Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a6a61b9-c822-3349-9e64-769376553d8d.roa
File:                     8a6a61b9-c822-3349-9e64-769376553d8d.roa (raw, json)
Hash identifier:          oXCKvHkxebrV5k7pyg536UXiHBzmhypdxHg4p3TgKzA=
Subject key identifier:   18:53:55:31:BA:DD:59:90:17:89:9C:09:7E:74:04:35:91:A4:65:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862593DC872A6CA281EC540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a6a61b9-c822-3349-9e64-769376553d8d.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        73.16.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:59:3d:c8:72:a6:ca:28:1e:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=c3e1c0b6-b2da-408c-993e-4e881267804d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:7d:8e:79:10:a3:46:72:cc:ab:8f:02:fd:
                    c1:cd:20:a6:cd:ac:25:7c:5a:a3:5b:03:03:e7:44:
                    12:71:a0:fa:70:b0:28:18:70:74:31:87:7d:14:b6:
                    d5:ff:3d:81:40:32:48:4e:f1:f9:fe:a4:ae:d7:e5:
                    70:ae:db:3d:e4:ef:30:95:f7:31:be:ef:55:e7:78:
                    b9:88:50:9b:02:91:7d:37:0a:93:9c:c8:42:59:7e:
                    53:cc:b8:63:31:68:3a:b8:d7:4c:ac:56:e1:21:04:
                    42:fe:23:fe:69:e9:fc:18:f0:ba:13:c0:ea:fc:7e:
                    0a:cf:b8:9a:e4:f7:bb:04:7a:c2:38:fb:e6:30:f2:
                    2f:af:7e:7b:df:79:69:39:6c:1c:bc:c1:e3:37:3f:
                    cf:1d:a7:f2:96:b5:64:dd:d7:77:5c:5c:86:9c:2a:
                    c1:ac:8f:bc:fa:f2:5c:7b:b6:4e:c5:49:95:0c:c5:
                    48:e5:2d:b3:2c:c1:2e:39:f7:43:6b:f1:24:25:6c:
                    23:d1:a7:c8:52:0e:7f:ae:f2:dd:fd:06:fa:aa:99:
                    47:62:a0:b8:35:80:4e:ec:7a:b0:ae:dd:f8:78:14:
                    1c:92:3e:d1:92:12:44:63:99:a0:19:ca:28:a8:6b:
                    cd:87:6a:c6:08:b1:87:c4:d9:4a:22:8b:ee:e9:fd:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:53:55:31:BA:DD:59:90:17:89:9C:09:7E:74:04:35:91:A4:65:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a6a61b9-c822-3349-9e64-769376553d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.16.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:1d:37:a2:e9:84:6c:a5:b6:a6:a7:32:b5:b7:1d:b0:74:3d:
         8f:5a:36:9d:b5:38:28:a6:cf:7a:d7:6c:fd:1f:42:d3:3a:8d:
         05:63:6b:e5:f4:9f:aa:21:5e:01:c1:e7:ea:c2:62:3d:b8:1a:
         4f:b7:49:43:aa:18:d1:de:08:e2:d3:67:b0:5c:df:12:c4:0b:
         33:8e:3a:bd:16:2b:20:62:e2:e5:bd:65:b0:92:d5:45:9f:0d:
         ee:af:4b:a2:84:30:05:84:39:e6:44:88:5a:b9:6d:cd:e4:0b:
         3b:07:eb:ff:f7:4a:7f:81:21:31:49:1c:0f:7d:a9:9b:4f:78:
         0a:44:f7:be:b3:6c:ff:da:d9:ff:70:2a:6f:69:9d:99:3c:93:
         68:fc:5e:94:96:73:8c:68:dd:9f:97:0d:fa:dd:38:5a:f4:7c:
         e9:3a:88:0a:8a:42:56:61:a7:29:11:9f:5b:8d:a9:c7:aa:67:
         1d:c1:a7:34:1d:fa:26:45:ef:99:92:65:8e:fd:04:6c:e6:55:
         11:52:d8:0a:7a:c7:df:eb:fd:4a:6e:b7:c3:84:5f:f4:0a:b1:
         06:27:26:4d:89:a2:a6:e4:79:80:f2:0b:cd:63:4e:b7:ab:c0:
         76:ba:d0:2f:fb:7e:79:09:21:45:3a:e2:21:2d:05:b0:24:b4:
         a8:3b:af:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYlk9yHKmyigexUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
YzNlMWMwYjYtYjJkYS00MDhjLTk5M2UtNGU4ODEyNjc4MDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6V9jnkQo0ZyzKuPAv3BzSCmzawlfFqjWwMD
50QScaD6cLAoGHB0MYd9FLbV/z2BQDJITvH5/qSu1+Vwrts95O8wlfcxvu9V53i5
iFCbApF9NwqTnMhCWX5TzLhjMWg6uNdMrFbhIQRC/iP+aen8GPC6E8Dq/H4Kz7ia
5Pe7BHrCOPvmMPIvr35733lpOWwcvMHjNz/PHafylrVk3dd3XFyGnCrBrI+8+vJc
e7ZOxUmVDMVI5S2zLMEuOfdDa/EkJWwj0afIUg5/rvLd/Qb6qplHYqC4NYBO7Hqw
rt34eBQckj7RkhJEY5mgGcooqGvNh2rGCLGHxNlKIovu6f0RrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhTVTG63VmQF4mcCX50BDWRpGVdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE2YTYxYjktYzgyMi0z
MzQ5LTllNjQtNzY5Mzc2NTUzZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSRCkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANIdN6LphGyltqanMrW3HbB0PY9aNp21OCimz3rXbP0fQtM6jQVja+X0
n6ohXgHB5+rCYj24Gk+3SUOqGNHeCOLTZ7Bc3xLECzOOOr0WKyBi4uW9ZbCS1UWf
De6vS6KEMAWEOeZEiFq5bc3kCzsH6//3Sn+BITFJHA99qZtPeApE976zbP/a2f9w
Km9pnZk8k2j8XpSWc4xo3Z+XDfrdOFr0fOk6iAqKQlZhpykRn1uNqceqZx3BpzQd
+iZF75mSZY79BGzmVRFS2Ap6x9/r/Uput8OEX/QKsQYnJk2JoqbkeYDyC81jTrer
wHa60C/7fnkJIUU64iEtBbAktKg7r+g=
-----END CERTIFICATE-----
Generated at Mon Sep 14 22:52:07 2026 by rpki-client