Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087b6563-1ab6-31f5-81bd-fde611b7a178.roa
File:                     087b6563-1ab6-31f5-81bd-fde611b7a178.roa (raw, json)
Hash identifier:          j+PqAq0D5rqhbQ6t7tSA+NXU4AYYay4XRm0ZC2epJtg=
Subject key identifier:   97:81:7C:89:7F:C6:85:87:F6:71:CA:6E:B9:8F:8A:65:54:3C:C3:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE585830E0BB277563D1BC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087b6563-1ab6-31f5-81bd-fde611b7a178.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.247.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:58:30:e0:bb:27:75:63:d1:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=eaf04672-3ba2-40e1-97fe-da177d96b76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:89:46:9e:8b:48:d8:24:ce:74:01:2c:08:
                    d3:bb:51:a4:3c:1c:d2:93:da:d8:65:3c:8c:8f:89:
                    2c:c7:d5:ee:94:ba:9a:86:48:96:95:15:1d:d1:e6:
                    5c:93:f8:1b:a1:aa:10:2a:89:19:b3:a6:77:7b:21:
                    d0:b5:e5:d0:54:ad:7c:ea:5d:bc:a2:ee:24:70:62:
                    ab:90:c2:2d:24:43:d0:92:4e:db:9d:f4:19:e1:83:
                    fe:07:12:2f:10:e4:42:dc:7b:12:84:b9:70:de:9f:
                    59:ef:c8:7f:70:80:07:21:fb:e5:05:39:a8:58:19:
                    93:ee:20:e9:4a:d0:04:0b:fb:e6:b7:8d:d3:02:d6:
                    25:74:6a:e3:97:9c:2b:23:f1:8c:81:8e:e3:43:0e:
                    7d:ed:9d:de:b6:56:8d:2a:86:4b:78:5e:46:fc:f2:
                    73:68:86:ea:4e:a5:c0:ac:10:a3:63:ff:49:b6:44:
                    a8:1e:b3:78:3b:f5:fe:80:9f:b2:93:e8:2d:e8:3c:
                    7e:87:50:06:98:f2:12:fb:e6:26:b2:77:16:25:b6:
                    9c:61:d3:e6:76:2f:1a:0e:4a:15:2e:bb:02:09:73:
                    b9:eb:26:38:49:47:29:33:3f:9f:f8:0f:f3:11:73:
                    7e:5c:a7:82:5d:28:fa:be:3a:00:38:d1:ff:64:fd:
                    9a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:81:7C:89:7F:C6:85:87:F6:71:CA:6E:B9:8F:8A:65:54:3C:C3:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087b6563-1ab6-31f5-81bd-fde611b7a178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.247.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8d:93:e6:6f:e1:a0:a6:23:3b:81:dd:50:b3:9f:92:dc:94:
         9a:25:5a:dc:e2:62:02:a6:44:8f:30:fe:23:01:8c:49:e8:5a:
         6a:a3:e2:30:02:c7:91:89:49:cf:d1:7a:b8:fc:07:45:d7:9c:
         22:4d:40:b8:0d:ed:06:45:35:c5:4c:d5:b1:dd:6d:60:64:a2:
         7e:40:aa:47:5e:06:b9:36:5c:56:07:d4:8a:1e:3d:37:31:9d:
         98:57:99:ba:58:23:92:a6:93:a9:24:56:15:0e:2a:81:ab:ce:
         42:48:96:42:6f:4c:26:c8:dc:a2:ef:0e:46:bc:d7:b9:5f:f6:
         10:2d:be:f5:db:cc:b6:36:c1:03:06:e7:b1:15:80:4f:02:5b:
         2f:fa:92:c5:f7:48:6f:17:42:86:7d:76:41:97:91:e3:1e:b4:
         6b:af:18:d8:22:f6:97:8d:0c:ed:9f:2a:4f:5f:69:b9:9a:3e:
         fc:ec:40:cb:02:9e:64:0c:64:1f:32:25:a1:16:87:3f:b2:cf:
         79:65:bb:aa:4f:4d:d9:5c:4e:b7:8d:60:92:c5:c3:e3:3b:a5:
         b7:a7:61:a4:6a:7e:8f:4e:04:80:9c:8a:d3:97:94:02:a7:b7:
         07:e8:80:ae:fc:23:73:80:c7:2d:1c:0e:d9:24:b2:46:fb:5b:
         eb:b8:e0:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWFgw4LsndWPRvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZWFmMDQ2NzItM2JhMi00MGUxLTk3ZmUtZGExNzdkOTZiNzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXGJRp6LSNgkznQBLAjTu1GkPBzSk9rYZTyM
j4ksx9XulLqahkiWlRUd0eZck/gboaoQKokZs6Z3eyHQteXQVK186l28ou4kcGKr
kMItJEPQkk7bnfQZ4YP+BxIvEORC3HsShLlw3p9Z78h/cIAHIfvlBTmoWBmT7iDp
StAEC/vmt43TAtYldGrjl5wrI/GMgY7jQw597Z3etlaNKoZLeF5G/PJzaIbqTqXA
rBCjY/9JtkSoHrN4O/X+gJ+yk+gt6Dx+h1AGmPIS++YmsncWJbacYdPmdi8aDkoV
LrsCCXO56yY4SUcpMz+f+A/zEXN+XKeCXSj6vjoAONH/ZP2a3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJeBfIl/xoWH9nHKbrmPimVUPMPvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDg3YjY1NjMtMWFiNi0z
MWY1LTgxYmQtZmRlNjExYjdhMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfdsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABONk+Zv4aCmIzuB3VCzn5LclJolWtziYgKmRI8w/iMBjEnoWmqj4jAC
x5GJSc/Rerj8B0XXnCJNQLgN7QZFNcVM1bHdbWBkon5AqkdeBrk2XFYH1IoePTcx
nZhXmbpYI5Kmk6kkVhUOKoGrzkJIlkJvTCbI3KLvDka817lf9hAtvvXbzLY2wQMG
57EVgE8CWy/6ksX3SG8XQoZ9dkGXkeMetGuvGNgi9peNDO2fKk9fabmaPvzsQMsC
nmQMZB8yJaEWhz+yz3llu6pPTdlcTreNYJLFw+M7pbenYaRqfo9OBICcitOXlAKn
twfogK78I3OAxy0cDtkkskb7W+u44PY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:31 2026 by rpki-client