Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b39b7925-12c4-3bd4-8013-9e8cfbcacdb0.roa
File:                     b39b7925-12c4-3bd4-8013-9e8cfbcacdb0.roa (raw, json)
Hash identifier:          W+jzLTIkUCkZZjlzwsxUDkvM1kqiYTIQ1y8UtJXN20A=
Subject key identifier:   8B:68:90:45:C9:8F:3E:DA:18:58:BA:F9:4D:97:FB:A4:CE:2A:42:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF74E0683E2102B48553100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b39b7925-12c4-3bd4-8013-9e8cfbcacdb0.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        69.253.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:4e:06:83:e2:10:2b:48:55:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=025d2b28-3e50-40f8-98ed-4659102e4dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:3e:4c:b9:15:e0:de:f0:e0:b7:87:dd:0d:
                    6a:e0:4b:a4:40:a6:36:5c:31:41:d0:fa:b6:ba:fd:
                    2f:36:02:73:fc:32:9a:9a:14:c8:8a:30:51:61:58:
                    45:79:af:7c:a2:9a:c2:9b:4c:1d:4f:2c:ee:84:04:
                    c1:e7:26:cc:7d:f8:48:8d:48:1e:1d:75:de:84:19:
                    27:87:44:63:1b:58:93:25:89:f1:00:8a:21:33:70:
                    94:76:00:fb:bc:c8:e5:58:40:fd:ca:ed:62:1b:a2:
                    0a:b1:81:20:d5:de:ae:31:50:d0:fb:87:2d:f8:3c:
                    89:3b:ac:25:ef:7a:cd:ba:2d:1f:86:65:92:47:df:
                    1e:f8:b9:2f:0f:35:5d:ad:82:36:c1:a7:44:97:02:
                    8c:d8:ea:0e:30:6e:4d:6b:f2:c9:a8:91:85:0b:12:
                    1a:53:7e:89:8d:e0:9c:c5:f3:86:87:9f:c0:08:91:
                    c9:e3:c9:2d:8e:5c:22:4b:00:89:bd:93:db:6a:9f:
                    e5:22:85:6e:2a:33:d7:26:5e:fb:89:96:8b:2c:3a:
                    cb:44:a0:5b:ff:ea:bd:b7:be:de:db:04:d1:60:39:
                    ea:80:8b:f1:75:7e:3c:b3:2f:88:d3:22:44:ed:b6:
                    94:c1:6a:74:03:dd:fe:a5:2a:bd:ba:30:36:a4:fb:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:68:90:45:C9:8F:3E:DA:18:58:BA:F9:4D:97:FB:A4:CE:2A:42:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b39b7925-12c4-3bd4-8013-9e8cfbcacdb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:d4:e9:57:f6:59:06:99:0e:ab:74:06:b2:f1:ca:cc:c9:
         14:47:2b:cd:45:e2:fd:da:a0:62:1a:39:86:22:13:fe:50:71:
         22:68:6f:e2:fd:da:21:af:69:d1:42:f3:ae:88:47:c5:6a:f9:
         60:99:47:27:b4:d8:99:d3:e4:12:75:12:b2:2f:42:ae:9f:4b:
         df:1e:ca:4b:8a:89:50:b1:1f:22:8b:bd:b5:0d:00:70:cf:73:
         ff:5b:92:cc:29:23:fe:2a:6b:97:26:21:a1:97:86:aa:40:2e:
         61:fb:dd:6b:65:d6:e2:7f:a4:6e:7b:cd:d2:3d:96:8b:46:33:
         0e:74:16:a2:e1:96:f2:a8:8e:a9:da:24:23:f7:0d:4d:16:1a:
         ff:7b:87:37:cc:fc:60:d9:92:51:68:08:b9:14:66:cb:d4:1f:
         b8:f2:79:50:46:e2:8b:fd:c0:58:06:3b:7f:c6:19:9c:5b:c2:
         d3:e4:ff:dd:46:9f:ee:32:18:fb:56:04:d5:fa:bb:03:74:60:
         e5:68:76:79:61:8d:4b:ba:9a:19:0d:24:d9:cd:85:86:4e:a7:
         5f:43:51:a0:83:aa:48:c3:f5:65:c7:06:7f:21:55:ee:57:08:
         c9:cb:3d:ce:8a:c6:40:a8:24:f2:d3:63:36:de:a6:28:11:42:
         1b:ba:11:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O904Gg+IQK0hVMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MDI1ZDJiMjgtM2U1MC00MGY4LTk4ZWQtNDY1OTEwMmU0ZGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrU+TLkV4N7w4LeH3Q1q4EukQKY2XDFB0Pq2
uv0vNgJz/DKamhTIijBRYVhFea98oprCm0wdTyzuhATB5ybMffhIjUgeHXXehBkn
h0RjG1iTJYnxAIohM3CUdgD7vMjlWED9yu1iG6IKsYEg1d6uMVDQ+4ct+DyJO6wl
73rNui0fhmWSR98e+LkvDzVdrYI2wadElwKM2OoOMG5Na/LJqJGFCxIaU36JjeCc
xfOGh5/ACJHJ48ktjlwiSwCJvZPbap/lIoVuKjPXJl77iZaLLDrLRKBb/+q9t77e
2wTRYDnqgIvxdX48sy+I0yJE7baUwWp0A93+pSq9ujA2pPv6cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItokEXJjz7aGFi6+U2X+6TOKkK3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjM5Yjc5MjUtMTJjNC0z
YmQ0LTgwMTMtOWU4Y2ZiY2FjZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARf33MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPN1OlX9lkGmQ6rdAay8crMyRRHK81F4v3aoGIaOYYiE/5QcSJob+L9
2iGvadFC866IR8Vq+WCZRye02JnT5BJ1ErIvQq6fS98eykuKiVCxHyKLvbUNAHDP
c/9bkswpI/4qa5cmIaGXhqpALmH73Wtl1uJ/pG57zdI9lotGMw50FqLhlvKojqna
JCP3DU0WGv97hzfM/GDZklFoCLkUZsvUH7jyeVBG4ov9wFgGO3/GGZxbwtPk/91G
n+4yGPtWBNX6uwN0YOVodnlhjUu6mhkNJNnNhYZOp19DUaCDqkjD9WXHBn8hVe5X
CMnLPc6KxkCoJPLTYzbepigRQhu6EVk=
-----END CERTIFICATE-----
Generated at Tue Apr 21 21:38:29 2026 by rpki-client