Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6da9a598-143d-34d0-9647-d289e49262f5.roa
File:                     6da9a598-143d-34d0-9647-d289e49262f5.roa (raw, json)
Hash identifier:          5HWrEeysHHp4NTkFdf0z42hlE8TMl8sIgOgHGwc3K6U=
Subject key identifier:   AE:DF:F5:76:C1:3F:E0:4A:F1:A3:BD:5D:44:99:6D:1A:AE:B3:0C:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF33BEA69067B73B5D48A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6da9a598-143d-34d0-9647-d289e49262f5.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        71.56.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:33:be:a6:90:67:b7:3b:5d:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=1d803a9f-ed33-4c48-8361-4105e5af52f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b0:4c:fd:3a:d5:42:ce:2f:46:5b:6c:d7:46:
                    1c:ad:f9:89:3a:21:a8:c6:e9:4b:ce:a1:ac:bb:b5:
                    92:5f:a5:40:52:0f:88:7b:65:b0:3c:cf:f6:2d:75:
                    91:21:dd:17:91:c3:b9:ae:5e:da:d4:2b:d5:f7:77:
                    b9:41:b8:a6:32:4d:d7:5a:94:6f:c6:8e:12:25:92:
                    b4:09:1e:90:8e:ba:20:0b:69:e3:7f:66:cf:2e:0d:
                    2a:f5:c8:64:4a:44:9c:2c:d0:ac:73:9e:1a:e5:a7:
                    cc:51:52:d8:fa:24:1c:f1:58:b8:01:cb:4b:3a:dc:
                    ac:a5:e2:3f:b2:d7:4b:d4:99:31:6b:34:47:08:f9:
                    88:d0:13:50:82:5f:44:cc:0e:90:07:46:f3:8b:89:
                    8a:f0:c7:6f:bd:04:30:3e:4c:46:b9:d6:96:7e:55:
                    36:12:a2:ad:6f:10:37:6f:4c:12:dc:1a:3c:bf:07:
                    e9:1f:75:6f:b5:27:d7:de:1b:67:80:8e:3a:90:3d:
                    90:b2:48:cf:e5:a3:c5:4f:64:b1:51:fb:34:c2:d6:
                    0b:25:5d:bd:20:d4:43:bc:b5:8c:c7:a7:93:b5:9e:
                    37:fc:24:89:bf:13:02:7e:4b:69:e2:14:6b:a2:52:
                    46:e8:b6:aa:e7:f5:69:71:56:fb:f9:de:11:e6:18:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DF:F5:76:C1:3F:E0:4A:F1:A3:BD:5D:44:99:6D:1A:AE:B3:0C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6da9a598-143d-34d0-9647-d289e49262f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.56.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:66:64:5e:ab:f1:72:c0:25:a7:69:c8:34:23:e6:93:49:
         bd:fa:c8:f3:ec:da:8d:22:80:40:17:18:0e:29:7d:6f:b2:e6:
         77:85:b6:7b:6e:5b:c4:da:ac:c8:14:cd:7a:b3:62:32:eb:8a:
         cc:fb:b2:cb:cc:7f:41:b2:91:af:d4:99:13:b0:12:79:ec:e7:
         8e:65:81:ce:71:40:df:ce:98:85:64:85:57:3f:2e:a9:19:3c:
         9f:da:1c:19:26:0f:bc:ae:56:09:9f:d9:df:a1:6f:40:d6:20:
         c3:62:20:a9:0c:75:26:dc:e7:1c:58:d1:88:9b:ba:26:9a:02:
         77:bb:1d:da:a1:01:1b:3c:c0:43:18:0a:c1:3b:f0:8e:70:0e:
         63:08:ef:1c:52:05:6a:00:f6:70:c7:22:2d:ec:f5:3f:19:f7:
         c9:fb:31:09:a4:46:4b:42:6e:ca:3a:17:9d:49:0c:7b:b6:a7:
         c4:37:d8:06:38:26:7d:f2:72:49:57:6e:fe:83:fc:95:31:04:
         2a:92:55:1d:b7:c1:1d:5a:fd:f3:7f:5a:f4:e1:9d:c0:68:78:
         a8:c5:3b:c5:2e:bf:f3:24:8c:56:fa:ea:3b:67:85:3d:6d:58:
         14:3d:e8:b0:3d:50:bf:43:36:8a:01:c2:96:b6:3f:9a:fc:e0:
         da:9c:d8:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/zO+ppBntztdSKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
MWQ4MDNhOWYtZWQzMy00YzQ4LTgzNjEtNDEwNWU1YWY1MmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57BM/TrVQs4vRlts10YcrfmJOiGoxulLzqGs
u7WSX6VAUg+Ie2WwPM/2LXWRId0XkcO5rl7a1CvV93e5QbimMk3XWpRvxo4SJZK0
CR6QjrogC2njf2bPLg0q9chkSkScLNCsc54a5afMUVLY+iQc8Vi4ActLOtyspeI/
stdL1JkxazRHCPmI0BNQgl9EzA6QB0bzi4mK8MdvvQQwPkxGudaWflU2EqKtbxA3
b0wS3Bo8vwfpH3VvtSfX3htngI46kD2QskjP5aPFT2SxUfs0wtYLJV29INRDvLWM
x6eTtZ43/CSJvxMCfktp4hRrolJG6Laq5/VpcVb7+d4R5hi/7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK7f9XbBP+BK8aO9XUSZbRquswzNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmRhOWE1OTgtMTQzZC0z
NGQwLTk2NDctZDI4OWU0OTI2MmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRziQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILvZmReq/FywCWnacg0I+aTSb36yPPs2o0igEAXGA4pfW+y5neFtntu
W8TarMgUzXqzYjLrisz7ssvMf0Gyka/UmROwEnns545lgc5xQN/OmIVkhVc/LqkZ
PJ/aHBkmD7yuVgmf2d+hb0DWIMNiIKkMdSbc5xxY0YibuiaaAne7HdqhARs8wEMY
CsE78I5wDmMI7xxSBWoA9nDHIi3s9T8Z98n7MQmkRktCbso6F51JDHu2p8Q32AY4
Jn3ycklXbv6D/JUxBCqSVR23wR1a/fN/WvThncBoeKjFO8Uuv/MkjFb66jtnhT1t
WBQ96LA9UL9DNooBwpa2P5r84Nqc2F0=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:20:19 2026 by rpki-client