Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df844d37-5d3c-3ee1-b026-8477079f0bdd.roa
File:                     df844d37-5d3c-3ee1-b026-8477079f0bdd.roa (raw, json)
Hash identifier:          vrHIlV94lq4/STu9FyiSRN8pMjHWTHOIGrrfYwjm6pY=
Subject key identifier:   63:B1:4A:43:0B:5C:AA:B3:FD:75:83:07:75:70:21:3D:A2:99:7D:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78D55ABDC61F4BE14425660
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df844d37-5d3c-3ee1-b026-8477079f0bdd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33667
IP address blocks:        96.113.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8d:55:ab:dc:61:f4:be:14:42:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=387ddba5-2fcb-4482-adca-b6a31b957af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:34:04:96:f2:e1:cb:23:23:a1:53:9c:9f:
                    78:ae:ba:bc:89:ad:d7:df:cd:87:f0:ea:9e:56:1d:
                    2b:35:6e:e3:e8:f2:c5:33:64:02:58:d0:64:9a:18:
                    51:96:1b:c5:03:fb:94:f9:c2:e6:29:01:1b:40:a8:
                    70:84:c5:f3:c8:8f:c7:aa:f9:53:c4:82:c3:8f:12:
                    9a:0b:19:8d:5a:c5:14:94:69:79:6d:8e:3e:2e:fb:
                    c4:2a:20:c2:9e:cd:a6:81:3a:23:5b:54:a1:5d:06:
                    a2:52:1d:6b:f5:b8:ca:7d:80:db:fb:ea:2a:9e:aa:
                    a1:70:9f:ba:90:a3:f7:fe:01:58:e4:13:04:52:e5:
                    2f:1f:c5:e2:c0:c4:cf:4a:a8:31:e2:f5:50:89:19:
                    61:b4:cf:4e:83:63:f1:aa:d9:4d:5c:8a:c8:85:72:
                    2c:c5:ee:bd:10:7a:6d:09:9f:e4:55:7e:65:ad:38:
                    7d:26:ff:ee:3c:c3:ec:76:19:bd:87:0a:16:af:61:
                    75:9c:ee:a6:c2:ef:96:d8:35:39:fd:39:84:ee:f3:
                    5c:e5:ba:e9:e6:cd:87:87:15:1e:c9:5f:92:a6:3e:
                    75:46:f9:5d:cb:3c:85:c5:d8:ec:1c:6f:0e:35:2b:
                    e8:e8:c2:54:a7:a6:c5:38:c2:05:99:a4:95:55:b8:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B1:4A:43:0B:5C:AA:B3:FD:75:83:07:75:70:21:3D:A2:99:7D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df844d37-5d3c-3ee1-b026-8477079f0bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.113.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:06:bd:50:fb:af:a5:42:48:29:d7:be:4d:d5:93:80:67:
         a8:a2:8d:75:ae:19:29:10:61:9d:12:d6:f6:b6:ec:85:4c:5a:
         21:d4:ee:d7:db:ee:10:b3:6a:67:fd:3c:be:b0:e6:8d:48:fb:
         73:79:50:49:49:3a:5b:9c:62:38:dd:ad:bc:4f:1e:45:03:9b:
         bd:76:b4:05:c0:9d:8c:dd:2a:8f:98:58:91:d1:15:d4:29:0e:
         3e:4d:94:a3:32:39:2f:dd:a9:0c:1a:51:41:3e:15:3b:30:be:
         43:16:d4:a8:1b:fd:cf:87:c6:78:4d:da:b6:c5:3a:da:45:5f:
         f1:96:b6:0f:d8:24:fb:c1:34:5d:86:3d:63:8f:3a:1b:c6:8d:
         f7:69:cd:e3:48:16:e3:81:0f:2d:18:c4:97:33:ba:be:8e:d7:
         64:93:c8:70:f8:73:31:ef:74:5b:2d:31:97:72:df:91:ae:2d:
         a8:1e:56:4b:f8:d3:9c:27:f3:7d:e7:06:da:b2:24:e0:e3:15:
         21:2b:77:9f:c8:69:f0:c3:96:0c:a5:f9:e3:0b:13:40:e3:06:
         d7:78:50:ca:9f:ee:a0:99:a7:c3:5f:10:e0:11:fa:65:c1:59:
         3e:25:13:15:d2:4f:c3:db:14:e8:0d:36:7d:e0:44:e3:92:ea:
         ef:1d:25:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njVWr3GH0vhRCVmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Mzg3ZGRiYTUtMmZjYi00NDgyLWFkY2EtYjZhMzFiOTU3YWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe40BJby4csjI6FTnJ94rrq8ia3X382H8Oqe
Vh0rNW7j6PLFM2QCWNBkmhhRlhvFA/uU+cLmKQEbQKhwhMXzyI/HqvlTxILDjxKa
CxmNWsUUlGl5bY4+LvvEKiDCns2mgTojW1ShXQaiUh1r9bjKfYDb++oqnqqhcJ+6
kKP3/gFY5BMEUuUvH8XiwMTPSqgx4vVQiRlhtM9Og2PxqtlNXIrIhXIsxe69EHpt
CZ/kVX5lrTh9Jv/uPMPsdhm9hwoWr2F1nO6mwu+W2DU5/TmE7vNc5brp5s2HhxUe
yV+Spj51RvldyzyFxdjsHG8ONSvo6MJUp6bFOMIFmaSVVbjwEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOxSkMLXKqz/XWDB3VwIT2imX3KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4NDRkMzctNWQzYy0z
ZWUxLWIwMjYtODQ3NzA3OWYwYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYHG+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuhBr1Q+6+lQkgp175N1ZOAZ6iijXWuGSkQYZ0S1va27IVMWiHU7tfb
7hCzamf9PL6w5o1I+3N5UElJOlucYjjdrbxPHkUDm712tAXAnYzdKo+YWJHRFdQp
Dj5NlKMyOS/dqQwaUUE+FTswvkMW1Kgb/c+HxnhN2rbFOtpFX/GWtg/YJPvBNF2G
PWOPOhvGjfdpzeNIFuOBDy0YxJczur6O12STyHD4czHvdFstMZdy35GuLageVkv4
05wn833nBtqyJODjFSErd5/IafDDlgyl+eMLE0DjBtd4UMqf7qCZp8NfEOAR+mXB
WT4lExXST8PbFOgNNn3gROOS6u8dJSI=
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:24:00 2026 by rpki-client