Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/799a4d34-36f2-3170-855c-b03d86632fbf.roa
File:                     799a4d34-36f2-3170-855c-b03d86632fbf.roa (raw, json)
Hash identifier:          DiCR2PJoDa8SnZGtIaiMOVP3qyN5ZdSEMjpmDwkYTko=
Subject key identifier:   15:A0:31:60:61:FF:63:61:74:39:74:B5:4B:73:41:A5:81:0B:82:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF8B49C492FB5A6E8027900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/799a4d34-36f2-3170-855c-b03d86632fbf.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.189.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:b4:9c:49:2f:b5:a6:e8:02:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=e86b6daf-ef46-4dcb-bd8e-913d3ac38edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:85:e3:46:db:a1:be:e8:85:ab:83:09:2a:9d:
                    1f:19:38:75:6e:4b:68:95:b4:b7:6b:52:e7:82:78:
                    cd:3d:fd:ea:1d:39:85:53:9a:c0:fc:76:60:dc:16:
                    05:5e:72:d4:c1:63:19:e3:9c:d6:cd:03:a8:78:85:
                    79:e5:6c:42:61:97:0b:70:d7:fb:03:fa:e3:6d:12:
                    cb:30:76:a5:89:82:1f:48:b0:c1:4c:0f:e6:b0:62:
                    7d:aa:76:84:99:04:a5:af:5f:79:cf:25:11:f7:60:
                    d6:a8:5b:fe:f8:9b:70:c7:0d:1c:d7:ab:5d:38:f1:
                    7a:8c:d7:86:1a:cd:39:a2:f8:1e:00:d8:ea:e3:7b:
                    1c:f9:e9:e4:3e:71:9a:f3:b0:4e:57:14:07:a0:ee:
                    20:b4:11:74:93:e9:fe:ca:a9:01:57:7c:af:44:fb:
                    72:fc:2d:47:05:e8:b2:1f:22:7a:59:74:f6:65:51:
                    88:58:d6:ce:67:30:76:77:01:36:7c:4d:aa:51:66:
                    e6:c5:2a:29:9a:17:ec:9b:de:f7:2d:b9:dc:12:41:
                    13:9b:b4:64:68:10:4c:4a:5c:d5:fe:89:67:2b:5d:
                    9f:9a:2a:c1:c3:e7:28:2e:26:37:31:24:ab:00:4d:
                    94:23:de:13:57:62:6c:78:be:9c:49:4f:3e:d0:4a:
                    c9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A0:31:60:61:FF:63:61:74:39:74:B5:4B:73:41:A5:81:0B:82:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/799a4d34-36f2-3170-855c-b03d86632fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.189.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:02:9f:54:a6:55:45:9b:14:aa:bd:bf:b3:f7:a4:99:1e:2a:
         a4:f5:e8:f2:69:6b:4a:3c:43:40:10:64:19:f1:c4:ea:dd:e0:
         24:9f:67:d9:cd:ae:95:ec:03:56:86:23:47:34:98:f0:6f:c9:
         10:3d:a8:52:0f:49:40:e6:84:6c:c3:69:b8:a2:f3:a8:9e:93:
         b3:25:5a:00:79:31:f4:5d:9d:02:ab:28:df:8e:26:53:82:ce:
         03:0a:2b:fa:ed:5c:93:2c:c5:4c:62:79:ea:fb:0e:3c:49:18:
         c7:45:82:63:f1:14:7f:52:a6:7d:2c:bd:a8:de:79:21:31:48:
         02:dc:3d:3d:0f:e0:fd:84:ef:f5:40:56:d8:f0:d3:c8:23:c4:
         1c:65:7a:29:ef:bd:10:c5:fd:d9:39:27:87:fc:0b:20:c4:a4:
         92:1b:b7:6c:3a:e8:4a:aa:c0:25:6e:3d:d4:7f:46:87:1e:b6:
         a8:06:6a:c9:75:03:38:a3:ce:bb:fe:b1:55:8a:cd:39:a8:bb:
         df:6d:e0:32:9a:dd:6f:f8:1b:e0:88:f5:c8:49:03:3a:4b:49:
         16:39:8b:7e:e7:6c:22:62:f3:5e:21:d4:42:ca:e9:1b:83:1e:
         8c:71:76:98:8a:43:9c:8f:af:4d:99:51:74:42:3f:da:fe:e9:
         c3:e2:86:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+LScSS+1pugCeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZTg2YjZkYWYtZWY0Ni00ZGNiLWJkOGUtOTEzZDNhYzM4ZWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoXjRtuhvuiFq4MJKp0fGTh1bktolbS3a1Ln
gnjNPf3qHTmFU5rA/HZg3BYFXnLUwWMZ45zWzQOoeIV55WxCYZcLcNf7A/rjbRLL
MHaliYIfSLDBTA/msGJ9qnaEmQSlr195zyUR92DWqFv++Jtwxw0c16tdOPF6jNeG
Gs05ovgeANjq43sc+enkPnGa87BOVxQHoO4gtBF0k+n+yqkBV3yvRPty/C1HBeiy
HyJ6WXT2ZVGIWNbOZzB2dwE2fE2qUWbmxSopmhfsm973LbncEkETm7RkaBBMSlzV
/olnK12fmirBw+coLiY3MSSrAE2UI94TV2JseL6cSU8+0ErJ/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWgMWBh/2NhdDl0tUtzQaWBC4JPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzk5YTRkMzQtMzZmMi0z
MTcwLTg1NWMtYjAzZDg2NjMyZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASb3lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcCn1SmVUWbFKq9v7P3pJkeKqT16PJpa0o8Q0AQZBnxxOrd4CSfZ9nN
rpXsA1aGI0c0mPBvyRA9qFIPSUDmhGzDabii86iek7MlWgB5MfRdnQKrKN+OJlOC
zgMKK/rtXJMsxUxieer7DjxJGMdFgmPxFH9Spn0svajeeSExSALcPT0P4P2E7/VA
Vtjw08gjxBxleinvvRDF/dk5J4f8CyDEpJIbt2w66EqqwCVuPdR/RocetqgGasl1
Azijzrv+sVWKzTmou99t4DKa3W/4G+CI9chJAzpLSRY5i37nbCJi814h1ELK6RuD
HoxxdpiKQ5yPr02ZUXRCP9r+6cPihuo=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:20:38 2026 by rpki-client