Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8681ca63-b171-3b8f-ae48-91ce358bdde6.roa
File:                     8681ca63-b171-3b8f-ae48-91ce358bdde6.roa (raw, json)
Hash identifier:          k+k+T9Uen+yHBMlU8FKFWg9V1OPUxUfcq5kYgrr0dU0=
Subject key identifier:   A2:6E:0B:6B:08:F6:02:ED:57:FC:D9:F6:B3:E2:43:71:55:FE:EA:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36013448CF050C2CADD90440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8681ca63-b171-3b8f-ae48-91ce358bdde6.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        73.232.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:34:48:cf:05:0c:2c:ad:d9:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=1ea873f4-9bcb-4001-9cce-d65e0fbbc3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:d9:99:5f:11:8a:96:15:11:97:ee:5b:21:
                    51:1e:bd:9c:9c:56:e5:c1:a9:fb:1e:c0:f5:8e:90:
                    c2:24:fc:b8:27:62:f1:4d:71:4c:df:c2:6d:37:7c:
                    6c:8f:94:02:87:36:fc:4d:1c:cc:2a:ae:88:70:f1:
                    79:a1:b3:31:b5:a8:58:75:2a:f3:34:e2:07:de:91:
                    cb:4a:f5:db:80:81:98:22:d6:26:42:2a:87:b9:17:
                    5b:4d:38:c4:ad:db:3d:a4:0c:4f:cd:83:a8:af:fe:
                    d2:03:84:91:6f:e0:07:fd:a7:38:e7:30:34:a2:ab:
                    92:ec:8f:fe:b4:2a:8f:f1:61:3e:de:85:35:aa:0c:
                    fa:d1:a7:6b:08:71:2d:c0:cb:d4:32:d8:8b:01:c7:
                    30:2e:d4:25:7d:da:de:94:8c:b7:a7:4b:09:7c:c0:
                    7d:70:8d:8b:b5:43:8a:77:1b:03:55:8c:01:dd:71:
                    27:b9:0a:17:cf:80:d6:94:ce:a8:a0:c2:9e:f9:87:
                    27:f5:16:d1:3f:1d:dc:78:7a:e5:89:5c:91:c2:4f:
                    d6:d5:b5:67:e3:87:34:fd:26:24:48:ae:b9:fd:91:
                    db:b5:49:8c:10:f8:6e:e7:48:13:98:d7:73:1f:8a:
                    55:78:37:85:53:30:57:a7:32:70:83:26:ab:43:de:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6E:0B:6B:08:F6:02:ED:57:FC:D9:F6:B3:E2:43:71:55:FE:EA:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8681ca63-b171-3b8f-ae48-91ce358bdde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.232.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:73:63:1b:8f:6e:d0:8f:3f:4a:cb:c2:ab:eb:ec:03:a3:84:
         44:d8:4c:24:37:f3:d8:86:b8:0f:81:55:0a:7b:c5:e8:8f:11:
         37:b9:71:f0:a8:56:c9:63:34:30:6b:3f:06:50:a3:ce:11:23:
         65:fa:09:53:69:86:d0:31:58:3b:49:8e:57:e4:e0:2e:02:51:
         ad:46:8b:17:34:fc:a8:50:40:b0:bd:09:d9:80:39:1d:94:f1:
         e2:ef:8c:d9:5b:e3:c0:4f:28:04:6c:08:ca:ed:83:bf:94:6e:
         86:1f:1c:8c:fc:45:ac:72:55:3c:49:2b:17:00:cd:27:89:1f:
         58:ae:e1:54:a3:f5:2f:36:7e:2e:44:96:ef:82:a7:fb:6a:ee:
         8f:18:7b:d8:0d:73:cb:be:a6:2b:95:c0:08:ca:b2:e5:cd:0b:
         4a:4d:b5:99:8b:08:bf:93:c9:95:d3:7e:47:09:18:5a:1d:c4:
         a8:9c:da:da:05:49:f0:75:9f:1d:bd:2f:51:51:46:f2:61:59:
         c5:20:97:2c:ba:47:95:fc:6e:ff:61:d3:9c:18:e4:54:79:09:
         5a:0d:68:a0:f6:72:79:f2:4b:5c:e4:7b:5a:34:da:d3:68:e7:
         9d:99:7d:4e:4c:f7:c8:03:ae:29:38:18:13:75:63:38:5e:46:
         cd:54:be:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42ATRIzwUMLK3ZBEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
MWVhODczZjQtOWJjYi00MDAxLTljY2UtZDY1ZTBmYmJjM2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFXZmV8RipYVEZfuWyFRHr2cnFblwan7HsD1
jpDCJPy4J2LxTXFM38JtN3xsj5QChzb8TRzMKq6IcPF5obMxtahYdSrzNOIH3pHL
SvXbgIGYItYmQiqHuRdbTTjErds9pAxPzYOor/7SA4SRb+AH/ac45zA0oquS7I/+
tCqP8WE+3oU1qgz60adrCHEtwMvUMtiLAccwLtQlfdrelIy3p0sJfMB9cI2LtUOK
dxsDVYwB3XEnuQoXz4DWlM6ooMKe+Ycn9RbRPx3ceHrliVyRwk/W1bVn44c0/SYk
SK65/ZHbtUmMEPhu50gTmNdzH4pVeDeFUzBXpzJwgyarQ95rQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJuC2sI9gLtV/zZ9rPiQ3FV/uq5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY4MWNhNjMtYjE3MS0z
YjhmLWFlNDgtOTFjZTM1OGJkZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeg8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdzYxuPbtCPP0rLwqvr7AOjhETYTCQ389iGuA+BVQp7xeiPETe5cfCo
VsljNDBrPwZQo84RI2X6CVNphtAxWDtJjlfk4C4CUa1Gixc0/KhQQLC9CdmAOR2U
8eLvjNlb48BPKARsCMrtg7+UboYfHIz8RaxyVTxJKxcAzSeJH1iu4VSj9S82fi5E
lu+Cp/tq7o8Ye9gNc8u+piuVwAjKsuXNC0pNtZmLCL+TyZXTfkcJGFodxKic2toF
SfB1nx29L1FRRvJhWcUglyy6R5X8bv9h05wY5FR5CVoNaKD2cnnyS1zke1o02tNo
552ZfU5M98gDrik4GBN1YzheRs1Uvhw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:38:38 2026 by rpki-client