Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2736aad-b697-3815-977d-1a5c10d48be7.roa
File:                     b2736aad-b697-3815-977d-1a5c10d48be7.roa (raw, json)
Hash identifier:          4eBSDAj5c0PwXhhcA0XLHY7XjcJxDg7tCFaZqoUt4xM=
Subject key identifier:   DC:24:77:11:3D:8F:7F:F6:E6:5B:4D:15:81:52:C6:1F:E8:32:BB:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF5C92FC3202E6E3FD7F080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2736aad-b697-3815-977d-1a5c10d48be7.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        73.198.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:c9:2f:c3:20:2e:6e:3f:d7:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=824dc156-7209-4c71-a496-0b0dd667f374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:63:cb:79:ef:85:47:0e:22:76:4d:18:c5:
                    b0:22:60:51:9c:19:bf:35:f4:61:45:54:15:58:41:
                    f3:24:ed:55:5a:bc:2f:26:02:c9:9c:f4:2f:e0:fd:
                    e6:ea:9c:58:74:36:cd:96:38:91:4f:0f:d9:40:d8:
                    fe:8a:06:98:86:fd:08:b7:26:ec:fb:cf:58:e6:f6:
                    94:55:02:73:14:3f:dc:5a:4f:96:88:bd:74:d6:59:
                    78:15:8a:1e:e2:01:13:ff:e8:36:98:15:fe:d7:52:
                    e9:df:91:5a:2e:b8:05:c9:e2:ed:a2:fd:0d:a8:ad:
                    f8:dd:83:33:26:7a:c6:c3:34:1c:4e:fd:ea:58:5a:
                    5a:88:3c:4d:96:1c:70:19:22:8b:49:a8:0b:05:39:
                    f0:a6:d8:7f:46:4f:c3:fd:b2:2b:98:aa:40:d7:e1:
                    0c:15:87:1a:77:86:8a:07:7b:b4:4d:a4:0a:cc:bc:
                    9a:be:8e:7c:a8:84:40:0d:14:0f:a3:7f:dc:c3:47:
                    ca:35:7b:e4:2d:7e:fd:69:c8:d7:4d:56:7e:eb:20:
                    63:94:4f:9b:b4:5c:55:51:7f:bd:2f:35:68:1e:7d:
                    0e:ee:0f:7c:7a:dd:2a:7a:f5:6c:07:59:0c:0a:c2:
                    86:00:ad:2c:1b:a9:fc:03:6b:38:a7:78:32:62:f8:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:24:77:11:3D:8F:7F:F6:E6:5B:4D:15:81:52:C6:1F:E8:32:BB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2736aad-b697-3815-977d-1a5c10d48be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.198.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:80:74:70:e3:67:84:ab:66:38:d8:32:7b:fd:e6:8a:81:c4:
         a1:22:df:7c:bd:db:b4:f9:0d:5b:1e:45:f2:43:4f:a7:a4:78:
         c4:43:20:ae:bd:b5:be:8d:7f:15:b4:7f:72:1c:a7:39:64:51:
         d2:07:c9:d5:c0:a3:9a:ac:40:6b:62:8f:f1:a1:dd:db:e5:f3:
         b3:2d:4e:34:7f:25:45:9f:4a:dd:81:98:f3:7e:50:cf:14:d0:
         e5:f4:ec:08:c5:0f:e5:37:5e:bc:b0:a9:be:fa:26:04:25:56:
         0b:3c:bb:ea:4c:74:4b:b4:92:4a:a6:01:2e:e2:f7:01:02:e3:
         2e:ec:05:ad:85:e2:15:19:5b:6e:b2:a5:b6:39:b5:88:11:c3:
         99:bd:ad:7e:b6:b2:71:4f:b3:76:a4:72:1b:52:4b:2e:2f:0d:
         b7:d0:93:06:fd:ed:42:f9:71:fc:e0:f1:c7:d1:5d:27:2b:83:
         99:57:ef:9b:0f:9e:c0:c0:22:cd:33:44:55:71:4e:6d:76:0f:
         1f:c2:5c:44:0f:da:04:0c:8a:eb:ac:ad:ca:c4:06:43:f8:c3:
         e0:62:5a:55:6f:a1:4e:19:92:21:5d:19:7c:04:60:45:c9:30:
         9b:f2:85:86:0d:36:dc:df:fd:62:fd:91:db:cd:a2:1b:bf:85:
         5d:5c:39:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9ckvwyAubj/X8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ODI0ZGMxNTYtNzIwOS00YzcxLWE0OTYtMGIwZGQ2NjdmMzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKZjy3nvhUcOInZNGMWwImBRnBm/NfRhRVQV
WEHzJO1VWrwvJgLJnPQv4P3m6pxYdDbNljiRTw/ZQNj+igaYhv0Itybs+89Y5vaU
VQJzFD/cWk+WiL101ll4FYoe4gET/+g2mBX+11Lp35FaLrgFyeLtov0NqK343YMz
JnrGwzQcTv3qWFpaiDxNlhxwGSKLSagLBTnwpth/Rk/D/bIrmKpA1+EMFYcad4aK
B3u0TaQKzLyavo58qIRADRQPo3/cw0fKNXvkLX79acjXTVZ+6yBjlE+btFxVUX+9
LzVoHn0O7g98et0qevVsB1kMCsKGAK0sG6n8A2s4p3gyYvie8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwkdxE9j3/25ltNFYFSxh/oMrsXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjI3MzZhYWQtYjY5Ny0z
ODE1LTk3N2QtMWE1YzEwZDQ4YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2AdHDjZ4SrZjjYMnv95oqBxKEi33y927T5DVseRfJDT6ekeMRDIK69
tb6NfxW0f3IcpzlkUdIHydXAo5qsQGtij/Gh3dvl87MtTjR/JUWfSt2BmPN+UM8U
0OX07AjFD+U3Xrywqb76JgQlVgs8u+pMdEu0kkqmAS7i9wEC4y7sBa2F4hUZW26y
pbY5tYgRw5m9rX62snFPs3akchtSSy4vDbfQkwb97UL5cfzg8cfRXScrg5lX75sP
nsDAIs0zRFVxTm12Dx/CXEQP2gQMiuusrcrEBkP4w+BiWlVvoU4ZkiFdGXwEYEXJ
MJvyhYYNNtzf/WL9kdvNohu/hV1cOXY=
-----END CERTIFICATE-----
Generated at Tue Apr 21 20:47:22 2026 by rpki-client