Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f77bbe-d53c-398b-8389-084ec6fed8d8.roa
File:                     87f77bbe-d53c-398b-8389-084ec6fed8d8.roa (raw, json)
Hash identifier:          lvXre9gZiu1ivpbJxJBnM5FMNBJv6/LH4/Y68P2qLBo=
Subject key identifier:   C7:23:C3:A2:C4:68:A1:88:BE:6D:37:A7:E0:53:B3:2D:05:0A:F7:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4DDE9094167DDB1BC5AC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f77bbe-d53c-398b-8389-084ec6fed8d8.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        24.62.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:de:90:94:16:7d:db:1b:c5:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=b43c3e87-435e-4b89-9aee-211b5d1fca7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:fa:9d:e9:fd:7b:4d:93:61:c1:ac:50:a5:
                    0f:75:35:18:f6:0c:78:7a:d9:d6:a8:a7:e7:57:2d:
                    e0:74:45:82:f4:31:77:c4:ad:5d:7a:af:f8:cc:59:
                    fb:8d:d3:75:49:76:1b:95:bc:f0:54:7f:f3:b9:1e:
                    08:60:3d:93:27:e6:df:67:c4:d6:da:37:87:b9:4b:
                    ac:1f:c1:5e:4a:b8:79:8f:86:2e:35:ec:52:f6:bd:
                    18:c2:6e:8b:be:46:c6:d8:75:15:12:53:10:bc:49:
                    0f:73:4e:3c:85:0c:05:31:48:25:9c:79:7a:49:af:
                    ee:64:f6:60:94:0c:ae:3a:83:4d:35:93:06:0d:47:
                    40:45:75:53:37:95:4e:71:c4:a6:3e:37:9d:e1:eb:
                    a1:e3:5c:4d:06:a4:d1:8f:66:00:e1:05:26:ee:48:
                    e0:a6:7d:d1:1e:b3:6a:55:ec:32:85:2a:8a:ce:0d:
                    d8:88:0f:e2:75:15:13:ac:34:57:f5:59:ad:1c:ae:
                    3d:2b:f7:65:2d:e3:fc:3d:9d:37:5d:c8:df:7f:9d:
                    ae:1e:3b:14:13:aa:cd:93:1d:ed:9c:bb:44:a1:7c:
                    e0:8f:9d:41:2c:ef:17:37:aa:b3:da:3d:82:8b:d6:
                    c2:fc:c0:d2:4f:cc:5e:3a:f3:2d:71:3b:77:f5:0e:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:23:C3:A2:C4:68:A1:88:BE:6D:37:A7:E0:53:B3:2D:05:0A:F7:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f77bbe-d53c-398b-8389-084ec6fed8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.62.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a5:42:09:66:54:c8:46:21:2f:89:db:2b:56:82:46:c2:10:
         c6:68:01:99:70:99:28:d0:01:01:3b:db:87:f8:12:44:61:db:
         4b:dc:15:3f:f2:f9:eb:e4:1e:f6:eb:0a:89:e8:de:8a:a5:f7:
         b0:a1:f7:a8:3c:32:61:7a:2e:55:a7:d6:7f:3b:bc:b5:b5:0d:
         19:06:ac:63:ea:42:6c:71:76:9d:6f:26:cd:a2:02:a5:7a:3e:
         a0:1c:77:d7:a7:41:df:ba:f7:0d:a4:5d:87:01:c9:b9:b6:24:
         24:2b:08:05:c5:01:0c:bd:66:11:6d:5c:49:1f:45:4a:e0:e5:
         e0:79:b2:11:a1:ff:bf:c3:47:61:71:84:8f:ec:f1:17:fb:a8:
         51:02:5d:9c:67:06:4f:ea:a3:1a:55:d3:a3:fd:78:2e:a6:a0:
         0c:1e:0c:2b:d6:12:31:f8:c1:ba:21:f4:eb:4f:98:3a:c7:a3:
         63:a7:ac:a7:97:0c:15:6a:7f:65:1f:d3:5b:2a:fa:18:3a:ba:
         bc:c0:ad:48:f5:92:5f:0c:04:bb:7d:75:7f:6f:cc:61:0e:64:
         49:fa:f7:9c:13:a2:84:af:d3:59:fc:13:ea:8e:f9:0f:6f:94:
         36:aa:87:2d:7e:43:be:19:a5:f5:85:f0:b2:0c:6a:2c:53:55:
         44:f5:9e:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Td6QlBZ92xvFrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
YjQzYzNlODctNDM1ZS00Yjg5LTlhZWUtMjExYjVkMWZjYTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w36nen9e02TYcGsUKUPdTUY9gx4etnWqKfn
Vy3gdEWC9DF3xK1deq/4zFn7jdN1SXYblbzwVH/zuR4IYD2TJ+bfZ8TW2jeHuUus
H8FeSrh5j4YuNexS9r0Ywm6LvkbG2HUVElMQvEkPc048hQwFMUglnHl6Sa/uZPZg
lAyuOoNNNZMGDUdARXVTN5VOccSmPjed4euh41xNBqTRj2YA4QUm7kjgpn3RHrNq
VewyhSqKzg3YiA/idRUTrDRX9VmtHK49K/dlLeP8PZ03Xcjff52uHjsUE6rNkx3t
nLtEoXzgj51BLO8XN6qz2j2Ci9bC/MDST8xeOvMtcTt39Q7kMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcjw6LEaKGIvm03p+BTsy0FCvecMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdmNzdiYmUtZDUzYy0z
OThiLTgzODktMDg0ZWM2ZmVkOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGD6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESlQglmVMhGIS+J2ytWgkbCEMZoAZlwmSjQAQE724f4EkRh20vcFT/y
+evkHvbrCono3oql97Ch96g8MmF6LlWn1n87vLW1DRkGrGPqQmxxdp1vJs2iAqV6
PqAcd9enQd+69w2kXYcBybm2JCQrCAXFAQy9ZhFtXEkfRUrg5eB5shGh/7/DR2Fx
hI/s8Rf7qFECXZxnBk/qoxpV06P9eC6moAweDCvWEjH4wboh9OtPmDrHo2OnrKeX
DBVqf2Uf01sq+hg6urzArUj1kl8MBLt9dX9vzGEOZEn695wTooSv01n8E+qO+Q9v
lDaqhy1+Q74ZpfWF8LIMaixTVUT1nok=
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:56:25 2026 by rpki-client