Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd30eaf4-1561-3dd3-879b-d55de84f6d5f.roa
File:                     dd30eaf4-1561-3dd3-879b-d55de84f6d5f.roa (raw, json)
Hash identifier:          ed/TT7Gh2c7xtyXAGuDqPolgAj5NnRglIE+rO/33+08=
Subject key identifier:   EB:00:56:14:FE:67:12:2C:00:D2:0D:0B:72:38:93:86:58:7E:A9:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F77830A0DBD01C7AE83D505C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd30eaf4-1561-3dd3-879b-d55de84f6d5f.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     22258
IP address blocks:        73.203.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:0a:0d:bd:01:c7:ae:83:d5:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=028b29da-458d-4d12-92a3-3f1050f2a80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:e5:b0:36:3c:21:30:b9:d2:83:5e:00:34:
                    6a:f7:74:ee:e6:64:e8:a2:29:b4:be:3b:c0:59:5b:
                    61:2f:c7:20:00:a7:22:d1:0f:24:16:a6:ae:dd:20:
                    a8:e3:99:f6:03:e8:bb:6a:f2:47:5a:83:11:bd:ee:
                    da:ea:3c:83:87:9e:7f:d6:67:b7:a1:0a:0b:3b:5b:
                    c2:a7:e6:b5:be:7f:a2:e8:c1:8a:f7:08:ac:49:a5:
                    7a:84:8a:b5:32:db:77:90:27:ec:60:51:b4:a7:b3:
                    61:a5:be:bd:fb:6b:95:0d:b2:a3:46:af:f2:6b:cc:
                    37:19:05:d6:40:c5:63:18:62:db:c3:bb:c7:ca:ba:
                    ad:cc:c6:18:1c:03:6b:c2:82:3f:2c:9e:6b:43:b2:
                    6e:34:05:19:80:8e:14:34:d9:11:c6:24:02:7c:6a:
                    4a:25:c6:f1:70:69:d8:8d:41:c7:83:8b:f4:cc:1e:
                    68:64:2a:61:a1:eb:b1:a7:06:02:57:0e:b2:41:0d:
                    73:1b:43:02:8b:24:8f:a9:83:a2:cd:46:41:78:bf:
                    d9:30:64:15:ea:57:d8:b4:29:9c:64:cd:e2:98:d5:
                    66:74:6a:f5:d1:11:36:f8:71:d8:8b:46:8a:75:1d:
                    e1:b6:a9:58:32:37:5a:a5:ec:d2:5e:94:77:a5:6a:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:00:56:14:FE:67:12:2C:00:D2:0D:0B:72:38:93:86:58:7E:A9:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd30eaf4-1561-3dd3-879b-d55de84f6d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.203.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1c:af:ca:18:85:2d:19:9d:b0:af:1c:70:bb:2e:54:3f:64:
         1b:37:1c:60:6e:12:34:b5:99:1f:4a:13:0d:3f:51:67:8b:5b:
         0e:f0:7a:43:6d:e3:9a:ca:ea:94:3e:12:ca:ec:42:83:a0:9c:
         e1:f1:01:25:4f:e4:61:3a:5e:4f:e6:d2:2c:a5:07:76:b5:e9:
         aa:71:7a:9b:0a:a8:cc:c5:54:7f:14:8a:fe:ce:29:2c:7b:48:
         1a:2f:ef:f6:fc:e5:9c:7b:d2:66:60:ec:e4:69:7c:c4:09:36:
         a9:84:cf:15:88:36:48:3c:3c:e8:81:19:53:1c:96:ee:d2:3e:
         55:a9:ef:05:83:73:de:54:a9:35:41:26:3a:ea:3d:cb:ec:3a:
         94:75:02:bf:5e:05:a5:4e:f4:a0:0f:7e:16:e5:6b:ca:45:8a:
         72:1d:19:6b:6a:4b:f4:f9:60:99:be:d4:74:29:0d:eb:ce:83:
         9c:8a:b0:d5:84:26:94:e0:c5:f5:11:e9:35:ef:31:ff:a6:72:
         81:49:15:9a:4b:ab:ad:92:1b:32:84:b1:20:ab:61:a9:1f:93:
         a9:5c:e7:63:a1:fe:d0:41:c9:ab:6b:13:e6:5d:d4:ab:b3:10:
         62:77:54:b4:79:66:e4:b3:22:e8:a6:0c:f7:50:9a:46:2c:ee:
         aa:7c:d0:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gwoNvQHHroPVBcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk
MDI4YjI5ZGEtNDU4ZC00ZDEyLTkyYTMtM2YxMDUwZjJhODBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2nlsDY8ITC50oNeADRq93Tu5mTooim0vjvA
WVthL8cgAKci0Q8kFqau3SCo45n2A+i7avJHWoMRve7a6jyDh55/1me3oQoLO1vC
p+a1vn+i6MGK9wisSaV6hIq1Mtt3kCfsYFG0p7Nhpb69+2uVDbKjRq/ya8w3GQXW
QMVjGGLbw7vHyrqtzMYYHANrwoI/LJ5rQ7JuNAUZgI4UNNkRxiQCfGpKJcbxcGnY
jUHHg4v0zB5oZCphoeuxpwYCVw6yQQ1zG0MCiySPqYOizUZBeL/ZMGQV6lfYtCmc
ZM3imNVmdGr10RE2+HHYi0aKdR3htqlYMjdapezSXpR3pWpnnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsAVhT+ZxIsANINC3I4k4ZYfqk+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQzMGVhZjQtMTU2MS0z
ZGQzLTg3OWItZDU1ZGU4NGY2ZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAScvCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAcr8oYhS0ZnbCvHHC7LlQ/ZBs3HGBuEjS1mR9KEw0/UWeLWw7wekNt
45rK6pQ+EsrsQoOgnOHxASVP5GE6Xk/m0iylB3a16apxepsKqMzFVH8Uiv7OKSx7
SBov7/b85Zx70mZg7ORpfMQJNqmEzxWINkg8POiBGVMclu7SPlWp7wWDc95UqTVB
JjrqPcvsOpR1Ar9eBaVO9KAPfhbla8pFinIdGWtqS/T5YJm+1HQpDevOg5yKsNWE
JpTgxfUR6TXvMf+mcoFJFZpLq62SGzKEsSCrYakfk6lc52Oh/tBByatrE+Zd1Kuz
EGJ3VLR5ZuSzIuimDPdQmkYs7qp80Pc=
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:20:18 2026 by rpki-client