Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72802188-1b16-3f36-93dc-5f398f8e440d.roa
File:                     72802188-1b16-3f36-93dc-5f398f8e440d.roa (raw, json)
Hash identifier:          +6ZBEMRJZVH0sUsxtiCKoPBtQAJqTYKGartV5n/F5kw=
Subject key identifier:   5D:12:77:A3:E1:D7:2B:75:36:D9:00:D5:B1:93:85:AC:D7:1B:5D:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF75132950A97B577655100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72802188-1b16-3f36-93dc-5f398f8e440d.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        71.225.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:51:32:95:0a:97:b5:77:65:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=6e019973-623a-48fd-a27e-9e4b0999abcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:3d:52:1f:c2:ea:85:6d:43:03:8f:9a:1e:
                    6f:25:fa:f2:e4:77:37:dd:b4:9e:49:08:74:db:ba:
                    05:28:d9:2b:4c:26:f9:e9:03:f8:46:30:9c:63:ac:
                    1f:41:ab:76:46:a3:73:53:30:84:47:99:e9:af:9b:
                    a2:4b:72:8d:66:a3:44:1b:8e:c3:16:72:13:11:15:
                    af:4e:34:d8:28:e9:3e:01:3f:48:de:2b:32:4b:c1:
                    73:c2:f5:b6:47:5a:de:5c:53:69:3d:35:a3:29:ae:
                    21:1c:93:40:c2:f9:c9:52:40:a4:57:2c:34:34:f8:
                    0b:55:83:07:32:fe:f6:29:cc:53:12:cc:4f:97:2c:
                    6d:39:2c:a9:3f:9e:ef:8a:2d:ae:cf:24:03:9c:06:
                    1e:5e:50:3f:53:be:e1:a5:f9:41:99:84:f0:41:71:
                    9d:9b:57:a9:46:ab:b9:46:5c:c8:5c:18:f8:be:6c:
                    35:bd:14:2b:ab:4b:9f:02:c6:12:c1:35:8b:00:1b:
                    53:89:15:ca:58:00:44:08:31:8d:61:de:c9:60:29:
                    4e:a7:34:42:9e:8e:42:7b:97:4c:62:9f:a9:0a:4d:
                    71:63:80:f4:6a:6c:be:4c:e2:83:c3:be:d8:5a:75:
                    a2:7a:9a:55:8b:ad:d8:09:02:a0:c0:89:15:31:ee:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:12:77:A3:E1:D7:2B:75:36:D9:00:D5:B1:93:85:AC:D7:1B:5D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72802188-1b16-3f36-93dc-5f398f8e440d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ff:e6:85:75:65:4b:e8:b9:e2:f3:f7:3e:b2:64:82:12:9e:
         09:34:7f:15:17:72:2a:96:a1:00:67:33:64:32:84:d0:f4:0d:
         bd:e4:16:65:dd:c1:83:60:1f:31:f2:40:3e:65:36:17:87:f4:
         31:e9:5b:ba:67:c2:c5:f2:6e:26:76:1d:a7:42:bf:e9:c1:88:
         b8:f9:90:98:91:7f:48:c3:3e:e0:bd:26:f3:a5:ee:29:61:b4:
         b4:67:2a:6a:8f:e3:ab:45:1f:c6:61:71:b4:83:e4:9e:5f:9c:
         70:37:a9:94:39:66:61:62:1b:96:5e:95:8b:e5:b9:31:5b:67:
         6a:cf:ca:9c:58:52:92:5d:3a:f7:a1:76:23:7f:d6:d9:1f:0c:
         1d:6a:d0:5a:19:36:54:b5:80:26:f8:74:34:57:4b:9d:10:c5:
         45:79:7e:3a:3e:57:2b:b5:f9:84:55:b7:a5:51:a6:b7:9d:99:
         3f:b6:28:39:83:fd:1a:d0:c8:ea:1c:d2:2c:be:9d:97:3c:50:
         cf:05:64:4c:22:74:f0:16:eb:54:9d:fa:96:42:d9:f1:47:80:
         77:0a:ab:fb:aa:d2:ff:13:78:9a:fa:37:df:f7:55:d8:56:f2:
         19:1a:a2:23:b7:2a:31:cb:5f:e3:9c:d4:ff:8b:30:11:e2:c9:
         8f:27:6a:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O91EylQqXtXdlUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
NmUwMTk5NzMtNjIzYS00OGZkLWEyN2UtOWU0YjA5OTlhYmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8s9Uh/C6oVtQwOPmh5vJfry5Hc33bSeSQh0
27oFKNkrTCb56QP4RjCcY6wfQat2RqNzUzCER5npr5uiS3KNZqNEG47DFnITERWv
TjTYKOk+AT9I3isyS8FzwvW2R1reXFNpPTWjKa4hHJNAwvnJUkCkVyw0NPgLVYMH
Mv72KcxTEsxPlyxtOSypP57vii2uzyQDnAYeXlA/U77hpflBmYTwQXGdm1epRqu5
RlzIXBj4vmw1vRQrq0ufAsYSwTWLABtTiRXKWABECDGNYd7JYClOpzRCno5Ce5dM
Yp+pCk1xY4D0amy+TOKDw77YWnWieppVi63YCQKgwIkVMe6vIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0Sd6Ph1yt1NtkA1bGThazXG13LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzI4MDIxODgtMWIxNi0z
ZjM2LTkzZGMtNWYzOThmOGU0NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+G0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFn/5oV1ZUvoueLz9z6yZIISngk0fxUXciqWoQBnM2QyhND0Db3kFmXd
wYNgHzHyQD5lNheH9DHpW7pnwsXybiZ2HadCv+nBiLj5kJiRf0jDPuC9JvOl7ilh
tLRnKmqP46tFH8ZhcbSD5J5fnHA3qZQ5ZmFiG5ZelYvluTFbZ2rPypxYUpJdOveh
diN/1tkfDB1q0FoZNlS1gCb4dDRXS50QxUV5fjo+Vyu1+YRVt6VRpredmT+2KDmD
/RrQyOoc0iy+nZc8UM8FZEwidPAW61Sd+pZC2fFHgHcKq/uq0v8TeJr6N9/3VdhW
8hkaoiO3KjHLX+Oc1P+LMBHiyY8nagY=
-----END CERTIFICATE-----
Generated at Tue Apr 21 20:48:50 2026 by rpki-client