Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9c2c26c-f46c-3d1f-bbec-f56429938f18.roa
File:                     d9c2c26c-f46c-3d1f-bbec-f56429938f18.roa (raw, json)
Hash identifier:          esaaw7b7YFJdvieNDwPskYlOoqFcWTBgkqqbq0aOOHQ=
Subject key identifier:   BE:05:1C:E3:AB:97:C1:31:16:8E:74:9A:28:8E:35:13:02:A2:5B:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3AAEE238FC87493A2A5800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9c2c26c-f46c-3d1f-bbec-f56429938f18.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        73.165.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:ae:e2:38:fc:87:49:3a:2a:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ac872b96-a1a4-4d96-bf93-ec0caf005bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:d9:5c:4f:18:d1:d4:c3:2d:b3:07:df:b8:
                    3f:0a:3c:5c:90:ee:88:f0:5a:3c:1b:b6:10:5e:23:
                    2a:8d:86:fd:ae:58:6b:8f:00:4b:54:9e:4b:38:1b:
                    e2:51:6a:d5:21:d6:41:95:e0:49:e3:ae:30:3a:5b:
                    ed:0f:50:88:15:26:d8:b5:12:80:e6:46:2f:01:98:
                    0f:bb:2d:ad:d3:85:4d:e1:f7:e2:88:41:41:78:e0:
                    be:41:23:f1:68:64:e1:1b:d9:86:c2:e6:af:a5:b6:
                    cd:3b:05:3d:a4:bd:1b:e1:63:35:9e:ac:0f:f5:8e:
                    88:04:4e:13:b6:dc:f5:08:cb:37:a8:d0:77:87:91:
                    89:ce:c7:40:00:ad:bc:0e:72:d7:c3:06:5e:9c:44:
                    e0:83:24:88:07:8a:0c:21:64:4e:96:ad:fe:0f:a6:
                    96:c8:bc:4f:e7:94:93:93:02:34:20:17:8a:ab:17:
                    79:6c:f2:2d:a3:f9:64:2f:6c:7d:19:b7:66:55:8e:
                    1e:2f:35:2b:5f:99:45:49:eb:91:6f:64:1c:a8:be:
                    3d:dd:4e:17:34:d9:af:3a:58:7d:4d:af:96:b7:25:
                    63:1d:2c:d2:34:9c:f8:b3:b0:67:85:ac:5e:66:f9:
                    ef:5f:fa:a3:23:60:6f:8e:89:1f:66:ca:14:4a:4f:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:05:1C:E3:AB:97:C1:31:16:8E:74:9A:28:8E:35:13:02:A2:5B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9c2c26c-f46c-3d1f-bbec-f56429938f18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.165.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:2f:fa:0c:bb:74:3e:b8:cb:4f:1f:9c:d1:38:f2:ca:49:69:
         5a:b9:aa:cd:ef:83:a7:38:9b:4d:0a:43:98:79:e3:c3:61:d4:
         89:ca:2f:3f:f8:93:af:b6:cf:8e:a1:fe:8f:a5:27:f7:af:90:
         0c:98:cb:10:2b:16:90:6b:90:f8:4f:e0:7f:72:b5:6b:fe:7a:
         4d:43:74:cd:03:c0:12:8d:13:ef:92:fb:0a:86:10:03:83:1a:
         90:76:99:df:24:66:75:08:9e:95:f4:07:e8:49:35:ad:3b:9f:
         ee:42:e2:45:e6:c7:0f:78:48:61:33:f2:93:56:9a:ea:ba:b2:
         38:cd:f2:b7:26:12:7d:da:dd:af:06:fe:9d:cc:e2:60:51:13:
         a8:4b:83:46:10:0a:cc:fe:7f:d5:26:cb:24:74:f5:9f:46:c0:
         53:31:ee:6c:be:f8:cd:eb:24:23:41:87:7b:62:c6:31:b5:d6:
         33:31:c0:cf:eb:87:7a:c3:41:42:5d:e2:24:0e:6c:8d:5e:9e:
         bb:82:bb:ae:2b:89:5f:23:4b:50:a3:ae:2f:41:96:7b:d5:36:
         9a:db:f2:8b:12:c2:7a:4a:f1:a0:34:5d:6c:da:53:ff:ff:91:
         28:04:d7:0e:22:bb:d7:a1:85:66:6f:78:26:d9:46:69:35:8f:
         51:49:ce:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOq7iOPyHSToqWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
YWM4NzJiOTYtYTFhNC00ZDk2LWJmOTMtZWMwY2FmMDA1YmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvHZXE8Y0dTDLbMH37g/CjxckO6I8Fo8G7YQ
XiMqjYb9rlhrjwBLVJ5LOBviUWrVIdZBleBJ464wOlvtD1CIFSbYtRKA5kYvAZgP
uy2t04VN4ffiiEFBeOC+QSPxaGThG9mGwuavpbbNOwU9pL0b4WM1nqwP9Y6IBE4T
ttz1CMs3qNB3h5GJzsdAAK28DnLXwwZenETggySIB4oMIWROlq3+D6aWyLxP55ST
kwI0IBeKqxd5bPIto/lkL2x9GbdmVY4eLzUrX5lFSeuRb2QcqL493U4XNNmvOlh9
Ta+WtyVjHSzSNJz4s7BnhaxeZvnvX/qjI2BvjokfZsoUSk/UDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL4FHOOrl8ExFo50miiONRMColsMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDljMmMyNmMtZjQ2Yy0z
ZDFmLWJiZWMtZjU2NDI5OTM4ZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaUcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN0v+gy7dD64y08fnNE48spJaVq5qs3vg6c4m00KQ5h548Nh1InKLz/4
k6+2z46h/o+lJ/evkAyYyxArFpBrkPhP4H9ytWv+ek1DdM0DwBKNE++S+wqGEAOD
GpB2md8kZnUInpX0B+hJNa07n+5C4kXmxw94SGEz8pNWmuq6sjjN8rcmEn3a3a8G
/p3M4mBRE6hLg0YQCsz+f9UmyyR09Z9GwFMx7my++M3rJCNBh3tixjG11jMxwM/r
h3rDQUJd4iQObI1enruCu64riV8jS1Cjri9BlnvVNprb8osSwnpK8aA0XWzaU///
kSgE1w4iu9ehhWZveCbZRmk1j1FJznU=
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:56:04 2026 by rpki-client