Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aeab056-32a5-3b42-a290-a4b18766071b.roa
File:                     9aeab056-32a5-3b42-a290-a4b18766071b.roa (raw, json)
Hash identifier:          bt3UcrmUSV7K/4n2wJ0wZcDxN+T4FvpkdTs5azgWVJ0=
Subject key identifier:   42:DD:17:AB:97:91:38:C3:D2:30:DD:FC:59:52:63:AE:57:C2:0A:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B76BFEA61D2C41A6AE080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aeab056-32a5-3b42-a290-a4b18766071b.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        73.70.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:76:bf:ea:61:d2:c4:1a:6a:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=7cc32eae-10bd-41a7-8547-bbd178f2e84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:39:41:cf:53:e7:ef:e4:c0:34:09:c3:45:
                    b6:0a:69:25:fc:e5:5d:f2:fe:90:7d:03:1b:7b:aa:
                    06:ac:af:6e:ed:32:da:88:5c:61:9a:68:d5:75:a1:
                    2f:ae:44:33:9f:d4:5f:8c:97:6a:cf:7d:b8:d2:02:
                    e9:07:e2:73:ba:8e:f9:2e:d4:ea:7e:7b:96:d5:41:
                    3d:b2:ff:fd:05:35:a4:4f:60:cf:d3:b1:85:72:68:
                    43:59:9d:23:55:ac:f9:dd:e1:3f:74:a6:59:7c:45:
                    a1:de:eb:51:2f:91:f6:73:b7:be:6a:e4:ff:a5:d5:
                    ca:85:06:e1:c6:95:e1:ff:31:44:a2:8b:a5:1c:55:
                    a0:70:d0:55:04:2f:57:25:ab:64:07:62:7a:f0:96:
                    5f:92:96:15:22:c4:a5:21:c9:7d:82:3c:ab:ec:90:
                    cf:df:fb:3e:12:86:3b:59:79:99:53:06:09:5e:99:
                    79:29:23:d9:9f:87:b8:ae:0b:e9:64:c8:e6:24:67:
                    e1:4d:52:4a:ec:1c:0f:6f:c5:cf:d8:89:1b:00:f9:
                    8c:14:26:12:65:61:e4:62:2e:25:22:d1:78:e8:14:
                    2c:1d:dd:f3:fa:ea:ff:21:a6:fb:23:fe:5d:72:9b:
                    d4:6e:cb:8f:d7:a1:16:b9:b8:b1:0e:78:a8:9d:62:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DD:17:AB:97:91:38:C3:D2:30:DD:FC:59:52:63:AE:57:C2:0A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aeab056-32a5-3b42-a290-a4b18766071b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.70.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:34:70:dc:79:7b:2b:33:67:66:43:e4:42:30:bb:3f:ba:ae:
         e3:ad:ed:3e:10:c0:9e:13:32:5c:d0:37:2b:52:30:cc:f1:c3:
         bb:f1:5e:c9:be:aa:eb:8e:13:36:1d:26:ab:bc:fb:be:03:ca:
         49:7d:b2:38:ce:c2:7e:48:57:37:35:76:0e:8d:c8:ec:5a:9b:
         19:c5:88:35:27:1f:db:49:50:b3:13:38:35:7e:4e:cf:fe:1c:
         80:cf:7e:5f:a8:9f:f7:3e:fd:8d:47:f3:ba:a0:1d:07:4f:3f:
         ac:50:53:b6:9a:9e:5f:a0:46:58:fa:14:51:71:4a:73:f3:f5:
         2e:f3:68:53:1b:e4:f7:47:22:9a:3e:94:92:1f:85:a0:22:9a:
         e2:97:27:9e:5b:dc:7d:f6:56:75:de:88:79:65:77:4e:41:de:
         41:a9:45:22:a0:02:2a:50:21:24:74:12:d2:9f:0c:b1:4a:0d:
         97:26:9b:62:28:73:93:dd:89:60:4a:07:af:bf:ed:f0:6c:4c:
         c5:06:ca:85:ba:e4:d7:2b:ec:d7:5f:68:6d:5d:20:54:1f:34:
         07:d6:82:65:24:f3:86:a4:ae:0e:5f:81:b8:87:09:4d:50:96:
         a3:e2:7d:1a:cc:88:6f:7a:27:7e:be:37:b2:1d:c3:f8:32:f0:
         af:74:7f:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO3a/6mHSxBpq4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
N2NjMzJlYWUtMTBiZC00MWE3LTg1NDctYmJkMTc4ZjJlODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3E5Qc9T5+/kwDQJw0W2Cmkl/OVd8v6QfQMb
e6oGrK9u7TLaiFxhmmjVdaEvrkQzn9RfjJdqz3240gLpB+Jzuo75LtTqfnuW1UE9
sv/9BTWkT2DP07GFcmhDWZ0jVaz53eE/dKZZfEWh3utRL5H2c7e+auT/pdXKhQbh
xpXh/zFEooulHFWgcNBVBC9XJatkB2J68JZfkpYVIsSlIcl9gjyr7JDP3/s+EoY7
WXmZUwYJXpl5KSPZn4e4rgvpZMjmJGfhTVJK7BwPb8XP2IkbAPmMFCYSZWHkYi4l
ItF46BQsHd3z+ur/Iab7I/5dcpvUbsuP16EWubixDnionWIwEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELdF6uXkTjD0jDd/FlSY65XwgrOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWFlYWIwNTYtMzJhNS0z
YjQyLWEyOTAtYTRiMTg3NjYwNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAU0cNx5eyszZ2ZD5EIwuz+6ruOt7T4QwJ4TMlzQNytSMMzxw7vxXsm+
quuOEzYdJqu8+74Dykl9sjjOwn5IVzc1dg6NyOxamxnFiDUnH9tJULMTODV+Ts/+
HIDPfl+on/c+/Y1H87qgHQdPP6xQU7aanl+gRlj6FFFxSnPz9S7zaFMb5PdHIpo+
lJIfhaAimuKXJ55b3H32VnXeiHlld05B3kGpRSKgAipQISR0EtKfDLFKDZcmm2Io
c5PdiWBKB6+/7fBsTMUGyoW65Ncr7NdfaG1dIFQfNAfWgmUk84akrg5fgbiHCU1Q
lqPifRrMiG96J36+N7Idw/gy8K90fws=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:45:02 2026 by rpki-client