Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4032a4c-ae6b-3399-8b1d-54ec6b711cec.roa
File:                     a4032a4c-ae6b-3399-8b1d-54ec6b711cec.roa (raw, json)
Hash identifier:          zzj97G2hdyqI9cgG/BGNz/MFzGzjOFwuYj7WUrAUj4Y=
Subject key identifier:   6B:B8:98:08:F4:6B:AD:DC:9C:3A:48:F3:A6:83:2D:10:5C:4F:0B:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF772297865BCBF64926F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4032a4c-ae6b-3399-8b1d-54ec6b711cec.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        174.62.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:72:29:78:65:bc:bf:64:92:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=1b94ad6a-d549-4ac2-9e1c-efa37608d32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:c8:f1:99:d6:25:ab:e0:dd:6f:d1:ea:4e:
                    8d:1a:62:c7:5c:cb:6d:9b:d7:14:5e:13:7f:05:82:
                    a5:9e:4a:59:a5:0f:46:79:ab:95:54:dc:ba:c4:45:
                    f2:92:61:b0:ea:f6:35:e0:16:a7:1f:a6:e9:06:f9:
                    25:6b:dc:90:a8:19:45:f5:12:56:eb:3b:4f:7a:f9:
                    fb:95:ac:b6:00:3a:12:2e:c1:f5:a7:a3:ab:6c:da:
                    cf:65:9b:11:6d:37:ab:ae:ae:eb:2a:2d:cc:41:d3:
                    27:7f:af:56:6e:0a:d3:ff:03:cc:01:22:4d:45:6f:
                    a7:43:a7:20:be:fe:a2:42:3e:86:3a:c5:20:4f:64:
                    fc:53:52:88:86:15:fa:70:dd:99:5a:e6:fe:cc:4f:
                    f9:9a:b1:a9:a7:4b:d9:00:41:a0:e5:86:f1:af:42:
                    ed:97:38:cc:6a:53:b5:b5:17:40:ea:a4:40:ab:eb:
                    83:cd:e8:9f:c6:79:ec:0d:e9:b5:cf:32:8a:bd:34:
                    24:99:11:66:99:37:b7:b5:59:e3:b0:a6:09:0c:57:
                    f6:69:e4:68:9e:22:13:47:a2:17:8b:d1:5b:08:fa:
                    1f:81:f5:d5:d2:e3:87:3f:08:9c:0e:3f:cc:49:54:
                    c9:1e:21:b4:93:bf:59:9c:01:ae:36:fa:60:0a:e8:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B8:98:08:F4:6B:AD:DC:9C:3A:48:F3:A6:83:2D:10:5C:4F:0B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4032a4c-ae6b-3399-8b1d-54ec6b711cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.62.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:87:fa:0d:41:7e:57:a4:86:79:9d:a4:8c:98:40:9b:d3:
         ec:e2:b4:b0:11:b2:38:ef:5d:a1:59:a5:56:c1:c2:2e:a1:39:
         c3:b3:37:ff:56:9f:2a:ba:1b:50:d1:cd:da:3f:d9:ac:c2:b2:
         ea:e0:e5:58:06:b1:74:0d:57:e4:a0:ad:b3:f9:1b:ca:cf:79:
         8e:a8:7e:54:44:59:ac:96:db:b9:54:ff:75:48:b9:d7:bf:23:
         43:04:b5:fc:d6:97:4e:e0:27:7f:32:42:b6:4c:45:70:c5:34:
         ba:42:4f:da:fd:c8:27:71:60:17:c2:06:6b:e4:78:ea:8c:34:
         2a:e9:cf:b6:ff:f3:42:b3:b7:4f:d1:be:4b:86:44:21:86:54:
         1a:c4:46:35:07:91:c9:8a:23:b6:96:e0:c6:d3:aa:22:fa:41:
         ef:62:89:9e:5d:cc:5c:db:d7:cd:d9:57:97:3d:c9:63:61:f8:
         cd:5e:cd:c4:75:74:bd:51:17:15:42:f0:da:d0:6d:7a:c2:f8:
         35:80:0a:0f:06:60:9d:af:15:91:6e:9b:a9:b0:e5:62:71:71:
         ea:54:15:02:25:1b:68:ae:11:00:74:42:9c:91:25:50:20:a7:
         59:9d:60:a3:c8:c2:d6:36:6d:da:71:b7:81:ff:2d:18:fb:1e:
         9d:91:34:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O93IpeGW8v2SSbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MWI5NGFkNmEtZDU0OS00YWMyLTllMWMtZWZhMzc2MDhkMzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKfI8ZnWJavg3W/R6k6NGmLHXMttm9cUXhN/
BYKlnkpZpQ9GeauVVNy6xEXykmGw6vY14BanH6bpBvkla9yQqBlF9RJW6ztPevn7
lay2ADoSLsH1p6OrbNrPZZsRbTerrq7rKi3MQdMnf69WbgrT/wPMASJNRW+nQ6cg
vv6iQj6GOsUgT2T8U1KIhhX6cN2ZWub+zE/5mrGpp0vZAEGg5Ybxr0LtlzjMalO1
tRdA6qRAq+uDzeifxnnsDem1zzKKvTQkmRFmmTe3tVnjsKYJDFf2aeRoniITR6IX
i9FbCPofgfXV0uOHPwicDj/MSVTJHiG0k79ZnAGuNvpgCuhiiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGu4mAj0a63cnDpI86aDLRBcTwt0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQwMzJhNGMtYWU2Yi0z
Mzk5LThiMWQtNTRlYzZiNzExY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArj70MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8Qh/oNQX5XpIZ5naSMmECb0+zitLARsjjvXaFZpVbBwi6hOcOzN/9W
nyq6G1DRzdo/2azCsurg5VgGsXQNV+SgrbP5G8rPeY6oflREWayW27lU/3VIude/
I0MEtfzWl07gJ38yQrZMRXDFNLpCT9r9yCdxYBfCBmvkeOqMNCrpz7b/80Kzt0/R
vkuGRCGGVBrERjUHkcmKI7aW4MbTqiL6Qe9iiZ5dzFzb183ZV5c9yWNh+M1ezcR1
dL1RFxVC8NrQbXrC+DWACg8GYJ2vFZFum6mw5WJxcepUFQIlG2iuEQB0QpyRJVAg
p1mdYKPIwtY2bdpxt4H/LRj7Hp2RNKc=
-----END CERTIFICATE-----
Generated at Tue Apr 21 20:34:02 2026 by rpki-client