Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d129c0a8-03de-37a4-a6df-484a8a41f163.roa
File:                     d129c0a8-03de-37a4-a6df-484a8a41f163.roa (raw, json)
Hash identifier:          NjAmsjdaNVyXuIdCTs6T2aRLygyFkA17CpRLjFopAuI=
Subject key identifier:   58:16:8D:03:66:66:70:30:1A:BC:7B:C4:8A:5A:80:F0:FA:8F:DE:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4EF81F6481DBCB43149AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d129c0a8-03de-37a4-a6df-484a8a41f163.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33490
IP address blocks:        73.67.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:f8:1f:64:81:db:cb:43:14:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=a1eeaa63-dd62-4c26-9d00-d67544d6457b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:01:a5:f4:de:70:56:38:b1:96:30:51:52:
                    22:95:2c:22:16:5f:4d:a7:db:de:b5:d3:84:ed:ac:
                    6d:b1:99:fe:0c:91:98:a8:9b:e3:24:0a:81:85:fe:
                    3f:96:ec:66:bb:ef:bc:d7:0a:f9:73:88:59:ca:11:
                    a5:de:3e:db:a5:e5:8c:8a:8f:54:29:a8:0e:f8:32:
                    3b:80:73:e4:3d:e8:ed:50:81:4c:0f:24:2b:d3:fc:
                    aa:aa:c2:d3:c2:e4:e3:63:0d:04:5d:99:00:a9:16:
                    54:c3:6c:b4:35:cd:ac:6c:e7:7f:5b:e8:01:fd:c0:
                    0f:12:c1:05:3a:ca:26:40:32:a8:76:dd:46:27:51:
                    e9:9d:90:79:eb:95:32:db:d2:54:e3:a7:64:be:fd:
                    3f:d3:bd:60:c1:fc:9f:e6:6c:81:22:c4:0f:35:ac:
                    b0:dc:2f:65:aa:07:2d:2d:e1:4f:ec:28:c7:ec:39:
                    40:dd:03:65:61:95:42:b4:8c:e9:a2:29:72:e1:eb:
                    8a:1d:2a:c5:c5:4d:b2:65:87:f5:1d:6b:fe:48:49:
                    84:88:f3:ab:7e:2f:bd:ff:b7:54:ec:93:76:d0:48:
                    3d:2e:ee:6d:aa:79:58:bb:74:2b:bf:d7:4f:63:c5:
                    28:8e:37:43:32:93:18:c5:8e:0f:98:b1:26:ad:fe:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:8D:03:66:66:70:30:1A:BC:7B:C4:8A:5A:80:F0:FA:8F:DE:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d129c0a8-03de-37a4-a6df-484a8a41f163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:46:13:6f:52:47:92:cb:25:53:2c:19:c1:68:8d:2f:1b:b2:
         8e:7d:dc:fb:ea:0e:8a:f0:d8:5e:68:77:9c:14:5f:f5:c8:95:
         23:f7:fb:a6:19:f9:77:bd:b6:1c:4a:bf:22:91:9b:13:50:a4:
         45:fe:22:4c:db:ce:91:3a:e0:52:b2:e7:24:59:3b:e7:1f:ee:
         1a:9a:86:83:c5:87:8b:2e:bd:6f:d7:8b:51:77:c6:a0:01:37:
         9f:dd:79:c5:e4:29:a5:9d:c0:f9:76:9f:67:a5:d7:be:9e:aa:
         c3:35:e6:f5:d0:b1:10:5f:cf:3a:92:5a:2a:ef:f9:67:83:e6:
         ff:a7:ff:7f:d2:97:88:fa:b2:ae:59:71:8c:ed:f9:95:a0:7a:
         0f:80:b0:22:9f:26:a3:40:6d:77:a8:e3:42:4d:ce:2c:eb:c6:
         b8:6e:e0:10:00:41:ef:f9:1e:0d:01:29:c5:fa:96:ce:7c:47:
         b9:0b:a0:f0:72:da:a7:c2:2c:01:08:8a:3f:df:d5:49:97:8f:
         af:8c:59:f0:a2:67:2c:67:6c:47:c8:5b:98:c5:e5:c0:f5:d9:
         db:c9:ee:4a:3d:90:9a:84:56:77:e4:03:71:dc:1a:3e:da:ca:
         02:9d:bf:2f:ea:4e:3f:7d:66:1f:70:76:a9:b2:bf:d1:c3:85:
         24:98:82:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TvgfZIHby0MUmsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
YTFlZWFhNjMtZGQ2Mi00YzI2LTlkMDAtZDY3NTQ0ZDY0NTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjQBpfTecFY4sZYwUVIilSwiFl9Np9vetdOE
7axtsZn+DJGYqJvjJAqBhf4/luxmu++81wr5c4hZyhGl3j7bpeWMio9UKagO+DI7
gHPkPejtUIFMDyQr0/yqqsLTwuTjYw0EXZkAqRZUw2y0Nc2sbOd/W+gB/cAPEsEF
OsomQDKodt1GJ1HpnZB565Uy29JU46dkvv0/071gwfyf5myBIsQPNayw3C9lqgct
LeFP7CjH7DlA3QNlYZVCtIzpoily4euKHSrFxU2yZYf1HWv+SEmEiPOrfi+9/7dU
7JN20Eg9Lu5tqnlYu3Qrv9dPY8UojjdDMpMYxY4PmLEmrf5SdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgWjQNmZnAwGrx7xIpagPD6j95QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDEyOWMwYTgtMDNkZS0z
N2E0LWE2ZGYtNDg0YThhNDFmMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUOTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlGE29SR5LLJVMsGcFojS8bso593PvqDorw2F5od5wUX/XIlSP3+6YZ
+Xe9thxKvyKRmxNQpEX+IkzbzpE64FKy5yRZO+cf7hqahoPFh4suvW/Xi1F3xqAB
N5/decXkKaWdwPl2n2el176eqsM15vXQsRBfzzqSWirv+WeD5v+n/3/Sl4j6sq5Z
cYzt+ZWgeg+AsCKfJqNAbXeo40JNzizrxrhu4BAAQe/5Hg0BKcX6ls58R7kLoPBy
2qfCLAEIij/f1UmXj6+MWfCiZyxnbEfIW5jF5cD12dvJ7ko9kJqEVnfkA3HcGj7a
ygKdvy/qTj99Zh9wdqmyv9HDhSSYgrU=
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:42:22 2026 by rpki-client