Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a1ec38-deb0-3237-9429-f8104eb68aa9.roa
File:                     91a1ec38-deb0-3237-9429-f8104eb68aa9.roa (raw, json)
Hash identifier:          G/gq97Sd8n9WdZMvHfuz7dPtDKupqK2seeRZUJ9pP80=
Subject key identifier:   03:2D:91:ED:8F:93:17:0E:19:37:0C:0D:49:78:8A:0C:9D:82:14:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BF06E1908DAF7A28B2400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a1ec38-deb0-3237-9429-f8104eb68aa9.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        71.225.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:f0:6e:19:08:da:f7:a2:8b:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=592771d7-bb2f-4b30-b74d-79a30fa39e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ca:7d:4f:c2:eb:b2:6f:11:2d:3e:2a:55:d8:
                    23:a8:77:a2:27:87:35:35:7f:ba:6b:2c:95:16:56:
                    52:95:90:9e:d7:b3:c8:6f:c4:5d:ee:02:6c:1b:ae:
                    30:1e:08:f0:64:f3:3c:f6:1b:b6:8f:85:f0:5b:6b:
                    01:42:d8:c6:9c:6c:05:4c:25:04:63:70:17:07:2f:
                    68:78:04:dd:39:04:dd:f6:d9:9d:71:ad:09:44:2c:
                    3e:d0:44:24:97:4d:91:ea:bc:d4:7d:12:9c:e2:73:
                    92:14:70:ab:ae:7a:6c:9c:73:f5:14:a1:fb:2f:37:
                    58:40:15:8b:4d:06:6b:03:73:87:61:43:7b:ec:98:
                    ec:87:0e:af:3f:5b:95:aa:09:03:49:f1:12:e5:ed:
                    73:ae:53:c6:29:55:4e:8d:d4:35:9e:d2:8f:7a:6b:
                    72:1d:d9:fa:8e:2f:35:63:2d:3e:4d:a1:10:34:e8:
                    b6:be:8e:eb:6b:51:73:0b:f6:d2:03:55:d0:56:e5:
                    bb:cc:c6:ba:9c:c8:dc:9b:28:65:d2:8a:5a:5b:7b:
                    8e:27:60:1c:16:0c:51:78:2e:c2:36:f8:cc:d8:53:
                    a0:b6:c4:98:1b:01:70:0d:db:c5:9f:7e:bd:f2:31:
                    2d:6c:11:be:f2:e6:bb:db:54:32:08:5a:a6:8f:b3:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2D:91:ED:8F:93:17:0E:19:37:0C:0D:49:78:8A:0C:9D:82:14:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a1ec38-deb0-3237-9429-f8104eb68aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:87:1b:40:1c:b0:9b:9b:5c:ff:ae:7f:e9:57:f4:b0:30:55:
         40:f6:c8:31:e9:d7:6c:98:25:99:70:6d:89:7f:36:16:cc:b6:
         9b:ed:ba:3b:a7:02:1b:37:1e:df:de:00:42:bb:a9:b8:88:36:
         f3:66:32:53:9b:c4:64:12:59:19:73:c6:ca:c0:d7:7e:d9:6f:
         ee:3f:76:2d:00:78:f7:a1:10:5b:c2:4e:37:5b:5a:26:d1:81:
         24:69:62:10:ff:65:93:70:d8:f2:e0:81:9c:a1:a0:47:e8:15:
         bc:92:1d:40:df:45:fe:96:05:6f:b5:75:db:7b:b1:06:7b:a7:
         7a:82:01:35:1b:81:c3:85:39:63:0c:f1:59:2b:91:f7:0c:26:
         90:ca:42:09:6c:d8:8e:c0:6a:e1:74:fb:72:f1:ab:12:a8:da:
         87:11:cf:dc:16:f4:86:d1:0a:91:ad:e6:b0:a1:45:71:c5:ab:
         fd:70:64:d7:93:da:3e:6b:ad:24:99:c0:68:81:6b:3c:98:25:
         71:2f:51:59:47:41:81:7a:0c:97:7c:5c:91:10:27:c9:c8:a4:
         95:74:96:ee:4a:1c:05:5c:ed:cc:2b:d0:b6:55:32:60:56:63:
         62:1d:71:76:86:d2:f1:f0:20:94:62:cf:6c:09:ac:e7:e5:16:
         3c:df:e5:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO/BuGQja96KLJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NTkyNzcxZDctYmIyZi00YjMwLWI3NGQtNzlhMzBmYTM5ZTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMp9T8Lrsm8RLT4qVdgjqHeiJ4c1NX+6ayyV
FlZSlZCe17PIb8Rd7gJsG64wHgjwZPM89hu2j4XwW2sBQtjGnGwFTCUEY3AXBy9o
eATdOQTd9tmdca0JRCw+0EQkl02R6rzUfRKc4nOSFHCrrnpsnHP1FKH7LzdYQBWL
TQZrA3OHYUN77Jjshw6vP1uVqgkDSfES5e1zrlPGKVVOjdQ1ntKPemtyHdn6ji81
Yy0+TaEQNOi2vo7ra1FzC/bSA1XQVuW7zMa6nMjcmyhl0opaW3uOJ2AcFgxReC7C
NvjM2FOgtsSYGwFwDdvFn3698jEtbBG+8ua721QyCFqmj7NSlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMtke2PkxcOGTcMDUl4igydghSMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFhMWVjMzgtZGViMC0z
MjM3LTk0MjktZjgxMDRlYjY4YWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+EZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGHG0AcsJubXP+uf+lX9LAwVUD2yDHp12yYJZlwbYl/NhbMtpvtujun
Ahs3Ht/eAEK7qbiINvNmMlObxGQSWRlzxsrA137Zb+4/di0AePehEFvCTjdbWibR
gSRpYhD/ZZNw2PLggZyhoEfoFbySHUDfRf6WBW+1ddt7sQZ7p3qCATUbgcOFOWMM
8VkrkfcMJpDKQgls2I7AauF0+3LxqxKo2ocRz9wW9IbRCpGt5rChRXHFq/1wZNeT
2j5rrSSZwGiBazyYJXEvUVlHQYF6DJd8XJEQJ8nIpJV0lu5KHAVc7cwr0LZVMmBW
Y2IdcXaG0vHwIJRiz2wJrOflFjzf5cg=
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:55:13 2026 by rpki-client