Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65b351e-74e5-3b55-9025-e6839c538278.roa
File:                     b65b351e-74e5-3b55-9025-e6839c538278.roa (raw, json)
Hash identifier:          p3aT8PUIS1nnGgeFUHZ3kXCqh28VJjb8bWqnCsjTBFc=
Subject key identifier:   E1:1B:0E:C9:8A:BB:69:D5:0F:CD:E2:51:FC:04:4B:21:85:03:5F:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3AA07EA3784AA20AEF7A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65b351e-74e5-3b55-9025-e6839c538278.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        69.249.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:a0:7e:a3:78:4a:a2:0a:ef:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=7dd18aff-5b0f-4519-b50e-bdf6f6ece1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:af:8f:df:a8:0a:8e:7f:71:91:8b:55:f9:
                    8d:a5:15:13:95:76:a0:33:f3:53:b8:37:ad:ca:8d:
                    22:61:7f:36:de:83:d0:25:35:01:57:45:9c:ea:e8:
                    0b:64:8f:1e:99:22:a3:99:0f:7a:6e:e8:5a:90:11:
                    ce:61:2a:a4:f2:9b:57:dc:02:a4:90:50:e6:1c:74:
                    f8:9d:18:cd:f0:98:05:4b:74:cd:23:e6:77:5e:51:
                    52:e4:9e:5f:59:28:37:f1:38:02:b3:9f:4f:07:23:
                    1b:6c:18:00:b4:bb:ca:b8:45:64:2f:33:49:0f:20:
                    13:e2:e7:e3:13:d4:1b:0d:fd:4f:19:6c:29:03:ab:
                    9f:c5:ff:81:fc:70:23:5c:01:c1:0e:75:e6:c3:6c:
                    e6:1f:19:1f:43:1b:a4:65:66:ab:7c:1c:82:70:da:
                    b7:17:7d:0a:fd:70:d0:70:82:0b:5d:0b:d1:5a:2d:
                    84:2e:e1:57:90:63:53:8d:ba:1a:5d:53:d4:bb:38:
                    ce:2a:df:85:c2:92:6f:12:67:7d:a0:a6:92:89:6b:
                    45:20:ab:81:ca:dc:78:a1:21:8c:ca:57:7e:fa:bb:
                    ea:0b:a7:5f:67:1a:fd:7f:bf:50:ff:89:df:2e:ca:
                    7d:a9:49:09:30:f3:15:6c:c1:e3:ca:e6:00:f1:91:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1B:0E:C9:8A:BB:69:D5:0F:CD:E2:51:FC:04:4B:21:85:03:5F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65b351e-74e5-3b55-9025-e6839c538278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3d:b1:4b:9d:da:15:56:88:ff:43:0a:8a:f6:e5:1a:de:b3:
         de:e0:5e:b3:02:75:b1:f7:7c:d7:b4:de:bf:75:8e:e9:4b:d8:
         2c:d8:d8:25:8a:3f:e5:f8:d3:eb:df:a2:e6:3b:d1:e8:a0:1b:
         b1:c8:66:24:b7:e0:11:fa:0c:1d:2c:c7:e2:ed:81:b3:33:2f:
         3e:6d:7f:ac:04:7a:b9:5a:a2:69:76:84:8d:0d:78:b3:f2:bb:
         77:43:02:89:39:a8:23:7b:cc:b7:8a:5a:17:12:b5:29:78:8c:
         36:2b:00:cc:d2:f9:af:75:29:9d:8d:b8:04:d7:b0:60:2e:e1:
         4c:a9:b6:54:60:74:a1:be:84:d8:5b:ca:bb:39:69:61:f5:97:
         b9:0e:91:61:52:06:30:9b:bb:3c:58:3d:d1:cb:70:46:b3:54:
         30:75:f8:db:c4:41:7a:b8:7d:26:01:65:33:d0:5b:b5:ad:6f:
         29:77:23:41:0c:02:1e:4b:20:3a:c4:d7:0d:a8:b7:59:96:62:
         6c:e2:f5:e3:32:e2:e4:e2:b1:cc:96:ac:f0:40:70:d1:d1:c2:
         f0:28:d5:27:f0:a6:d2:22:7d:a3:8c:ef:13:e1:06:fe:f4:b7:
         0b:ff:ba:b0:02:14:f1:ae:22:91:6e:e6:f0:7a:b9:cc:89:c8:
         ea:c6:83:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOqB+o3hKogrvekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
N2RkMThhZmYtNWIwZi00NTE5LWI1MGUtYmRmNmY2ZWNlMWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uuvj9+oCo5/cZGLVfmNpRUTlXagM/NTuDet
yo0iYX823oPQJTUBV0Wc6ugLZI8emSKjmQ96buhakBHOYSqk8ptX3AKkkFDmHHT4
nRjN8JgFS3TNI+Z3XlFS5J5fWSg38TgCs59PByMbbBgAtLvKuEVkLzNJDyAT4ufj
E9QbDf1PGWwpA6ufxf+B/HAjXAHBDnXmw2zmHxkfQxukZWarfByCcNq3F30K/XDQ
cIILXQvRWi2ELuFXkGNTjboaXVPUuzjOKt+FwpJvEmd9oKaSiWtFIKuBytx4oSGM
yld++rvqC6dfZxr9f79Q/4nfLsp9qUkJMPMVbMHjyuYA8ZGl+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOEbDsmKu2nVD83iUfwESyGFA1+HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY1YjM1MWUtNzRlNS0z
YjU1LTkwMjUtZTY4MzljNTM4Mjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRfl0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHc9sUud2hVWiP9DCor25Rres97gXrMCdbH3fNe03r91julL2CzY2CWK
P+X40+vfouY70eigG7HIZiS34BH6DB0sx+LtgbMzLz5tf6wEerlaoml2hI0NeLPy
u3dDAok5qCN7zLeKWhcStSl4jDYrAMzS+a91KZ2NuATXsGAu4UyptlRgdKG+hNhb
yrs5aWH1l7kOkWFSBjCbuzxYPdHLcEazVDB1+NvEQXq4fSYBZTPQW7Wtbyl3I0EM
Ah5LIDrE1w2ot1mWYmzi9eMy4uTiscyWrPBAcNHRwvAo1SfwptIifaOM7xPhBv70
twv/urACFPGuIpFu5vB6ucyJyOrGgzM=
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:50:47 2026 by rpki-client