Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/035f46e0-0a07-3d9b-8f57-ff3911d318e5.roa
File:                     035f46e0-0a07-3d9b-8f57-ff3911d318e5.roa (raw, json)
Hash identifier:          Je/Rs6O0WpKc9jwXC8hVcUz9WfFq4puRqewgiZdvzq0=
Subject key identifier:   68:AA:28:17:55:90:87:91:B7:85:47:37:CD:3B:33:40:ED:42:6A:1B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C68996D5F375F8FECC840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/035f46e0-0a07-3d9b-8f57-ff3911d318e5.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.51.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:68:99:6d:5f:37:5f:8f:ec:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=da0e9fd9-270b-41a7-b315-8f7c33569d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:43:2e:32:37:e5:85:07:39:17:40:62:0d:bb:
                    22:bb:4f:0c:c9:22:0a:99:4d:86:81:11:60:57:0e:
                    cd:a4:32:c8:82:91:e0:ee:17:5a:66:a7:4d:09:ae:
                    78:7c:24:c4:95:ba:43:69:af:ca:80:99:57:68:18:
                    8e:66:0f:51:2d:20:6d:6f:f3:af:fa:2a:4d:16:b5:
                    4f:9e:85:b5:f9:bf:c9:81:47:63:da:db:02:b3:56:
                    50:bd:8d:0a:55:5f:3e:18:44:00:fb:f0:b7:b6:b6:
                    33:4c:f5:4d:6c:64:18:31:a8:84:c8:6d:d9:cb:e5:
                    62:83:92:be:64:7b:e1:da:c7:08:e3:7c:b4:01:cb:
                    19:54:17:66:03:cd:67:21:2a:7a:03:0e:0e:54:f1:
                    76:e1:9b:aa:ef:d0:3d:77:4d:9b:98:32:15:12:3d:
                    d1:f9:28:80:21:9a:5a:56:c8:e1:1a:9f:53:06:91:
                    ef:34:fd:b2:ab:8a:4b:91:96:68:ca:77:cf:4b:28:
                    4b:2f:2a:46:4f:b5:f2:6c:39:36:97:2e:ee:96:07:
                    28:df:3c:74:a0:3a:a8:a4:12:a5:57:70:f7:69:8b:
                    af:7b:dc:f8:fe:d2:19:de:2a:0f:f1:8c:7f:69:48:
                    79:e9:bf:f5:12:0d:93:ec:eb:4d:d1:ce:53:66:4f:
                    99:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AA:28:17:55:90:87:91:B7:85:47:37:CD:3B:33:40:ED:42:6A:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/035f46e0-0a07-3d9b-8f57-ff3911d318e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.51.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:d2:48:18:d8:6d:7c:59:ef:ee:52:fb:e6:4a:4c:95:8b:
         54:76:11:60:39:7c:ea:91:41:e6:95:51:f8:8a:14:bc:87:51:
         53:d7:22:79:e3:ce:aa:e7:eb:cf:9b:c3:bb:62:b0:50:ad:18:
         43:36:4e:5b:b2:8e:7e:f6:17:de:1b:f4:cc:42:7e:08:5b:30:
         25:4e:56:a2:4a:20:75:09:3f:93:40:a9:55:70:84:4c:62:3b:
         35:53:d2:62:de:58:a5:74:72:5a:ca:2e:16:75:86:0d:d9:5d:
         c7:cc:19:ba:08:aa:63:d4:9c:b7:bb:06:f4:47:6e:44:08:f1:
         7d:1a:f2:14:82:62:ef:94:99:51:c2:74:6a:c1:a2:7d:70:af:
         a0:fe:50:96:12:53:eb:38:09:9d:96:a9:7c:76:73:f7:f5:29:
         1c:42:69:37:e3:2e:9d:fc:48:42:f5:6b:da:fd:e9:cc:f8:eb:
         d7:5b:5f:28:99:5d:4b:2d:f3:b6:65:20:6c:1b:a3:9a:a7:a1:
         09:9e:04:0c:48:79:b8:b1:6c:95:ee:b5:07:a2:ef:6c:95:b4:
         42:d1:73:9f:76:c7:43:5a:84:63:04:75:9c:c7:43:72:26:6c:
         73:7b:c7:da:32:9f:47:d2:5c:df:18:9f:c2:14:52:b4:99:cd:
         fc:5d:58:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXGiZbV83X4/syEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZGEwZTlmZDktMjcwYi00MWE3LWIzMTUtOGY3YzMzNTY5ZDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEMuMjflhQc5F0BiDbsiu08MySIKmU2GgRFg
Vw7NpDLIgpHg7hdaZqdNCa54fCTElbpDaa/KgJlXaBiOZg9RLSBtb/Ov+ipNFrVP
noW1+b/JgUdj2tsCs1ZQvY0KVV8+GEQA+/C3trYzTPVNbGQYMaiEyG3Zy+Vig5K+
ZHvh2scI43y0AcsZVBdmA81nISp6Aw4OVPF24Zuq79A9d02bmDIVEj3R+SiAIZpa
VsjhGp9TBpHvNP2yq4pLkZZoynfPSyhLLypGT7XybDk2ly7ulgco3zx0oDqopBKl
V3D3aYuve9z4/tIZ3ioP8Yx/aUh56b/1Eg2T7OtN0c5TZk+Z6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGiqKBdVkIeRt4VHN807M0DtQmobMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDM1ZjQ2ZTAtMGEwNy0z
ZDliLThmNTctZmYzOTExZDMxOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASTO/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEG90kgY2G18We/uUvvmSkyVi1R2EWA5fOqRQeaVUfiKFLyHUVPXInnj
zqrn68+bw7tisFCtGEM2Tluyjn72F94b9MxCfghbMCVOVqJKIHUJP5NAqVVwhExi
OzVT0mLeWKV0clrKLhZ1hg3ZXcfMGboIqmPUnLe7BvRHbkQI8X0a8hSCYu+UmVHC
dGrBon1wr6D+UJYSU+s4CZ2WqXx2c/f1KRxCaTfjLp38SEL1a9r96cz469dbXyiZ
XUst87ZlIGwbo5qnoQmeBAxIebixbJXutQei72yVtELRc592x0NahGMEdZzHQ3Im
bHN7x9oyn0fSXN8Yn8IUUrSZzfxdWDg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:51:42 2026 by rpki-client