Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ec3ae0-5f65-33b9-91d8-1dd94283bd9f.roa
File:                     d3ec3ae0-5f65-33b9-91d8-1dd94283bd9f.roa (raw, json)
Hash identifier:          L0movh9zX/0NbLxZe43DkUYC1LUMGckvB1nTK7qo198=
Subject key identifier:   75:4C:80:0F:48:8C:C7:49:AB:FA:FE:C6:07:7C:BF:4F:34:D6:D1:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FDA366BF9B453AB464E58
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ec3ae0-5f65-33b9-91d8-1dd94283bd9f.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        73.55.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:da:36:6b:f9:b4:53:ab:46:4e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=6ee258c2-eb33-4684-96de-3625b1d31d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:73:c9:c9:b4:2c:de:dd:61:c3:24:a1:cc:40:
                    3d:74:83:fa:07:58:6d:3f:2f:82:c2:a6:b4:8c:43:
                    dd:2d:c0:91:00:84:2f:bb:24:f2:eb:ee:ff:79:24:
                    e8:42:9f:87:30:cd:12:ec:13:f5:c2:fd:96:cc:33:
                    ab:a2:8b:95:b8:97:f4:f6:e1:d8:df:76:1a:80:54:
                    61:88:f3:31:d7:04:83:74:a8:06:d5:bc:04:d5:da:
                    10:09:15:c1:2f:81:2f:c3:c2:ff:44:1f:45:2f:bf:
                    e8:02:da:83:d4:54:e4:cf:5a:d8:a8:56:46:79:c4:
                    e9:3e:25:38:c9:d0:60:3d:15:8d:00:5a:97:38:81:
                    b4:94:de:5b:b2:56:38:19:ec:27:f7:88:5a:90:1b:
                    a2:32:d5:f4:fd:c8:7c:c8:9e:ab:cf:5a:75:06:9f:
                    20:8d:95:e0:96:af:92:54:3d:c9:6b:60:de:f9:d5:
                    b9:58:58:27:61:04:19:59:3b:1d:24:51:d4:85:f4:
                    0b:6e:a9:02:79:1b:61:3e:0a:78:02:dc:c5:a6:92:
                    42:61:94:b5:b1:a9:3e:a3:f8:06:8a:1e:8c:d4:20:
                    36:31:bd:64:66:60:95:d9:77:2f:f2:96:fb:28:ac:
                    c6:93:55:35:e6:b5:5a:ab:80:fe:90:b3:2a:38:c3:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4C:80:0F:48:8C:C7:49:AB:FA:FE:C6:07:7C:BF:4F:34:D6:D1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ec3ae0-5f65-33b9-91d8-1dd94283bd9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.55.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:73:13:5d:09:e7:23:d9:ca:26:08:86:cc:57:f8:93:da:0d:
         06:37:a8:f3:7f:3f:dc:47:ff:57:37:50:85:70:88:79:91:96:
         c6:42:aa:ad:e9:bb:ad:71:a7:e1:64:85:85:9f:5d:ef:bb:76:
         70:35:bc:75:6a:6c:19:0a:6f:c4:55:e1:a7:ab:f3:ac:0c:8c:
         f5:2f:d7:cd:07:49:1e:c0:e3:79:47:23:21:39:f0:14:fa:e6:
         23:51:c5:fe:ec:9b:ba:03:58:03:7e:71:f8:f6:8d:b6:a3:c9:
         2b:a2:c9:9c:dd:f9:f3:1e:14:2f:f4:10:2b:70:92:fc:ad:fb:
         22:40:5d:ff:8f:94:45:ed:24:1e:c3:84:04:b9:9c:dc:d3:50:
         22:f2:69:a4:c5:42:62:72:94:86:03:75:c4:49:8b:d8:aa:a0:
         6e:54:ee:35:f8:2a:b6:51:dc:a8:b5:e0:4e:22:7d:93:71:f1:
         54:a6:83:03:ea:e5:e7:ba:66:ca:7f:f2:34:f0:28:f8:d9:d1:
         1a:28:f8:26:e4:d9:92:ec:9c:22:36:e4:35:fc:14:e7:95:d6:
         63:94:13:3e:07:58:4d:c7:48:23:49:61:d4:f7:ae:2f:27:f4:
         f1:46:3f:15:59:fe:6a:5e:e4:4f:43:10:3b:84:92:40:b8:9f:
         d5:8a:65:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T9o2a/m0U6tGTlgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NmVlMjU4YzItZWIzMy00Njg0LTk2ZGUtMzYyNWIxZDMxZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXPJybQs3t1hwyShzEA9dIP6B1htPy+Cwqa0
jEPdLcCRAIQvuyTy6+7/eSToQp+HMM0S7BP1wv2WzDOroouVuJf09uHY33YagFRh
iPMx1wSDdKgG1bwE1doQCRXBL4Evw8L/RB9FL7/oAtqD1FTkz1rYqFZGecTpPiU4
ydBgPRWNAFqXOIG0lN5bslY4Gewn94hakBuiMtX0/ch8yJ6rz1p1Bp8gjZXglq+S
VD3Ja2De+dW5WFgnYQQZWTsdJFHUhfQLbqkCeRthPgp4AtzFppJCYZS1sak+o/gG
ih6M1CA2Mb1kZmCV2Xcv8pb7KKzGk1U15rVaq4D+kLMqOMP+9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVMgA9IjMdJq/r+xgd8v0801tFiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNlYzNhZTAtNWY2NS0z
M2I5LTkxZDgtMWRkOTQyODNiZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASTeLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANVzE10J5yPZyiYIhsxX+JPaDQY3qPN/P9xH/1c3UIVwiHmRlsZCqq3p
u61xp+FkhYWfXe+7dnA1vHVqbBkKb8RV4aer86wMjPUv180HSR7A43lHIyE58BT6
5iNRxf7sm7oDWAN+cfj2jbajySuiyZzd+fMeFC/0ECtwkvyt+yJAXf+PlEXtJB7D
hAS5nNzTUCLyaaTFQmJylIYDdcRJi9iqoG5U7jX4KrZR3Ki14E4ifZNx8VSmgwPq
5ee6Zsp/8jTwKPjZ0Roo+Cbk2ZLsnCI25DX8FOeV1mOUEz4HWE3HSCNJYdT3ri8n
9PFGPxVZ/mpe5E9DEDuEkkC4n9WKZWA=
-----END CERTIFICATE-----
Generated at Wed Oct 21 23:01:46 2026 by rpki-client