Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c29e24f3-ebf2-32a6-aa1f-348678472c54.roa
File:                     c29e24f3-ebf2-32a6-aa1f-348678472c54.roa (raw, json)
Hash identifier:          hir+4MxoO5vpydX6gfKUcifBE8mPM+I5hiI0vvEz2Rg=
Subject key identifier:   77:EF:CE:BE:6E:D3:2E:C6:6E:CE:68:13:96:BA:E1:CC:55:2B:18:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF8E7047886FEA2B0183480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c29e24f3-ebf2-32a6-aa1f-348678472c54.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        73.252.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:e7:04:78:86:fe:a2:b0:18:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=4b0fe3ec-0490-4ac9-b536-277e42f9f2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:32:98:3c:42:c2:cd:85:d8:c7:6d:65:25:
                    fe:c9:b6:60:37:3b:3d:04:f6:5f:7a:6b:58:b4:9c:
                    01:48:68:a4:9f:5f:40:cb:c5:67:42:e3:7f:97:44:
                    7e:ed:32:a7:5b:63:1a:67:49:99:c7:7d:e0:41:8d:
                    c9:11:7b:f4:3a:29:81:ff:68:db:92:57:d3:57:c7:
                    74:07:be:3c:59:af:df:fe:24:69:a1:7a:73:e3:b6:
                    8b:fc:51:fb:fe:bf:49:0d:48:7a:f9:76:83:1f:69:
                    3d:2f:01:a1:c7:ac:e2:d4:ff:e9:e5:c0:78:ae:de:
                    8e:b0:a4:a2:5c:62:90:19:8b:2a:97:55:6e:ef:ad:
                    20:c4:77:b8:68:a5:ae:e3:fa:0c:06:77:c6:50:14:
                    41:00:1b:ba:4c:ec:f8:00:62:39:28:d6:d4:88:b4:
                    26:7d:42:a9:ef:43:f0:3d:9f:4f:70:1e:f0:39:e8:
                    1c:f3:ee:e8:8a:f1:66:f8:e2:94:d2:62:83:19:51:
                    92:43:74:65:46:bf:26:f8:88:02:44:82:41:56:63:
                    ef:a5:b2:c5:55:a2:98:82:1d:08:75:88:bc:cb:9e:
                    1a:e5:bf:8d:36:ef:92:6b:f3:2f:06:ec:27:c3:38:
                    15:1c:53:d2:7c:c2:40:3b:98:3b:29:cf:7d:07:74:
                    ba:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EF:CE:BE:6E:D3:2E:C6:6E:CE:68:13:96:BA:E1:CC:55:2B:18:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c29e24f3-ebf2-32a6-aa1f-348678472c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:41:57:ca:8c:78:15:21:d7:1d:e5:ae:10:4d:51:95:b0:de:
         e3:21:67:f5:ad:06:7c:28:79:5b:ef:11:61:80:ac:62:a8:2e:
         f4:28:33:43:e7:0f:67:0a:45:45:fc:ef:67:41:71:3d:07:b7:
         2e:e6:ea:93:d7:2c:c5:52:04:ba:62:8f:6a:71:4f:86:38:ba:
         c7:7f:a9:1d:a7:88:e7:b2:45:f0:48:b7:e6:cd:08:04:b5:20:
         99:67:bf:b6:c8:90:a2:73:27:db:d2:93:7b:a1:f2:1f:36:69:
         8a:a4:28:8c:d4:02:da:0b:4a:17:69:71:3d:fe:51:1b:6a:53:
         f3:7f:ee:ac:e9:18:a8:35:71:c1:c1:2b:1b:50:19:4e:e8:d4:
         13:23:00:ed:4f:89:d5:65:c3:c6:b2:60:c1:b8:db:7d:b8:39:
         3a:16:06:54:dc:0b:83:b0:58:b5:e7:35:8d:b5:59:70:01:fe:
         b0:c3:63:73:ef:0e:95:63:cd:df:5c:52:bc:be:06:cf:2f:ab:
         5d:fc:2b:ff:1b:47:fa:14:e4:76:a9:be:e5:fb:4c:d6:96:8f:
         8f:dd:71:12:bf:35:27:32:03:8a:3b:d7:0b:0c:8a:15:70:d8:
         e0:dc:96:a8:b3:10:04:54:15:ea:7c:9a:03:f5:af:a8:7d:33:
         0a:03:3e:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+OcEeIb+orAYNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
NGIwZmUzZWMtMDQ5MC00YWM5LWI1MzYtMjc3ZTQyZjlmMmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo04ymDxCws2F2MdtZSX+ybZgNzs9BPZfemtY
tJwBSGikn19Ay8VnQuN/l0R+7TKnW2MaZ0mZx33gQY3JEXv0OimB/2jbklfTV8d0
B748Wa/f/iRpoXpz47aL/FH7/r9JDUh6+XaDH2k9LwGhx6zi1P/p5cB4rt6OsKSi
XGKQGYsql1Vu760gxHe4aKWu4/oMBnfGUBRBABu6TOz4AGI5KNbUiLQmfUKp70Pw
PZ9PcB7wOegc8+7oivFm+OKU0mKDGVGSQ3RlRr8m+IgCRIJBVmPvpbLFVaKYgh0I
dYi8y54a5b+NNu+Sa/MvBuwnwzgVHFPSfMJAO5g7Kc99B3S6EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfvzr5u0y7Gbs5oE5a64cxVKxieMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzI5ZTI0ZjMtZWJmMi0z
MmE2LWFhMWYtMzQ4Njc4NDcyYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfzkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL1BV8qMeBUh1x3lrhBNUZWw3uMhZ/WtBnwoeVvvEWGArGKoLvQoM0Pn
D2cKRUX872dBcT0Hty7m6pPXLMVSBLpij2pxT4Y4usd/qR2niOeyRfBIt+bNCAS1
IJlnv7bIkKJzJ9vSk3uh8h82aYqkKIzUAtoLShdpcT3+URtqU/N/7qzpGKg1ccHB
KxtQGU7o1BMjAO1PidVlw8ayYMG42324OToWBlTcC4OwWLXnNY21WXAB/rDDY3Pv
DpVjzd9cUry+Bs8vq138K/8bR/oU5HapvuX7TNaWj4/dcRK/NScyA4o71wsMihVw
2ODclqizEARUFep8mgP1r6h9MwoDPlw=
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:06:17 2026 by rpki-client