Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/815437f8-e5bc-30f7-91c9-75a6f18005e0.roa
File:                     815437f8-e5bc-30f7-91c9-75a6f18005e0.roa (raw, json)
Hash identifier:          1Siv3x/3GGD7TbCz46zPtnbxbtO4kcAfFYt3svVCvh0=
Subject key identifier:   7B:3D:96:93:FD:9B:0C:B4:CD:AD:19:38:A8:7B:BC:1B:5F:28:A6:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3A52E80AA9978E0D29A700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/815437f8-e5bc-30f7-91c9-75a6f18005e0.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33660
IP address blocks:        67.172.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:52:e8:0a:a9:97:8e:0d:29:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=533233f7-da85-4752-9623-af2f93b76684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:e5:1e:cd:96:0d:ba:e8:e8:b7:56:b0:56:
                    93:82:67:b6:3d:8b:56:1b:5a:3a:86:5d:0a:60:48:
                    58:6e:fb:63:7f:b4:dd:c3:d9:05:96:56:3a:68:ab:
                    24:7a:13:c6:63:99:20:8a:91:b2:c6:ab:d0:fa:ed:
                    3a:09:a6:52:ef:ab:d6:29:04:f0:c7:bd:f7:25:d3:
                    7f:a4:d2:de:de:55:e2:ba:10:34:24:3a:b5:f7:f7:
                    8a:da:92:6e:fc:71:42:1c:b5:56:64:01:76:27:7d:
                    5f:06:db:47:87:eb:e4:4e:36:3b:96:05:16:52:a9:
                    25:fa:70:20:ab:74:41:fd:c4:3f:73:d6:15:d8:3d:
                    f0:96:6b:05:31:d9:68:0d:b1:2c:0d:39:ae:69:de:
                    81:03:55:d6:ef:7e:23:8d:de:48:be:94:63:eb:b3:
                    a3:e5:99:ef:09:54:b5:45:5f:ce:b4:0a:20:8b:3c:
                    cc:03:05:ed:2f:e8:c8:18:96:ea:fd:b5:df:e1:4c:
                    c1:e9:f6:c0:c8:12:1e:c6:83:4f:f8:d2:98:33:eb:
                    80:6d:fd:75:fc:62:27:31:ca:ce:dd:0b:a9:1f:3f:
                    1f:85:7f:b0:2b:c6:ac:87:af:cf:c7:6a:23:33:17:
                    ea:d7:f3:ab:82:0c:87:5e:32:b4:9e:09:7c:40:70:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3D:96:93:FD:9B:0C:B4:CD:AD:19:38:A8:7B:BC:1B:5F:28:A6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/815437f8-e5bc-30f7-91c9-75a6f18005e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.172.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:ff:01:df:79:8b:fa:61:1b:3d:ed:f6:07:4b:66:9e:3b:
         8c:8f:ae:ab:bb:cd:cd:93:7b:d4:79:53:c6:d7:f1:0b:45:3b:
         80:4e:e9:d6:ef:58:3f:53:3a:6e:56:79:19:a5:6e:27:6b:8d:
         78:9c:bb:3b:bf:b1:26:ec:1f:f8:bb:bd:a7:62:f5:99:1d:27:
         3f:9a:1f:93:54:40:7a:8b:e5:b7:b3:53:66:ff:0d:6c:29:ef:
         0c:c5:32:18:29:6d:3f:66:0e:77:cc:7a:63:87:9f:eb:f9:a4:
         b1:41:f4:18:4b:4c:67:d6:50:94:fe:52:26:a5:63:e9:d1:a3:
         60:25:29:23:47:70:cb:ad:ad:09:de:f2:87:41:c2:62:95:f4:
         67:30:4f:1e:ea:0b:d2:49:c3:72:77:89:9c:1d:ce:2d:62:0a:
         3b:b9:97:2f:d0:3c:3d:7b:90:ce:97:52:fd:8f:4d:d1:dd:e0:
         0e:5f:ef:2d:90:56:5f:4d:9b:95:cd:85:e2:74:b3:4c:82:e5:
         a3:91:63:bb:e4:2b:49:c6:6f:77:9d:15:a6:69:f9:21:d9:a4:
         c5:2e:02:6a:5e:41:01:2b:8d:8a:80:76:66:61:a1:1d:4e:4b:
         33:5e:aa:00:df:e8:d6:dc:4b:e2:d7:e5:a9:76:86:b4:65:0c:
         50:1f:08:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOlLoCqmXjg0ppwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NTMzMjMzZjctZGE4NS00NzUyLTk2MjMtYWYyZjkzYjc2Njg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttXlHs2WDbro6LdWsFaTgme2PYtWG1o6hl0K
YEhYbvtjf7Tdw9kFllY6aKskehPGY5kgipGyxqvQ+u06CaZS76vWKQTwx733JdN/
pNLe3lXiuhA0JDq19/eK2pJu/HFCHLVWZAF2J31fBttHh+vkTjY7lgUWUqkl+nAg
q3RB/cQ/c9YV2D3wlmsFMdloDbEsDTmuad6BA1XW734jjd5IvpRj67Oj5ZnvCVS1
RV/OtAogizzMAwXtL+jIGJbq/bXf4UzB6fbAyBIexoNP+NKYM+uAbf11/GInMcrO
3QupHz8fhX+wK8ash6/Px2ojMxfq1/OrggyHXjK0ngl8QHAk1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHs9lpP9mwy0za0ZOKh7vBtfKKYUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODE1NDM3ZjgtZTViYy0z
MGY3LTkxYzktNzVhNmYxODAwNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6zuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGw3/wHfeYv6YRs97fYHS2aeO4yPrqu7zc2Te9R5U8bX8QtFO4BO6dbv
WD9TOm5WeRmlbidrjXicuzu/sSbsH/i7vadi9ZkdJz+aH5NUQHqL5bezU2b/DWwp
7wzFMhgpbT9mDnfMemOHn+v5pLFB9BhLTGfWUJT+UialY+nRo2AlKSNHcMutrQne
8odBwmKV9GcwTx7qC9JJw3J3iZwdzi1iCju5ly/QPD17kM6XUv2PTdHd4A5f7y2Q
Vl9Nm5XNheJ0s0yC5aORY7vkK0nGb3edFaZp+SHZpMUuAmpeQQErjYqAdmZhoR1O
SzNeqgDf6NbcS+LX5al2hrRlDFAfCCg=
-----END CERTIFICATE-----
Generated at Fri Jul 10 19:06:40 2026 by rpki-client