Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd5bf878-fe1b-3974-afd4-4947399acb4c.roa
File:                     bd5bf878-fe1b-3974-afd4-4947399acb4c.roa (raw, json)
Hash identifier:          8McTA5yPuN3oM4XPaV8HUWHMm2NJY1bZ4ugPvIWbHTY=
Subject key identifier:   0C:A8:6F:AA:F0:C9:D4:78:16:9F:A4:7A:75:B1:CD:6E:32:D3:C9:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF704310CABD783D9824C70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd5bf878-fe1b-3974-afd4-4947399acb4c.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33660
IP address blocks:        76.140.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:04:31:0c:ab:d7:83:d9:82:4c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=537a71fd-5396-4cbc-b306-5b0ac72c94c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:f9:fc:b1:da:49:e1:d5:28:f9:4c:c8:f0:
                    1c:87:e9:9b:0a:67:b6:cf:d2:5f:57:44:cc:e7:ea:
                    a1:61:e4:c1:5c:b3:cc:06:4d:93:a5:bd:7b:1a:34:
                    d8:9d:2e:dd:63:49:c8:7c:b7:40:9d:1a:7a:ad:51:
                    fc:af:fc:d0:05:3c:fa:97:04:eb:25:69:8a:f9:34:
                    1a:9c:cb:61:62:6a:a7:74:d7:63:5b:34:05:fa:2a:
                    2c:2b:c7:9c:51:28:55:55:28:03:e6:d5:87:cf:a5:
                    03:89:2d:07:50:2a:bb:01:c3:14:3b:e3:cc:4b:6f:
                    0a:7c:36:d3:2e:b8:4a:ed:d7:65:7c:fd:cd:ae:ca:
                    44:86:a4:64:bc:a6:37:c7:60:c0:5e:e6:87:d3:1f:
                    c3:8f:bf:5d:8a:b5:fd:59:31:8f:6d:d3:3e:18:32:
                    e2:b9:48:df:d1:18:65:c2:ca:12:a3:05:c1:94:b2:
                    e2:01:c5:ea:88:75:de:dc:8a:28:b3:c5:e5:6b:b1:
                    cc:46:74:ed:c6:b9:70:eb:9c:bb:b5:bc:81:26:f1:
                    25:e1:cf:10:ba:35:dd:fc:ae:b9:14:5d:98:bf:81:
                    cf:98:a6:50:41:10:96:0b:fd:7f:dc:82:59:04:29:
                    92:50:d3:2a:cc:78:ba:04:88:a8:32:65:2e:5d:1b:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A8:6F:AA:F0:C9:D4:78:16:9F:A4:7A:75:B1:CD:6E:32:D3:C9:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd5bf878-fe1b-3974-afd4-4947399acb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.140.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:b2:6a:06:22:4d:2c:e5:99:59:d9:f3:17:3b:3c:d6:53:2c:
         e0:1b:f6:1b:4c:20:63:51:0e:97:2b:e6:89:e0:cc:49:39:30:
         a3:69:54:00:03:5f:56:d5:82:91:12:e4:af:f4:6e:0b:78:20:
         56:e1:c1:85:bc:9d:a0:58:d4:4c:bf:be:ab:a1:03:3a:12:90:
         7c:a9:b8:ec:03:46:58:a3:58:26:53:ef:3a:fb:5f:1d:5d:19:
         0d:2b:31:26:b8:09:17:16:6c:58:a8:8a:98:d7:9c:ec:cd:34:
         0a:5e:49:e4:fc:8c:b7:ed:7c:34:33:fa:51:f1:aa:6c:d1:b5:
         bc:5f:e2:29:0d:76:19:49:a4:e7:90:3b:24:e3:cd:4d:04:81:
         40:b0:a9:64:6e:7e:5f:23:04:54:3d:74:b9:4b:16:9c:af:67:
         ed:55:8a:0c:e6:c7:4c:37:2e:62:82:15:8c:eb:52:f9:ed:ba:
         8f:be:52:f8:1a:ab:84:4b:37:dc:d1:4c:04:01:af:d1:40:28:
         f8:52:6a:d9:f0:e0:3c:35:f3:04:60:3e:9b:c7:c2:80:7a:c9:
         e1:4b:b9:f3:b4:4f:b7:89:55:c2:7e:0b:b9:53:b0:0c:62:da:
         7d:c9:c6:55:95:ec:3e:f9:d3:7e:c1:ff:55:57:24:33:7a:f0:
         c5:92:c6:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9wQxDKvXg9mCTHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
NTM3YTcxZmQtNTM5Ni00Y2JjLWIzMDYtNWIwYWM3MmM5NGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl35/LHaSeHVKPlMyPAch+mbCme2z9JfV0TM
5+qhYeTBXLPMBk2Tpb17GjTYnS7dY0nIfLdAnRp6rVH8r/zQBTz6lwTrJWmK+TQa
nMthYmqndNdjWzQF+iosK8ecUShVVSgD5tWHz6UDiS0HUCq7AcMUO+PMS28KfDbT
LrhK7ddlfP3NrspEhqRkvKY3x2DAXuaH0x/Dj79dirX9WTGPbdM+GDLiuUjf0Rhl
wsoSowXBlLLiAcXqiHXe3Ioos8Xla7HMRnTtxrlw65y7tbyBJvEl4c8QujXd/K65
FF2Yv4HPmKZQQRCWC/1/3IJZBCmSUNMqzHi6BIioMmUuXRsWOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyob6rwydR4Fp+kenWxzW4y08l6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ1YmY4NzgtZmUxYi0z
OTc0LWFmZDQtNDk0NzM5OWFjYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIwsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANCyagYiTSzlmVnZ8xc7PNZTLOAb9htMIGNRDpcr5ongzEk5MKNpVAAD
X1bVgpES5K/0bgt4IFbhwYW8naBY1Ey/vquhAzoSkHypuOwDRlijWCZT7zr7Xx1d
GQ0rMSa4CRcWbFioipjXnOzNNApeSeT8jLftfDQz+lHxqmzRtbxf4ikNdhlJpOeQ
OyTjzU0EgUCwqWRufl8jBFQ9dLlLFpyvZ+1Vigzmx0w3LmKCFYzrUvntuo++Uvga
q4RLN9zRTAQBr9FAKPhSatnw4Dw18wRgPpvHwoB6yeFLufO0T7eJVcJ+C7lTsAxi
2n3JxlWV7D75037B/1VXJDN68MWSxlE=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:28:16 2026 by rpki-client