Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63d1cc3b-9365-3520-afb5-923225dcfd75.roa
File:                     63d1cc3b-9365-3520-afb5-923225dcfd75.roa (raw, json)
Hash identifier:          n9KYyAHWTkgQgSEkLUOSTUFR7RXRZNX92HXk3pzweHo=
Subject key identifier:   F0:B2:99:88:F2:A1:FF:71:9A:4D:A1:0D:D2:70:64:0B:B5:54:ED:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF716E094D6E081FFFD0F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63d1cc3b-9365-3520-afb5-923225dcfd75.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        73.29.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:16:e0:94:d6:e0:81:ff:fd:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=34b346ce-f249-4857-af3d-62892eed1836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:52:e3:2c:f9:59:0b:50:2e:a1:8d:f5:e8:
                    4c:e0:6a:5b:1e:f9:0f:cd:bd:34:f9:7b:97:48:e8:
                    95:85:e3:4b:6f:2e:f8:49:18:ff:a4:d3:d0:b8:f9:
                    27:b4:4b:e3:d2:21:3c:87:94:b8:04:e6:5a:09:e2:
                    68:30:96:2b:69:c7:1c:99:12:33:f4:d4:84:ea:a8:
                    74:c6:5e:ec:b3:93:3c:f0:62:b8:f2:1b:c9:f3:28:
                    b5:c7:35:f8:cd:4c:e0:b9:bd:70:d6:69:fb:0c:41:
                    dc:69:2a:7a:7b:c2:e9:e5:30:94:b3:83:52:6f:6b:
                    5c:5f:8c:a6:e8:51:4d:b9:a3:43:a3:77:21:17:b3:
                    56:a1:59:97:80:9a:2f:15:ca:b1:e5:51:75:dc:bd:
                    07:16:10:e0:92:b9:ba:b0:15:3b:cb:18:ce:8a:05:
                    28:5f:5f:c7:6f:e2:19:1f:36:af:0a:e8:c7:2a:b2:
                    cb:8c:07:da:65:69:30:c7:d8:96:1a:43:2f:aa:1e:
                    c6:86:97:27:b6:1c:40:f2:b3:61:bb:8e:e2:0f:d8:
                    fa:24:0d:24:48:1d:09:6b:82:b1:32:2f:28:21:5f:
                    0b:ce:e9:53:fe:b2:57:35:27:33:67:f4:27:c2:62:
                    d8:16:76:5e:e9:6c:ec:5c:8b:f4:50:f0:05:cc:24:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B2:99:88:F2:A1:FF:71:9A:4D:A1:0D:D2:70:64:0B:B5:54:ED:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63d1cc3b-9365-3520-afb5-923225dcfd75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.29.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a9:71:a8:06:70:d3:8e:2c:89:43:50:01:a9:21:47:54:8c:
         62:6c:25:0f:f5:91:a8:57:ed:e7:15:57:42:5b:e7:f4:da:61:
         64:e9:3d:f2:1f:a0:b2:c1:ec:1b:c1:c7:34:0a:ac:83:78:48:
         c7:eb:4a:d4:f9:a8:a7:50:ec:0c:fc:0c:13:bf:cd:f9:51:c6:
         f2:bb:93:13:7d:a2:58:83:34:4a:a7:df:5b:34:e2:9f:93:a4:
         22:f7:e9:a8:80:98:a0:97:ce:86:7d:a2:4b:bc:2d:74:a9:7e:
         7e:1c:f5:fd:b6:e4:25:7c:d3:e1:3d:a1:a5:4a:88:60:91:66:
         e3:f4:20:69:04:48:90:0c:4f:e5:03:a3:f9:7a:8f:db:54:f2:
         45:d5:d0:27:14:2b:1e:2a:ba:07:a6:1d:fd:10:27:b4:e8:9d:
         92:38:94:64:eb:07:93:03:36:b1:91:f8:4a:38:91:c8:3e:02:
         67:26:01:56:a2:e5:f3:79:a9:64:e1:5d:08:ce:53:ed:95:ed:
         1e:d0:0f:fa:98:35:26:7d:ce:b7:51:b0:59:9f:5a:3e:f2:e2:
         19:35:04:a4:8f:43:ef:b0:74:c6:40:24:a6:59:80:53:1f:0f:
         a9:6a:bf:ca:30:3a:03:97:bb:ee:92:9f:a8:14:42:5b:25:05:
         4c:8d:8f:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9xbglNbggf/9D4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MzRiMzQ2Y2UtZjI0OS00ODU3LWFmM2QtNjI4OTJlZWQxODM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBtS4yz5WQtQLqGN9ehM4GpbHvkPzb00+XuX
SOiVheNLby74SRj/pNPQuPkntEvj0iE8h5S4BOZaCeJoMJYracccmRIz9NSE6qh0
xl7ss5M88GK48hvJ8yi1xzX4zUzgub1w1mn7DEHcaSp6e8Lp5TCUs4NSb2tcX4ym
6FFNuaNDo3chF7NWoVmXgJovFcqx5VF13L0HFhDgkrm6sBU7yxjOigUoX1/Hb+IZ
HzavCujHKrLLjAfaZWkwx9iWGkMvqh7GhpcnthxA8rNhu47iD9j6JA0kSB0Ja4Kx
Mi8oIV8LzulT/rJXNSczZ/QnwmLYFnZe6WzsXIv0UPAFzCT6GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCymYjyof9xmk2hDdJwZAu1VO2RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjNkMWNjM2ItOTM2NS0z
NTIwLWFmYjUtOTIzMjI1ZGNmZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSR1+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFepcagGcNOOLIlDUAGpIUdUjGJsJQ/1kahX7ecVV0Jb5/TaYWTpPfIf
oLLB7BvBxzQKrIN4SMfrStT5qKdQ7Az8DBO/zflRxvK7kxN9oliDNEqn31s04p+T
pCL36aiAmKCXzoZ9oku8LXSpfn4c9f225CV80+E9oaVKiGCRZuP0IGkESJAMT+UD
o/l6j9tU8kXV0CcUKx4qugemHf0QJ7TonZI4lGTrB5MDNrGR+Eo4kcg+AmcmAVai
5fN5qWThXQjOU+2V7R7QD/qYNSZ9zrdRsFmfWj7y4hk1BKSPQ++wdMZAJKZZgFMf
D6lqv8owOgOXu+6Sn6gUQlslBUyNj8A=
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:52:38 2026 by rpki-client