Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8c483f-634a-33b4-b13f-e13eb2188e40.roa
File:                     ae8c483f-634a-33b4-b13f-e13eb2188e40.roa (raw, json)
Hash identifier:          k+D1XOra+wXXZl9bnug/Uhlq7R175Njzfpu2gFKktgc=
Subject key identifier:   4A:7C:A1:C2:03:55:58:C7:1B:DC:C0:E3:BD:86:55:7D:27:4C:34:F4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B66DC7AA40F41065EED28
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8c483f-634a-33b4-b13f-e13eb2188e40.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        73.189.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:66:dc:7a:a4:0f:41:06:5e:ed:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=81e3a49e-443c-44c0-a43c-c59d504ec5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:8a:7f:d3:ee:51:7d:80:69:d0:4c:f2:d0:
                    52:de:24:d5:e9:85:7b:45:b8:ec:1c:d8:91:df:5d:
                    f9:27:48:e7:ed:af:7a:42:ca:66:e2:57:16:a0:cf:
                    8a:21:24:cc:12:6e:32:ef:ad:c1:df:6c:ff:06:13:
                    29:f7:98:8a:5e:e3:48:b2:6b:b6:e3:f3:f4:d8:e0:
                    1c:2a:d4:fd:7f:5e:d7:02:1a:a9:2e:40:f0:95:a2:
                    4e:b1:02:72:95:1e:44:94:cc:89:b5:fa:8b:f8:b7:
                    64:0f:88:58:78:1b:08:5e:ee:dd:d8:43:83:6e:97:
                    0e:48:ba:6c:95:1d:63:80:2e:25:31:d7:05:27:8e:
                    5e:9b:f5:33:88:af:ca:10:4a:92:be:e1:a1:64:78:
                    2d:d4:ea:f8:df:95:3e:52:5e:88:c3:34:48:f3:0d:
                    41:67:e9:71:db:ea:87:95:04:0a:7e:7f:bb:70:e2:
                    5a:5b:73:6a:7e:19:fa:15:06:68:e0:88:ff:a5:ca:
                    09:4b:0d:83:8e:53:37:ea:4c:90:f2:19:67:67:e7:
                    52:5c:4a:d6:a1:63:00:fd:5f:d9:89:e8:93:cc:cb:
                    90:92:d2:f4:78:79:2f:b8:8c:47:15:c4:70:76:fb:
                    67:be:4f:0a:c5:60:0c:3b:8e:c4:3c:c3:6d:15:77:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7C:A1:C2:03:55:58:C7:1B:DC:C0:E3:BD:86:55:7D:27:4C:34:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8c483f-634a-33b4-b13f-e13eb2188e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.189.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2c:36:c7:b5:54:7e:3b:e5:10:ce:a2:6e:c8:ad:db:c9:90:
         70:2a:05:01:88:73:e4:e6:d9:d0:d8:17:d4:47:cb:75:c1:71:
         07:3d:af:8a:ba:48:e4:b3:25:b5:52:64:89:84:4e:0a:f3:2a:
         63:30:61:2e:c7:3f:cd:55:05:3c:99:f3:5a:07:61:67:74:df:
         c9:7e:11:1d:8b:d2:43:5d:15:61:6b:f1:32:88:d0:c1:c9:1b:
         3d:c9:1d:ca:8f:48:d0:d7:2f:71:f0:92:0b:a6:a3:c1:8e:ca:
         24:e0:5e:1d:ba:41:f7:56:34:65:19:9b:05:96:4b:2f:f2:b2:
         4a:4a:9d:0d:fe:b1:c6:b3:93:4b:d9:88:d1:62:63:c2:9a:f5:
         bb:08:40:6a:68:9d:ef:89:09:4d:4f:3e:a7:09:0e:46:c3:2f:
         ce:eb:49:63:fb:81:1f:dd:41:4a:19:24:eb:e4:75:20:80:e1:
         e2:bc:aa:96:d9:f2:6c:40:20:2e:f3:f2:b6:0a:e9:dd:82:bc:
         ee:c3:0d:cf:04:1a:bb:bb:05:97:e1:71:7e:57:ed:7a:8e:2f:
         e1:66:b9:91:35:b2:92:db:ab:04:4f:d1:7a:1b:3e:63:8a:8b:
         30:6e:76:f6:17:4d:6b:8b:27:a7:0a:25:99:ae:b7:53:19:61:
         c0:27:f6:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO2bceqQPQQZe7SgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
ODFlM2E0OWUtNDQzYy00NGMwLWE0M2MtYzU5ZDUwNGVjNWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb2Kf9PuUX2AadBM8tBS3iTV6YV7RbjsHNiR
3135J0jn7a96Qspm4lcWoM+KISTMEm4y763B32z/BhMp95iKXuNIsmu24/P02OAc
KtT9f17XAhqpLkDwlaJOsQJylR5ElMyJtfqL+LdkD4hYeBsIXu7d2EODbpcOSLps
lR1jgC4lMdcFJ45em/UziK/KEEqSvuGhZHgt1Or435U+Ul6IwzRI8w1BZ+lx2+qH
lQQKfn+7cOJaW3Nqfhn6FQZo4Ij/pcoJSw2DjlM36kyQ8hlnZ+dSXErWoWMA/V/Z
ieiTzMuQktL0eHkvuIxHFcRwdvtnvk8KxWAMO47EPMNtFXdTnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEp8ocIDVVjHG9zA472GVX0nTDT0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWU4YzQ4M2YtNjM0YS0z
M2I0LWIxM2YtZTEzZWIyMTg4ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb0CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAssNse1VH475RDOom7IrdvJkHAqBQGIc+Tm2dDYF9RHy3XBcQc9r4q6
SOSzJbVSZImETgrzKmMwYS7HP81VBTyZ81oHYWd038l+ER2L0kNdFWFr8TKI0MHJ
Gz3JHcqPSNDXL3Hwkgumo8GOyiTgXh26QfdWNGUZmwWWSy/yskpKnQ3+scazk0vZ
iNFiY8Ka9bsIQGpone+JCU1PPqcJDkbDL87rSWP7gR/dQUoZJOvkdSCA4eK8qpbZ
8mxAIC7z8rYK6d2CvO7DDc8EGru7BZfhcX5X7XqOL+FmuZE1spLbqwRP0XobPmOK
izBudvYXTWuLJ6cKJZmut1MZYcAn9mI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:05:59 2026 by rpki-client