Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/def7cf96-ed85-39c7-a585-65a5b18c56e6.roa
File:                     def7cf96-ed85-39c7-a585-65a5b18c56e6.roa (raw, json)
Hash identifier:          1r1pu3mnQcUNcthhelZo6yZohMb+uHV1nx9S5i4DjWY=
Subject key identifier:   A1:AF:0E:B6:33:87:12:65:B2:C9:7C:EC:2D:06:76:F7:81:8C:35:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7DECCA61343913BA46500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/def7cf96-ed85-39c7-a585-65a5b18c56e6.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        76.115.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:de:cc:a6:13:43:91:3b:a4:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e84ebcb0-17a9-4e67-88d6-23507ea6153d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:db:b6:8e:4d:6f:70:55:81:e4:82:e0:d5:f3:
                    87:93:30:2c:0a:d6:e9:75:0d:29:91:a1:4d:c4:cc:
                    b7:56:dd:ae:4a:de:c0:a1:44:97:db:38:12:f6:77:
                    ef:fc:60:66:5c:54:1b:03:3f:9b:35:cb:9f:7e:3a:
                    6e:99:f9:09:96:ee:01:d9:35:82:6d:83:2c:df:d9:
                    25:16:41:cd:69:40:5f:e4:2e:14:8b:03:b4:e8:9e:
                    9d:bc:93:b0:a6:06:2a:c0:54:b3:4e:11:22:f5:40:
                    c2:8b:8e:8c:b8:51:d3:b2:c7:95:8c:e0:82:f4:ca:
                    b1:e8:ab:45:8e:fd:d2:f7:54:b4:4e:53:bd:f8:91:
                    6f:ec:5f:50:88:2b:80:d2:d9:25:df:6e:b9:74:ae:
                    84:fa:34:71:a3:b4:d9:e6:44:d8:b1:da:ca:89:0a:
                    a8:d5:15:45:d7:e5:62:8f:4d:13:20:a7:2e:9e:e8:
                    6d:55:32:bb:25:2d:25:a7:47:7d:a9:25:d2:82:6e:
                    f0:be:91:fb:7e:95:d8:d0:6f:1f:79:a8:4f:10:56:
                    f2:55:2b:45:51:e9:73:e8:ad:eb:f5:a8:80:63:c5:
                    86:bc:ed:93:13:f5:dc:23:67:fc:0a:d9:4b:59:51:
                    58:af:59:e1:c5:3b:7a:4f:7e:2f:84:c8:11:46:c3:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AF:0E:B6:33:87:12:65:B2:C9:7C:EC:2D:06:76:F7:81:8C:35:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/def7cf96-ed85-39c7-a585-65a5b18c56e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:54:58:97:7b:99:5f:10:af:25:26:01:08:19:c2:d1:62:07:
         45:7b:fa:bf:a5:c3:30:f6:c8:ac:c3:48:95:7b:03:e0:b5:99:
         dc:fd:54:c6:fb:c4:9e:97:39:72:23:85:36:66:37:d8:10:f9:
         35:fb:27:80:30:c4:89:a3:f3:59:57:eb:44:1a:ba:07:21:f6:
         67:b5:48:bd:d5:18:94:e2:3f:7d:f6:ca:96:aa:d5:4a:e7:c5:
         53:fe:d9:fc:8d:6c:9c:09:22:27:a3:8b:9c:7e:58:66:3e:81:
         00:ad:22:92:6a:0e:ac:33:53:82:e0:6c:0e:89:ce:a5:19:23:
         bd:aa:ec:7c:e9:4e:5c:5c:35:4b:6b:87:90:3e:e4:43:9f:0f:
         de:07:27:22:77:86:1a:0d:55:0e:ec:be:28:e6:6d:cb:01:34:
         d1:7d:aa:98:f2:6f:f9:d9:39:1c:69:8b:cb:e8:a8:6d:68:49:
         3c:a7:67:b8:9b:60:4d:ad:05:cf:47:05:f3:c4:f2:17:63:3a:
         58:8d:7e:52:59:f1:37:c4:f4:29:01:4a:36:27:60:da:05:bc:
         14:d7:4b:be:e3:b7:fe:a4:88:1e:ef:e0:49:30:e5:52:bd:9c:
         4f:40:62:1a:c4:51:b4:43:d3:b3:ca:33:ba:31:5a:7f:53:f8:
         6f:44:db:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp97MphNDkTukZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
ZTg0ZWJjYjAtMTdhOS00ZTY3LTg4ZDYtMjM1MDdlYTYxNTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdu2jk1vcFWB5ILg1fOHkzAsCtbpdQ0pkaFN
xMy3Vt2uSt7AoUSX2zgS9nfv/GBmXFQbAz+bNcuffjpumfkJlu4B2TWCbYMs39kl
FkHNaUBf5C4UiwO06J6dvJOwpgYqwFSzThEi9UDCi46MuFHTsseVjOCC9Mqx6KtF
jv3S91S0TlO9+JFv7F9QiCuA0tkl3265dK6E+jRxo7TZ5kTYsdrKiQqo1RVF1+Vi
j00TIKcunuhtVTK7JS0lp0d9qSXSgm7wvpH7fpXY0G8feahPEFbyVStFUelz6K3r
9aiAY8WGvO2TE/XcI2f8CtlLWVFYr1nhxTt6T34vhMgRRsPDcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGvDrYzhxJlssl87C0GdveBjDXCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGVmN2NmOTYtZWQ4NS0z
OWM3LWE1ODUtNjVhNWIxOGM1NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHOkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANZUWJd7mV8QryUmAQgZwtFiB0V7+r+lwzD2yKzDSJV7A+C1mdz9VMb7
xJ6XOXIjhTZmN9gQ+TX7J4AwxImj81lX60Qaugch9me1SL3VGJTiP332ypaq1Urn
xVP+2fyNbJwJIieji5x+WGY+gQCtIpJqDqwzU4LgbA6JzqUZI72q7HzpTlxcNUtr
h5A+5EOfD94HJyJ3hhoNVQ7svijmbcsBNNF9qpjyb/nZORxpi8voqG1oSTynZ7ib
YE2tBc9HBfPE8hdjOliNflJZ8TfE9CkBSjYnYNoFvBTXS77jt/6kiB7v4Ekw5VK9
nE9AYhrEUbRD07PKM7oxWn9T+G9E23k=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:23:33 2025 by rpki-client