Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a5ecc3e-d2b9-3daf-9d98-a8a58c2c5557.roa
File:                     5a5ecc3e-d2b9-3daf-9d98-a8a58c2c5557.roa (raw, json)
Hash identifier:          YP02NyRbHRir1UZDWIzPdb3YAp9gmUpbAJ2lG3TRjQ8=
Subject key identifier:   48:23:EA:4D:83:F6:3A:33:BE:ED:F4:B5:AB:AE:D9:55:48:BA:80:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78D51762E50633F382EBAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a5ecc3e-d2b9-3daf-9d98-a8a58c2c5557.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33667
IP address blocks:        68.87.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8d:51:76:2e:50:63:3f:38:2e:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b9b24faa-aedb-4d50-8059-bfd94256ac3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:08:84:dd:07:8d:04:43:35:fe:e6:80:fb:
                    42:7d:b4:e3:c4:30:c6:9f:f4:f5:40:e7:22:ca:5a:
                    e7:52:65:9f:d1:44:6c:3a:d3:b2:a0:25:7d:9d:70:
                    1b:4f:e1:40:3c:d0:c4:09:61:2b:73:e0:72:7b:8f:
                    2d:84:7c:b0:5f:36:2d:24:16:44:27:29:6e:38:3a:
                    d2:c9:56:57:c0:00:7b:1b:fd:d0:45:31:5d:45:c5:
                    f9:db:e7:fd:07:95:40:89:2c:61:16:f9:4e:ed:8c:
                    45:c7:72:d4:d2:f1:99:ab:7b:d5:f3:ac:75:ba:df:
                    70:52:3a:d3:9c:e6:ab:f8:b9:d5:aa:a6:ef:12:25:
                    22:67:e4:7e:e0:d1:32:66:d2:9c:40:17:62:9b:f0:
                    b9:1c:04:94:bc:5f:3b:68:31:51:4e:39:bd:65:4f:
                    20:40:f3:ec:85:60:11:fc:1d:64:40:09:e7:28:ab:
                    e5:63:7b:b0:8d:33:84:ed:74:9e:a1:31:3a:ee:0a:
                    2f:f7:d7:2c:b1:81:7f:7a:4e:e9:d4:fa:98:25:90:
                    67:f6:87:b8:01:3d:73:d4:01:57:f7:5f:09:64:74:
                    d2:1e:9f:15:e7:a7:d9:c2:a4:7f:3d:c0:17:f9:7f:
                    d6:dd:9c:91:ee:ba:72:35:71:97:b1:ad:f8:5c:48:
                    da:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:23:EA:4D:83:F6:3A:33:BE:ED:F4:B5:AB:AE:D9:55:48:BA:80:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a5ecc3e-d2b9-3daf-9d98-a8a58c2c5557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3f:1b:21:15:86:96:9d:9e:c8:e3:b4:dd:52:fd:06:37:6e:
         15:f1:c0:ff:08:a9:72:be:84:7f:4c:7b:20:16:60:aa:45:43:
         f9:de:7b:43:cf:63:2d:12:ec:e7:33:76:f7:80:08:b6:3b:40:
         5b:db:b3:90:00:fb:db:c2:ec:1b:9f:7b:6d:f3:dd:56:93:63:
         0d:bd:f3:ae:ad:b3:ce:af:7b:a4:94:4d:62:88:c5:ac:81:80:
         65:cc:49:42:62:e7:c4:1b:d3:bd:91:5d:37:4a:50:1e:13:5d:
         da:d5:6e:22:47:45:92:9b:20:a3:f8:98:ce:e8:48:37:96:cd:
         32:38:69:0a:bb:40:4f:52:6b:10:4e:6a:a6:33:66:43:5d:d1:
         32:e8:0f:ab:13:d5:25:db:8c:6c:f7:de:eb:5d:8f:b2:6f:3d:
         f2:bb:9c:fd:13:8b:fd:42:44:00:48:c0:54:fb:31:41:f6:da:
         2b:a4:3a:8c:b9:d0:4e:aa:1a:70:9c:b6:91:35:23:a0:51:eb:
         d1:60:3e:38:33:7c:7e:64:74:e0:50:f5:0f:04:2c:6c:63:19:
         84:15:6e:19:3f:11:1b:b2:73:e4:eb:f2:cd:fd:9b:5d:f1:c9:
         38:d4:64:65:f9:a6:d4:08:05:4a:52:a6:c0:fa:69:8a:3c:0c:
         bd:c9:47:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njVF2LlBjPzguusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjliMjRmYWEtYWVkYi00ZDUwLTgwNTktYmZkOTQyNTZhYzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsugIhN0HjQRDNf7mgPtCfbTjxDDGn/T1QOci
ylrnUmWf0URsOtOyoCV9nXAbT+FAPNDECWErc+Bye48thHywXzYtJBZEJyluODrS
yVZXwAB7G/3QRTFdRcX52+f9B5VAiSxhFvlO7YxFx3LU0vGZq3vV86x1ut9wUjrT
nOar+LnVqqbvEiUiZ+R+4NEyZtKcQBdim/C5HASUvF87aDFRTjm9ZU8gQPPshWAR
/B1kQAnnKKvlY3uwjTOE7XSeoTE67gov99cssYF/ek7p1PqYJZBn9oe4AT1z1AFX
918JZHTSHp8V56fZwqR/PcAX+X/W3ZyR7rpyNXGXsa34XEjaWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgj6k2D9jozvu30tauu2VVIuoC3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWE1ZWNjM2UtZDJiOS0z
ZGFmLTlkOTgtYThhNThjMmM1NTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFfKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKM/GyEVhpadnsjjtN1S/QY3bhXxwP8IqXK+hH9MeyAWYKpFQ/nee0PP
Yy0S7OczdveACLY7QFvbs5AA+9vC7Bufe23z3VaTYw29866ts86ve6SUTWKIxayB
gGXMSUJi58Qb072RXTdKUB4TXdrVbiJHRZKbIKP4mM7oSDeWzTI4aQq7QE9SaxBO
aqYzZkNd0TLoD6sT1SXbjGz33utdj7JvPfK7nP0Ti/1CRABIwFT7MUH22iukOoy5
0E6qGnCctpE1I6BR69FgPjgzfH5kdOBQ9Q8ELGxjGYQVbhk/ERuyc+Tr8s39m13x
yTjUZGX5ptQIBUpSpsD6aYo8DL3JRxQ=
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:24:04 2026 by rpki-client