Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d56366a-d677-3bd0-9082-69d38a11a387.roa
File:                     6d56366a-d677-3bd0-9082-69d38a11a387.roa (raw, json)
Hash identifier:          hYVvcQkBsT3muGZfX0kUA2nGJvqFQFjXKBFE4k4TpV4=
Subject key identifier:   46:B9:F8:59:78:BA:EA:8A:44:0A:DF:5E:38:00:51:C4:49:51:06:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119DC2DB735E792809BB5A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d56366a-d677-3bd0-9082-69d38a11a387.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        71.194.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:c2:db:73:5e:79:28:09:bb:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=125a60fd-76ac-4d02-a4d1-03b38057cb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:86:77:88:90:fb:f2:0b:85:7d:dd:f3:94:
                    10:01:8d:7a:a7:36:85:bd:96:2f:de:1e:2e:45:04:
                    ca:70:01:f1:d5:6c:3d:a2:87:be:c0:63:82:12:c7:
                    10:0a:05:e8:6e:d0:ec:5d:96:d1:2d:85:5d:03:11:
                    4e:c3:2b:ea:3d:d6:cc:0f:4a:ad:1c:97:76:5f:e0:
                    df:a1:b4:84:7a:d8:61:58:46:35:06:2d:b1:a4:ac:
                    5f:f2:b3:5c:42:7f:18:cd:8a:91:90:03:a8:ca:20:
                    b7:eb:1b:cb:09:3a:82:25:1c:20:6c:bf:90:23:bb:
                    0a:a6:7c:15:e1:c8:1c:90:26:e6:55:b5:e6:b4:f5:
                    79:44:ea:cf:4f:f4:53:5f:95:f3:0b:60:34:2b:db:
                    36:86:8b:74:88:85:b1:f3:12:26:1e:36:6e:18:7a:
                    b7:da:09:37:5d:06:2f:3c:59:4a:fe:54:5a:54:af:
                    d5:16:6a:7f:04:f2:75:e4:4b:84:c7:a9:24:75:1d:
                    2d:2c:fa:9d:1b:26:24:3a:c5:ea:52:fd:ef:1b:e5:
                    9d:61:99:08:4b:c4:39:ab:f6:63:f4:ba:4b:8d:a9:
                    0a:63:a3:39:6e:a4:6d:6c:55:c3:d2:ea:da:70:02:
                    88:ce:0e:80:e8:d6:dc:72:c7:62:bf:8f:80:5b:ab:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B9:F8:59:78:BA:EA:8A:44:0A:DF:5E:38:00:51:C4:49:51:06:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d56366a-d677-3bd0-9082-69d38a11a387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.194.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:96:92:30:38:1c:85:e8:8e:fe:39:36:80:f6:f5:dd:88:f3:
         32:be:38:cb:3d:a0:38:59:44:d4:44:17:d5:75:4a:b7:a6:2c:
         78:20:da:32:50:a1:74:ae:5b:3a:1e:4f:4e:7a:ea:2d:8b:43:
         30:d5:03:3e:c8:49:45:ba:d7:cb:76:e0:00:da:17:f2:bf:c6:
         54:bb:0c:50:21:e6:f2:97:52:58:77:19:07:d0:f5:69:63:f4:
         0d:d7:0a:9b:7b:01:7a:54:a1:b0:b4:54:bd:fa:d6:14:61:83:
         ae:e1:57:2c:34:0f:7a:8a:af:e9:58:56:b7:9c:52:52:bc:d5:
         72:29:3a:fe:a9:e6:43:a1:19:dd:48:cc:93:07:64:ff:bf:69:
         46:55:42:08:2a:49:a1:a2:eb:a7:ae:88:c5:6f:7b:58:02:e8:
         86:ba:ea:3a:fb:c9:84:49:11:77:23:72:08:77:fb:20:b4:30:
         49:98:17:c9:6f:31:31:06:f6:5e:87:78:a8:68:d9:ef:4a:6b:
         b1:a3:79:04:aa:1e:6b:af:e4:d6:ec:50:26:ea:a0:b0:30:ec:
         23:a7:fa:38:85:fa:82:29:44:16:20:d0:9b:05:6e:1a:ef:47:
         af:ea:f7:57:8a:cf:17:11:98:a7:cb:38:a6:ee:57:80:cd:1d:
         a9:4b:93:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RncLbc155KAm7WoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTI1YTYwZmQtNzZhYy00ZDAyLWE0ZDEtMDNiMzgwNTdjYjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC6Gd4iQ+/ILhX3d85QQAY16pzaFvZYv3h4u
RQTKcAHx1Ww9ooe+wGOCEscQCgXobtDsXZbRLYVdAxFOwyvqPdbMD0qtHJd2X+Df
obSEethhWEY1Bi2xpKxf8rNcQn8YzYqRkAOoyiC36xvLCTqCJRwgbL+QI7sKpnwV
4cgckCbmVbXmtPV5ROrPT/RTX5XzC2A0K9s2hot0iIWx8xImHjZuGHq32gk3XQYv
PFlK/lRaVK/VFmp/BPJ15EuEx6kkdR0tLPqdGyYkOsXqUv3vG+WdYZkIS8Q5q/Zj
9LpLjakKY6M5bqRtbFXD0uracAKIzg6A6Nbccsdiv4+AW6soBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEa5+Fl4uuqKRArfXjgAUcRJUQYWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmQ1NjM2NmEtZDY3Ny0z
YmQwLTkwODItNjlkMzhhMTFhMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8L2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJaWkjA4HIXojv45NoD29d2I8zK+OMs9oDhZRNREF9V1SremLHgg2jJQ
oXSuWzoeT0566i2LQzDVAz7ISUW618t24ADaF/K/xlS7DFAh5vKXUlh3GQfQ9Wlj
9A3XCpt7AXpUobC0VL361hRhg67hVyw0D3qKr+lYVrecUlK81XIpOv6p5kOhGd1I
zJMHZP+/aUZVQggqSaGi66euiMVve1gC6Ia66jr7yYRJEXcjcgh3+yC0MEmYF8lv
MTEG9l6HeKho2e9Ka7GjeQSqHmuv5NbsUCbqoLAw7COn+jiF+oIpRBYg0JsFbhrv
R6/q91eKzxcRmKfLOKbuV4DNHalLk7g=
-----END CERTIFICATE-----
Generated at Sat Sep 5 15:22:52 2026 by rpki-client