DD:0E:94:DF:D2:3F:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4EA7E81295A15081E6AF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52126a17-77f3-30f2-9be8-b7a72e21189a.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        73.206.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:a7:e8:12:95:a1:50:81:e6:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=ef0ef64b-0574-45fa-ac7d-16c0fd651fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:cc:d1:9a:0c:0f:71:8a:16:d5:91:51:ca:
                    5b:39:7e:1d:cc:6b:15:c3:78:79:e1:1d:3c:39:06:
                    be:9f:f2:2c:0e:2a:90:38:e6:75:86:1a:c8:54:81:
                    09:f7:31:b6:07:17:ee:fa:59:14:d2:7e:c9:03:06:
                    18:f0:5b:01:a5:ba:d6:52:32:72:d0:bf:39:0a:4c:
                    76:41:f3:e6:86:c4:b1:90:d4:30:69:3e:37:b3:ee:
                    de:cb:68:79:6c:8a:41:49:90:33:f0:4a:6a:9e:df:
                    04:e4:fd:a4:14:7e:c3:57:f9:95:dc:ad:55:1b:36:
                    79:6e:9e:db:26:4f:94:11:b5:24:2d:d3:2e:09:18:
                    30:77:cf:52:c6:b1:0e:98:a5:dc:28:ce:7e:8b:d6:
                    72:3d:07:f5:47:34:f0:ec:f0:eb:e8:13:4d:7c:02:
                    67:bc:10:93:5c:31:5d:f7:df:1b:48:27:32:7b:a6:
                    b8:0f:f2:cf:09:21:ed:05:97:fa:36:c7:51:a9:6a:
                    44:26:b4:a6:74:a3:e3:1c:fe:05:fc:95:ff:4d:3e:
                    16:ce:74:07:db:2d:43:cf:61:ce:c1:ed:01:75:e0:
                    30:57:6e:16:b9:14:f4:f5:59:22:13:d1:f4:4b:81:
                    ce:55:9c:06:d9:25:84:c4:38:5a:71:6c:60:0f:b8:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9A:6B:4C:90:52:EB:FE:6A:DF:E2:CD:33:DD:0E:94:DF:D2:3F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52126a17-77f3-30f2-9be8-b7a72e21189a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.206.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:10:d5:a3:f7:78:f6:86:11:c7:a0:97:dd:67:e3:f6:58:14:
         aa:6d:39:06:ed:7e:54:44:f0:5d:8c:55:6e:c2:2d:bd:6f:9d:
         4b:ec:6f:13:d7:a6:c3:c8:0d:b8:0f:79:e0:c7:ad:d6:9b:ff:
         4f:89:0e:b8:18:db:fc:62:9e:57:0b:73:dd:10:d9:25:a7:f8:
         8e:02:a6:e7:9a:82:bd:e0:6b:23:e3:59:e2:ee:e5:05:4d:fa:
         2b:31:47:cb:e1:f1:f4:d6:e3:f5:e1:63:65:75:31:14:23:2d:
         de:9f:f9:f7:af:d3:ca:f2:cd:f0:5d:bc:4e:ad:8b:f7:80:52:
         32:15:bd:56:4b:4b:09:3a:21:c3:3e:9e:d9:49:14:13:e1:b5:
         ae:36:8f:e4:e6:6b:39:04:1e:2b:0c:27:cd:2a:14:fb:93:15:
         0b:90:04:4e:6d:60:20:9f:30:42:e4:94:ae:63:90:99:3f:8a:
         b4:41:72:72:44:61:06:d3:be:a1:a5:84:86:77:97:26:5e:2d:
         5a:8f:e0:c6:62:08:ea:58:a8:06:7f:9a:3b:85:7e:97:2d:38:
         b7:a3:b7:a1:94:6a:e6:15:96:ca:80:a2:45:a6:80:7a:55:0c:
         7c:cf:08:a7:19:ed:f6:a3:85:62:90:3c:cc:ef:b8:b5:18:73:
         b9:3f:17:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TqfoEpWhUIHmr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZWYwZWY2NGItMDU3NC00NWZhLWFjN2QtMTZjMGZkNjUxZmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCXM0ZoMD3GKFtWRUcpbOX4dzGsVw3h54R08
OQa+n/IsDiqQOOZ1hhrIVIEJ9zG2Bxfu+lkU0n7JAwYY8FsBpbrWUjJy0L85Ckx2
QfPmhsSxkNQwaT43s+7ey2h5bIpBSZAz8Epqnt8E5P2kFH7DV/mV3K1VGzZ5bp7b
Jk+UEbUkLdMuCRgwd89SxrEOmKXcKM5+i9ZyPQf1RzTw7PDr6BNNfAJnvBCTXDFd
998bSCcye6a4D/LPCSHtBZf6NsdRqWpEJrSmdKPjHP4F/JX/TT4WznQH2y1Dz2HO
we0BdeAwV24WuRT09VkiE9H0S4HOVZwG2SWExDhacWxgD7jnGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAeaa0yQUuv+at/izTPdDpTf0j8+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTIxMjZhMTctNzdmMy0z
MGYyLTliZTgtYjdhNzJlMjExODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSc7oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYQ1aP3ePaGEcegl91n4/ZYFKptOQbtflRE8F2MVW7CLb1vnUvsbxPX
psPIDbgPeeDHrdab/0+JDrgY2/xinlcLc90Q2SWn+I4Cpueagr3gayPjWeLu5QVN
+isxR8vh8fTW4/XhY2V1MRQjLd6f+fev08ryzfBdvE6ti/eAUjIVvVZLSwk6IcM+
ntlJFBPhta42j+TmazkEHisMJ80qFPuTFQuQBE5tYCCfMELklK5jkJk/irRBcnJE
YQbTvqGlhIZ3lyZeLVqP4MZiCOpYqAZ/mjuFfpctOLejt6GUauYVlsqAokWmgHpV
DHzPCKcZ7fajhWKQPMzvuLUYc7k/Fxs=
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:18:25 2026 by rpki-client