Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8552b941-ab9e-3f89-97b4-46c62b844ede.roa
File:                     8552b941-ab9e-3f89-97b4-46c62b844ede.roa (raw, json)
Hash identifier:          ceuOcKLSmhy5noDBRAovKlyStL1+1T8cyn8mPcY2Z8w=
Subject key identifier:   BE:CC:74:CF:4F:1E:6D:4B:08:A5:AE:7E:DE:39:33:5A:1D:89:19:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E0701115AF44018327280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8552b941-ab9e-3f89-97b4-46c62b844ede.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        73.159.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:07:01:11:5a:f4:40:18:32:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=33561886-2841-46e7-82d1-5b6253abcb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:01:33:08:a8:1b:38:af:da:ad:2a:78:ba:
                    f4:93:bd:3e:3e:76:08:22:5b:0b:c9:00:41:56:49:
                    6f:27:4b:06:a0:0a:f4:2d:13:2d:9e:64:ee:da:7e:
                    30:5e:8f:36:e7:f1:56:01:d9:81:3d:1a:65:64:35:
                    b2:b7:af:c1:59:34:fe:13:9c:23:45:73:3e:c5:10:
                    bb:2d:7b:f4:20:f5:c1:cc:2b:d5:6b:3b:89:4f:70:
                    c8:dc:d1:e9:e7:ce:34:55:82:1e:04:08:5b:89:eb:
                    16:d4:6f:42:6c:a5:a9:40:dc:21:4f:09:4d:a7:51:
                    88:35:95:78:23:34:e7:f4:c9:bd:65:8e:c2:9e:64:
                    3c:62:7b:7d:5f:56:54:b3:8b:09:6b:04:14:b0:ad:
                    00:5f:f4:d4:ba:e4:1b:99:b9:64:ee:83:e2:6f:35:
                    64:e0:26:69:b3:d8:6a:0d:a9:f1:7b:1d:2e:17:eb:
                    2a:aa:30:bb:c2:99:20:1f:09:80:02:c7:b6:d8:28:
                    17:03:77:d5:07:2b:82:15:68:50:59:6d:e7:d6:1d:
                    d6:cf:10:0d:90:48:be:af:87:54:d9:ae:27:db:c0:
                    3c:d3:a0:e3:c8:04:9d:c4:0e:d1:c5:5d:e7:b1:3b:
                    74:be:7f:47:d4:4d:03:83:7e:8b:ec:c7:8d:f9:a8:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CC:74:CF:4F:1E:6D:4B:08:A5:AE:7E:DE:39:33:5A:1D:89:19:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8552b941-ab9e-3f89-97b4-46c62b844ede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.159.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:3e:7a:d2:3b:47:d5:a8:f9:20:90:24:2c:04:54:4a:c4:
         b2:06:d9:0f:23:35:a5:42:03:21:62:6c:ae:d6:5b:98:3c:cd:
         9e:0b:dc:1f:0c:24:14:48:ec:0d:d1:f8:8e:c8:bc:43:0e:61:
         f4:2a:db:70:4b:16:98:86:11:5c:a3:2b:99:94:a1:72:22:3f:
         a1:2d:42:d0:5a:fb:49:06:a8:4f:dd:af:5d:45:0e:7c:b2:54:
         a2:54:63:66:8c:62:c2:d6:d3:3f:1d:3e:8c:62:e0:eb:16:9e:
         86:c6:19:c9:cf:96:93:fc:ca:aa:fb:11:60:1e:59:98:8f:64:
         dd:56:84:5f:9b:ba:b4:79:3f:79:d5:3d:db:e0:1c:37:01:17:
         0b:2b:9c:77:eb:b4:ac:5b:3a:df:b4:6f:89:72:a2:c4:7e:4f:
         dc:ed:3c:05:81:e0:61:39:1a:dc:ca:53:f6:81:d0:ae:0d:c4:
         c8:20:b7:b1:e7:3c:28:c3:35:4e:bf:7d:f6:a6:81:d9:0f:cf:
         a0:f3:ce:01:96:94:7b:d9:c9:a4:70:f0:66:8d:13:a1:a1:8b:
         cc:7d:81:4a:b1:d7:d0:cb:73:83:03:d6:da:2a:39:09:b0:24:
         f2:99:08:3d:25:88:6b:60:02:fb:94:6e:23:2d:ee:ee:7e:53:
         83:ae:d4:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TgcBEVr0QBgycoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
MzM1NjE4ODYtMjg0MS00NmU3LTgyZDEtNWI2MjUzYWJjYjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXABMwioGziv2q0qeLr0k70+PnYIIlsLyQBB
VklvJ0sGoAr0LRMtnmTu2n4wXo825/FWAdmBPRplZDWyt6/BWTT+E5wjRXM+xRC7
LXv0IPXBzCvVazuJT3DI3NHp5840VYIeBAhbiesW1G9CbKWpQNwhTwlNp1GINZV4
IzTn9Mm9ZY7CnmQ8Ynt9X1ZUs4sJawQUsK0AX/TUuuQbmblk7oPibzVk4CZps9hq
Danxex0uF+sqqjC7wpkgHwmAAse22CgXA3fVByuCFWhQWW3n1h3WzxANkEi+r4dU
2a4n28A806DjyASdxA7RxV3nsTt0vn9H1E0Dg36L7MeN+agflwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7MdM9PHm1LCKWuft45M1odiRkQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU1MmI5NDEtYWI5ZS0z
Zjg5LTk3YjQtNDZjNjJiODQ0ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASZ8LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEm4PnrSO0fVqPkgkCQsBFRKxLIG2Q8jNaVCAyFibK7WW5g8zZ4L3B8M
JBRI7A3R+I7IvEMOYfQq23BLFpiGEVyjK5mUoXIiP6EtQtBa+0kGqE/dr11FDnyy
VKJUY2aMYsLW0z8dPoxi4OsWnobGGcnPlpP8yqr7EWAeWZiPZN1WhF+burR5P3nV
PdvgHDcBFwsrnHfrtKxbOt+0b4lyosR+T9ztPAWB4GE5GtzKU/aB0K4NxMggt7Hn
PCjDNU6/ffamgdkPz6DzzgGWlHvZyaRw8GaNE6Ghi8x9gUqx19DLc4MD1toqOQmw
JPKZCD0liGtgAvuUbiMt7u5+U4Ou1OA=
-----END CERTIFICATE-----
Generated at Wed Nov 4 18:45:24 2026 by rpki-client