Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af59654f-8b05-39eb-9d7f-ffd24f6b23dd.roa
File:                     af59654f-8b05-39eb-9d7f-ffd24f6b23dd.roa (raw, json)
Hash identifier:          XGyEs6gORVvuOw4tizIjIHj6L10ULlZuXaqsGd7cY9E=
Subject key identifier:   6B:17:59:72:8C:5B:96:CD:45:1E:8E:B6:B4:0D:40:7B:67:3D:4D:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862164E0222469A19CB4A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af59654f-8b05-39eb-9d7f-ffd24f6b23dd.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        73.96.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:16:4e:02:22:46:9a:19:cb:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=5cf1adf1-d91f-4e65-97cf-cefa7a2d3b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:5c:d1:12:48:47:7b:ae:c2:dd:6c:43:64:
                    52:be:6b:d6:94:09:5c:7f:68:98:86:86:c5:66:dc:
                    d0:d4:36:d3:4a:d7:a6:dd:43:00:a9:fa:7a:34:f8:
                    e9:ef:33:88:39:61:b8:59:a2:28:cf:50:5e:5a:79:
                    6a:0d:18:65:ab:b3:a7:9e:39:66:6a:e7:01:e2:0c:
                    74:bf:f5:af:7f:c7:7e:b5:ef:0f:6a:ae:13:7b:ed:
                    f1:bf:ed:5c:37:cd:5e:5e:67:05:52:79:9d:d8:78:
                    1f:da:c9:d1:3e:37:04:5a:ce:89:4a:26:4d:e2:c5:
                    91:fe:14:cb:1e:cf:5b:06:8e:59:b5:9d:16:bf:63:
                    10:77:59:3d:9a:7c:e1:46:43:1a:26:14:e4:b7:e8:
                    da:27:9d:7a:7f:a4:88:87:3d:71:97:85:ee:d7:7d:
                    79:df:6f:19:1a:8a:13:78:fe:20:2c:85:cc:6b:51:
                    b7:b7:ce:50:f2:86:8b:bd:2f:07:78:b1:1f:c5:39:
                    5f:18:38:f5:f1:85:4c:e4:d8:3f:92:8f:61:5d:b5:
                    b9:f9:d7:56:93:f5:bd:af:cc:d3:34:b7:b0:92:f3:
                    47:62:01:73:c0:00:66:98:a0:c2:33:53:a3:ec:f4:
                    a2:b6:e3:f6:52:07:aa:76:cb:61:b4:4d:3b:66:76:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:59:72:8C:5B:96:CD:45:1E:8E:B6:B4:0D:40:7B:67:3D:4D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af59654f-8b05-39eb-9d7f-ffd24f6b23dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.96.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1b:63:f2:95:53:1c:67:76:ca:f0:55:7b:1f:e3:c2:78:c8:
         2f:3f:44:03:0e:39:82:58:a4:bf:d2:a9:19:12:bb:28:dc:6e:
         d7:8d:68:a2:6c:1d:8a:a9:68:ed:fc:c6:0d:66:38:74:21:52:
         e9:e7:8f:8b:74:8a:2c:1b:d5:39:c8:98:54:87:5e:41:33:6f:
         1b:61:78:74:ff:c1:f8:a5:ca:06:f1:fb:2a:de:da:98:44:39:
         09:05:9d:03:66:5e:d4:89:8a:26:56:51:ce:4f:1b:99:4a:20:
         c5:f8:50:27:84:c5:cd:04:f6:8f:83:e4:8a:98:28:cd:7c:16:
         48:95:4d:0c:1d:6c:af:0d:35:ce:2d:56:5f:5a:2f:8a:0e:44:
         43:7a:bf:7c:a7:86:ed:62:64:13:c6:e5:f6:71:dd:cd:e9:7f:
         6c:ba:26:a0:04:cd:f2:6a:f3:04:47:0a:69:f7:c5:55:c5:6c:
         a0:11:ef:57:f7:ae:5f:44:80:c0:46:15:21:da:a8:0b:7a:49:
         f9:ea:a8:3b:f2:eb:08:07:fe:80:7f:7d:d6:a4:9b:8a:ed:fd:
         0e:5e:4a:f9:1c:f5:90:ec:70:cf:79:e0:ce:13:e0:99:55:af:
         05:e9:1f:39:e4:e0:e4:13:88:18:fe:e9:83:5b:b4:fd:2f:de:
         df:7d:d9:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYhZOAiJGmhnLSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
NWNmMWFkZjEtZDkxZi00ZTY1LTk3Y2YtY2VmYTdhMmQzYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxRc0RJIR3uuwt1sQ2RSvmvWlAlcf2iYhobF
ZtzQ1DbTStem3UMAqfp6NPjp7zOIOWG4WaIoz1BeWnlqDRhlq7OnnjlmaucB4gx0
v/Wvf8d+te8Paq4Te+3xv+1cN81eXmcFUnmd2Hgf2snRPjcEWs6JSiZN4sWR/hTL
Hs9bBo5ZtZ0Wv2MQd1k9mnzhRkMaJhTkt+jaJ516f6SIhz1xl4Xu1315328ZGooT
eP4gLIXMa1G3t85Q8oaLvS8HeLEfxTlfGDj18YVM5Ng/ko9hXbW5+ddWk/W9r8zT
NLewkvNHYgFzwABmmKDCM1Oj7PSituP2UgeqdsthtE07ZnbM2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsXWXKMW5bNRR6OtrQNQHtnPU2QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY1OTY1NGYtOGIwNS0z
OWViLTlkN2YtZmZkMjRmNmIyM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWCkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQbY/KVUxxndsrwVXsf48J4yC8/RAMOOYJYpL/SqRkSuyjcbteNaKJs
HYqpaO38xg1mOHQhUunnj4t0iiwb1TnImFSHXkEzbxtheHT/wfilygbx+yre2phE
OQkFnQNmXtSJiiZWUc5PG5lKIMX4UCeExc0E9o+D5IqYKM18FkiVTQwdbK8NNc4t
Vl9aL4oOREN6v3ynhu1iZBPG5fZx3c3pf2y6JqAEzfJq8wRHCmn3xVXFbKAR71f3
rl9EgMBGFSHaqAt6SfnqqDvy6wgH/oB/fdakm4rt/Q5eSvkc9ZDscM954M4T4JlV
rwXpHznk4OQTiBj+6YNbtP0v3t992bs=
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:15:32 2026 by rpki-client