Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d179b280-3253-3310-b729-e7be304cc64d.roa
File:                     d179b280-3253-3310-b729-e7be304cc64d.roa (raw, json)
Hash identifier:          UVDEPGqT/NV+QToxGOLtWRmgX9EIwnLgP5xEvChkI8E=
Subject key identifier:   13:F1:9E:2D:D7:CD:54:C6:19:55:E8:24:AE:BF:6C:CE:4F:5A:24:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E4BDEBEEA4DBB0C1D0980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d179b280-3253-3310-b729-e7be304cc64d.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        107.4.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:4b:de:be:ea:4d:bb:0c:1d:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=96efba44-79f1-4236-8a8d-d37916401b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:1e:31:e7:7e:a6:5d:84:f7:0e:89:36:9e:
                    63:26:ed:c0:d4:23:b8:a2:3c:17:71:a2:b8:b9:f0:
                    03:a3:f0:ae:47:ab:93:a1:44:e9:aa:59:7f:36:30:
                    61:5b:4f:e2:c1:33:38:28:a9:13:3f:09:1c:1b:95:
                    56:90:ea:c5:54:2f:6c:cb:11:f9:e6:44:9e:70:18:
                    ce:4d:20:3f:25:14:52:08:52:1b:6e:78:16:55:b8:
                    f6:66:03:fc:a5:9c:bb:14:09:a3:ca:cb:59:04:8d:
                    3b:34:60:ed:fc:01:6c:06:98:e1:3d:27:cd:10:c3:
                    7a:ea:24:9e:73:35:b2:bc:6a:ca:f5:d4:4a:7c:9a:
                    d7:5d:67:fb:9b:76:11:f6:00:a9:c8:57:99:dd:a6:
                    b0:5a:3f:0b:09:9d:82:e5:e2:e1:a3:4b:c5:e0:48:
                    a2:ff:01:f4:75:1b:af:da:cc:a0:77:9e:83:98:f1:
                    3e:ea:34:d9:3b:a1:3e:ca:d2:93:93:0f:26:b4:07:
                    46:fe:f4:20:05:dc:78:43:27:34:1f:5a:31:a0:a3:
                    09:36:1d:1b:78:a6:3e:7c:97:33:70:6f:25:25:f0:
                    81:22:cb:40:b9:3d:1c:d5:72:8f:3c:6f:9b:fc:a7:
                    66:8b:a4:60:05:e6:21:9e:18:ea:18:c7:ca:83:6d:
                    08:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F1:9E:2D:D7:CD:54:C6:19:55:E8:24:AE:BF:6C:CE:4F:5A:24:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d179b280-3253-3310-b729-e7be304cc64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:2f:e8:17:a1:b7:a7:e4:7f:5c:33:8f:65:ae:bf:f2:47:95:
         b1:99:5d:73:2b:69:11:90:fe:e1:2b:4e:30:2f:d2:d1:7e:93:
         d9:1a:93:1d:38:1c:62:0c:22:a8:15:ed:63:56:69:94:ef:18:
         95:ab:73:f1:63:6f:ad:9f:af:07:7e:29:dd:2b:36:fc:8c:ff:
         74:37:5c:42:c7:73:bc:14:c0:c4:9f:3f:41:86:2b:31:c4:89:
         24:ab:46:1d:8c:66:4e:96:28:b9:04:70:75:b2:03:d1:8f:ae:
         cf:f8:c6:cf:3a:7a:30:99:8e:5f:0f:1c:88:e0:c9:d6:e3:68:
         f3:51:58:7c:50:91:71:d5:27:03:b5:7f:70:b9:f9:16:4a:c2:
         33:f7:cc:6f:ce:00:c4:d6:b5:51:6a:b7:10:b8:d5:bb:59:c4:
         66:25:e8:0b:01:bc:65:e6:3d:c6:5b:a6:93:aa:56:1b:e0:c6:
         b1:0a:73:c9:b6:f6:ef:d0:4b:fd:89:b3:28:e7:c9:e4:1c:71:
         68:a0:6a:e8:3e:ef:ee:f1:67:0a:e7:82:3c:a7:d8:bf:9b:5e:
         eb:2f:3e:07:34:1d:0b:a1:fd:c4:58:fd:0b:3e:64:07:36:b6:
         0c:f9:49:41:2f:59:d3:f6:db:8e:7a:fd:a5:46:df:6e:4c:cd:
         eb:df:be:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TkvevupNuwwdCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
OTZlZmJhNDQtNzlmMS00MjM2LThhOGQtZDM3OTE2NDAxYjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlAeMed+pl2E9w6JNp5jJu3A1CO4ojwXcaK4
ufADo/CuR6uToUTpqll/NjBhW0/iwTM4KKkTPwkcG5VWkOrFVC9syxH55kSecBjO
TSA/JRRSCFIbbngWVbj2ZgP8pZy7FAmjystZBI07NGDt/AFsBpjhPSfNEMN66iSe
czWyvGrK9dRKfJrXXWf7m3YR9gCpyFeZ3aawWj8LCZ2C5eLho0vF4Eii/wH0dRuv
2sygd56DmPE+6jTZO6E+ytKTkw8mtAdG/vQgBdx4Qyc0H1oxoKMJNh0beKY+fJcz
cG8lJfCBIstAuT0c1XKPPG+b/Kdmi6RgBeYhnhjqGMfKg20IEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPxni3XzVTGGVXoJK6/bM5PWiS+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE3OWIyODAtMzI1My0z
MzEwLWI3MjktZTdiZTMwNGNjNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawQOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMkv6Beht6fkf1wzj2Wuv/JHlbGZXXMraRGQ/uErTjAv0tF+k9kakx04
HGIMIqgV7WNWaZTvGJWrc/Fjb62frwd+Kd0rNvyM/3Q3XELHc7wUwMSfP0GGKzHE
iSSrRh2MZk6WKLkEcHWyA9GPrs/4xs86ejCZjl8PHIjgydbjaPNRWHxQkXHVJwO1
f3C5+RZKwjP3zG/OAMTWtVFqtxC41btZxGYl6AsBvGXmPcZbppOqVhvgxrEKc8m2
9u/QS/2JsyjnyeQccWigaug+7+7xZwrngjyn2L+bXusvPgc0HQuh/cRY/Qs+ZAc2
tgz5SUEvWdP22456/aVG325Mzevfvq8=
-----END CERTIFICATE-----
Generated at Wed Oct 21 07:19:55 2026 by rpki-client