Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be78989b-d508-3ed8-a54c-025d71e818b9.roa
File:                     be78989b-d508-3ed8-a54c-025d71e818b9.roa (raw, json)
Hash identifier:          QK5kv9cILPcXOtNGDtlYyLqf3vuKSIfrp8VjUa89NSg=
Subject key identifier:   74:A7:7E:6E:04:6A:28:F4:B4:A4:2F:91:BF:23:EA:E0:C4:06:82:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36002303C1B80E12440FDE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be78989b-d508-3ed8-a54c-025d71e818b9.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        73.55.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:23:03:c1:b8:0e:12:44:0f:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=24d6258a-f983-406b-9ead-b5a438f5acb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:e8:fb:08:e1:4e:18:a4:ec:2e:2a:fa:47:
                    43:42:6a:90:a1:ae:3f:9a:e2:fb:8e:c2:fb:5a:9c:
                    e7:08:8c:4b:09:31:f7:04:6c:13:04:96:f5:ac:f5:
                    72:a3:cc:3e:3f:17:20:44:73:e2:2e:0a:41:4e:af:
                    50:58:20:9b:ee:91:68:70:bc:20:e9:df:7f:41:fc:
                    f9:d4:8a:3a:26:25:8c:1e:70:4d:e3:db:6d:bb:bf:
                    3b:da:d9:fe:ae:04:44:ee:d3:57:78:45:aa:75:8e:
                    42:f5:82:c5:b0:76:cc:13:68:d1:b8:d9:14:61:47:
                    02:12:10:76:9d:2b:e7:f6:7c:4a:9a:2c:ee:bc:6c:
                    29:be:50:a5:1c:1e:72:8e:13:ab:02:a9:6c:42:24:
                    ee:d1:de:3b:07:96:bc:39:3b:ab:42:55:81:d2:30:
                    0f:ff:45:b0:ee:02:ef:7f:82:f3:0a:eb:6a:0a:80:
                    40:6d:dc:0e:76:34:23:54:8a:4b:70:fd:13:ba:cb:
                    9e:cb:3a:d5:45:d8:cd:73:e6:55:b9:58:21:68:da:
                    46:28:ab:9d:31:53:07:f6:7b:a1:f1:93:d1:77:da:
                    73:48:ce:6a:0d:bd:b9:a0:bd:2e:37:5f:77:4b:71:
                    ba:31:42:20:b5:7f:45:16:2b:e1:19:11:57:1f:5c:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A7:7E:6E:04:6A:28:F4:B4:A4:2F:91:BF:23:EA:E0:C4:06:82:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be78989b-d508-3ed8-a54c-025d71e818b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.55.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:cb:07:7e:a2:52:3f:a2:42:8f:0e:d5:15:94:4a:f9:1b:2e:
         be:bb:37:e7:09:d6:73:6d:b9:8f:82:4a:b3:05:c6:30:d9:98:
         a9:5e:4b:80:6d:26:ed:4b:96:c6:88:74:4a:ef:53:a9:16:cb:
         a1:af:df:fa:8b:74:a4:ab:fb:5c:5f:b9:4c:47:02:6d:d7:2a:
         27:f2:51:b2:58:b9:cd:73:bc:7a:07:99:b8:bc:37:d5:e6:25:
         9f:75:6a:da:4b:e8:13:1f:89:bf:cf:91:8a:4d:fa:ad:d1:96:
         8d:07:ab:d4:40:b5:0c:57:73:27:63:de:93:c5:0a:80:5c:af:
         f2:51:a0:24:b9:29:3f:e2:26:1c:ba:34:ce:14:7f:94:0c:23:
         7a:f9:d3:1b:ce:1f:79:f7:89:0e:ed:c6:ce:96:ab:4b:fd:92:
         73:da:db:91:66:bf:50:40:ca:73:e3:67:66:78:9c:5f:6d:b5:
         57:79:65:df:cc:c4:ab:27:9c:3a:27:53:37:85:73:39:8f:0c:
         0a:15:e1:87:a2:4e:fe:b8:c5:74:ad:b4:e6:06:c6:ac:2d:d3:
         c6:db:55:2f:15:11:a1:ee:82:19:6b:28:e8:ac:22:ed:25:5f:
         1d:ae:9e:48:7d:d5:3b:2e:29:5c:e8:bb:21:52:c0:e6:04:e8:
         a1:d4:2f:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42ACMDwbgOEkQP3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
MjRkNjI1OGEtZjk4My00MDZiLTllYWQtYjVhNDM4ZjVhY2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCbo+wjhThik7C4q+kdDQmqQoa4/muL7jsL7
WpznCIxLCTH3BGwTBJb1rPVyo8w+PxcgRHPiLgpBTq9QWCCb7pFocLwg6d9/Qfz5
1Io6JiWMHnBN49ttu7872tn+rgRE7tNXeEWqdY5C9YLFsHbME2jRuNkUYUcCEhB2
nSvn9nxKmizuvGwpvlClHB5yjhOrAqlsQiTu0d47B5a8OTurQlWB0jAP/0Ww7gLv
f4LzCutqCoBAbdwOdjQjVIpLcP0TusueyzrVRdjNc+ZVuVghaNpGKKudMVMH9nuh
8ZPRd9pzSM5qDb25oL0uN193S3G6MUIgtX9FFivhGRFXH1z7zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSnfm4Eaij0tKQvkb8j6uDEBoKYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU3ODk4OWItZDUwOC0z
ZWQ4LWE1NGMtMDI1ZDcxZTgxOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSTeMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALvLB36iUj+iQo8O1RWUSvkbLr67N+cJ1nNtuY+CSrMFxjDZmKleS4Bt
Ju1LlsaIdErvU6kWy6Gv3/qLdKSr+1xfuUxHAm3XKifyUbJYuc1zvHoHmbi8N9Xm
JZ91atpL6BMfib/PkYpN+q3Rlo0Hq9RAtQxXcydj3pPFCoBcr/JRoCS5KT/iJhy6
NM4Uf5QMI3r50xvOH3n3iQ7txs6Wq0v9knPa25Fmv1BAynPjZ2Z4nF9ttVd5Zd/M
xKsnnDonUzeFczmPDAoV4YeiTv64xXSttOYGxqwt08bbVS8VEaHughlrKOisIu0l
Xx2unkh91TsuKVzouyFSwOYE6KHUL1M=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:43:58 2026 by rpki-client