Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cbe19c7-d8cf-3b0b-91db-d96b3aba6d8e.roa
File:                     7cbe19c7-d8cf-3b0b-91db-d96b3aba6d8e.roa (raw, json)
Hash identifier:          bhpJkuy+XH/P2B+5KXrOfAeJGgh6rqhxbOuDXAjP+EI=
Subject key identifier:   1E:F0:47:86:3A:4D:E9:56:64:AB:19:E8:A7:98:FF:13:7F:45:06:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6752DC054E856CB16D600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cbe19c7-d8cf-3b0b-91db-d96b3aba6d8e.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        76.141.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:75:2d:c0:54:e8:56:cb:16:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=05e4da18-cddc-4221-a5cf-5d9db2740b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d7:e4:44:e7:1c:9b:53:22:32:80:ae:04:e6:
                    e9:43:b2:20:15:14:c5:bb:2b:6f:12:d3:26:9b:57:
                    31:de:43:a0:5b:01:0a:a2:05:c9:7b:17:81:7b:29:
                    f0:fa:10:83:2c:31:53:a4:3a:92:ea:fc:4e:13:18:
                    2c:2b:9d:94:10:ba:c8:63:fb:46:34:11:08:48:a2:
                    82:7e:6d:bf:23:9c:f4:3c:0f:2b:6a:41:f3:29:4b:
                    44:86:c1:e2:5a:d6:5f:3b:fc:2c:95:6a:cf:58:6b:
                    12:7c:22:56:d8:3f:0b:e8:aa:75:8f:6c:7f:7c:4a:
                    20:f3:aa:cd:cc:f8:10:2b:4b:75:56:1e:ae:e1:03:
                    ce:a2:c1:1a:08:2d:37:dc:00:97:46:52:fb:ee:93:
                    16:fa:39:69:6d:88:cc:e9:6f:ba:a3:7d:0e:68:44:
                    3a:7b:49:1c:68:cd:0e:af:09:d7:bb:4f:3c:a6:9c:
                    da:3d:13:cb:b0:2e:ef:05:69:6a:72:bf:ec:d6:39:
                    6f:40:32:19:be:33:0e:00:db:dc:86:ac:25:0c:f4:
                    d1:23:28:8b:ff:ae:1f:83:49:83:55:78:7f:88:ba:
                    03:ff:5c:89:ce:10:5b:bd:cc:bf:ce:18:07:9b:0d:
                    51:d2:6b:78:46:ca:53:f3:32:5c:06:f0:3d:22:5c:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F0:47:86:3A:4D:E9:56:64:AB:19:E8:A7:98:FF:13:7F:45:06:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cbe19c7-d8cf-3b0b-91db-d96b3aba6d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.141.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:a8:5f:ef:6b:a2:44:28:3c:ea:a6:5a:b9:aa:38:d8:3c:
         52:31:16:fa:44:c0:89:be:54:f9:15:c0:71:9e:aa:06:13:c6:
         7c:e3:f6:6f:c5:06:01:ab:49:c2:4a:70:bf:7f:40:b0:bd:41:
         78:64:01:c2:98:19:48:66:3b:a6:60:22:c3:33:a5:cc:23:68:
         5a:eb:c1:fe:4e:ff:6e:08:8b:47:59:76:14:1f:7a:1e:b9:59:
         c7:ec:73:86:d7:03:3c:93:d9:aa:92:2e:66:56:1c:11:3d:3e:
         a3:28:51:f1:8b:93:3d:92:b4:3b:12:7e:95:68:02:0c:b3:17:
         a8:17:77:35:dd:89:cd:30:63:ab:17:fe:9c:ad:dc:73:47:40:
         22:95:1e:f1:77:5c:1e:60:70:26:aa:c7:a8:f9:50:f5:d4:71:
         c7:38:e6:34:ad:fe:7a:ad:ab:52:1e:c4:4d:46:a4:6e:d5:89:
         78:cb:c6:76:d3:49:2a:58:15:b6:fb:81:9a:9e:f7:95:81:15:
         cf:fc:30:5c:89:de:18:65:3e:79:90:e4:11:5b:e9:96:3b:59:
         6a:73:35:eb:1c:9a:b2:d4:93:7d:c3:bf:76:2f:c6:dc:09:92:
         70:e8:a3:e9:20:82:2d:18:f1:2b:92:06:d2:a7:8b:49:34:8f:
         d4:62:e7:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9nUtwFToVssW1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MDVlNGRhMTgtY2RkYy00MjIxLWE1Y2YtNWQ5ZGIyNzQwYjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9fkROccm1MiMoCuBObpQ7IgFRTFuytvEtMm
m1cx3kOgWwEKogXJexeBeynw+hCDLDFTpDqS6vxOExgsK52UELrIY/tGNBEISKKC
fm2/I5z0PA8rakHzKUtEhsHiWtZfO/wslWrPWGsSfCJW2D8L6Kp1j2x/fEog86rN
zPgQK0t1Vh6u4QPOosEaCC033ACXRlL77pMW+jlpbYjM6W+6o30OaEQ6e0kcaM0O
rwnXu088ppzaPRPLsC7vBWlqcr/s1jlvQDIZvjMOANvchqwlDPTRIyiL/64fg0mD
VXh/iLoD/1yJzhBbvcy/zhgHmw1R0mt4RspT8zJcBvA9IlyPxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB7wR4Y6TelWZKsZ6KeY/xN/RQYcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2NiZTE5YzctZDhjZi0z
YjBiLTkxZGItZDk2YjNhYmE2ZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI0iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJMqF/va6JEKDzqplq5qjjYPFIxFvpEwIm+VPkVwHGeqgYTxnzj9m/F
BgGrScJKcL9/QLC9QXhkAcKYGUhmO6ZgIsMzpcwjaFrrwf5O/24Ii0dZdhQfeh65
Wcfsc4bXAzyT2aqSLmZWHBE9PqMoUfGLkz2StDsSfpVoAgyzF6gXdzXdic0wY6sX
/pyt3HNHQCKVHvF3XB5gcCaqx6j5UPXUccc45jSt/nqtq1IexE1GpG7ViXjLxnbT
SSpYFbb7gZqe95WBFc/8MFyJ3hhlPnmQ5BFb6ZY7WWpzNescmrLUk33Dv3YvxtwJ
knDoo+kggi0Y8SuSBtKni0k0j9Ri52w=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:12:44 2026 by rpki-client