Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea9e841-f685-3188-a980-6f39d443721c.roa
File:                     0ea9e841-f685-3188-a980-6f39d443721c.roa (raw, json)
Hash identifier:          5dSPqCxW69Z0xkQ9u4v0aI/NgZF01pgetn8bnyna9Iw=
Subject key identifier:   8B:00:75:53:49:AE:DE:A2:40:BE:4F:1F:28:39:5A:3B:AD:65:5D:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78C18E076BD116408D1D940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea9e841-f685-3188-a980-6f39d443721c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        76.22.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:18:e0:76:bd:11:64:08:d1:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4248d905-4951-4e59-8d7e-1c8e9eb753b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:13:e5:28:7e:d6:d0:d6:ef:5a:23:44:b3:
                    42:88:f8:36:eb:1e:d5:79:91:58:12:5e:7d:77:a4:
                    2b:c6:cd:66:49:0b:e0:2c:8f:1e:e2:a2:da:c6:75:
                    bb:2e:90:0e:85:73:d0:a5:0f:ab:1c:f6:9e:b4:53:
                    05:bb:72:be:a7:e3:16:50:d1:e2:0b:a1:43:26:1f:
                    22:7d:1d:a1:e9:25:07:59:24:ad:3f:01:fa:96:9b:
                    cb:5e:46:89:5d:98:f4:a5:1f:ec:91:54:98:43:83:
                    b9:c8:91:e9:10:9e:db:4c:32:ed:83:ff:cc:78:21:
                    22:41:eb:19:8b:f2:42:1f:ec:d7:49:e2:c7:16:d4:
                    6c:41:5d:83:1d:4b:46:fd:ed:00:fd:b1:cd:2a:9b:
                    ce:9a:89:36:ab:78:71:08:aa:54:50:49:a5:64:3d:
                    fa:5c:7b:80:49:a9:29:89:18:48:48:70:78:71:db:
                    fd:c8:e6:f3:38:6a:4e:9f:df:52:82:d0:d9:c4:87:
                    78:83:cc:b9:58:e9:d4:4d:dd:32:45:01:d4:ee:e4:
                    94:76:32:3c:af:5c:68:fb:81:f9:2f:ed:bf:e3:48:
                    89:1a:35:ab:f1:b3:2c:a4:7f:97:48:85:82:39:cb:
                    00:22:df:7b:34:cb:df:b8:94:b7:b1:18:46:20:9d:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:00:75:53:49:AE:DE:A2:40:BE:4F:1F:28:39:5A:3B:AD:65:5D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea9e841-f685-3188-a980-6f39d443721c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.22.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:c5:8e:52:7c:53:c2:76:7b:7b:99:ab:3a:a0:09:75:e6:
         cc:c8:d7:16:f9:e5:65:6c:77:1e:ae:6c:29:3f:08:1d:f3:67:
         de:95:a2:43:4c:48:dc:ff:83:b4:44:e4:7b:b9:7c:14:1a:90:
         1a:33:7c:8b:88:10:f5:e0:6e:aa:25:70:ce:0e:49:3e:76:53:
         0e:71:3c:5d:12:c1:8c:56:9e:b7:68:97:99:9e:a9:41:4c:97:
         ab:8b:b4:35:d7:f5:a6:db:f3:88:d1:d8:4b:79:0f:a9:0f:f9:
         5a:45:58:d3:2e:f7:1b:ce:0d:d3:2c:24:6e:5c:e3:4f:55:c6:
         ad:f1:b8:7e:e4:65:1d:9f:d2:71:f2:07:82:7b:a5:15:83:9a:
         b0:84:91:32:58:e2:34:10:78:bd:98:f9:c7:e4:9e:84:e7:bc:
         b8:df:fb:d6:9c:fc:11:32:a6:e5:cf:84:1d:46:3e:69:90:fe:
         89:ac:7d:2f:75:c7:b7:a5:dc:79:59:cd:6e:d8:4a:b7:e5:7c:
         51:0a:a7:bd:4c:cf:53:d6:c9:05:07:7e:3d:e0:f8:c8:af:5d:
         ff:e3:95:20:4a:66:44:48:bc:ae:fc:6e:14:49:ff:51:e2:60:
         38:5b:5d:3a:16:8a:3f:c5:93:3f:5f:28:be:fd:f6:c6:b4:9b:
         fe:57:32:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njBjgdr0RZAjR2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDI0OGQ5MDUtNDk1MS00ZTU5LThkN2UtMWM4ZTllYjc1M2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4IT5Sh+1tDW71ojRLNCiPg26x7VeZFYEl59
d6Qrxs1mSQvgLI8e4qLaxnW7LpAOhXPQpQ+rHPaetFMFu3K+p+MWUNHiC6FDJh8i
fR2h6SUHWSStPwH6lpvLXkaJXZj0pR/skVSYQ4O5yJHpEJ7bTDLtg//MeCEiQesZ
i/JCH+zXSeLHFtRsQV2DHUtG/e0A/bHNKpvOmok2q3hxCKpUUEmlZD36XHuASakp
iRhISHB4cdv9yObzOGpOn99SgtDZxId4g8y5WOnUTd0yRQHU7uSUdjI8r1xo+4H5
L+2/40iJGjWr8bMspH+XSIWCOcsAIt97NMvfuJS3sRhGIJ39NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIsAdVNJrt6iQL5PHyg5WjutZV2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGVhOWU4NDEtZjY4NS0z
MTg4LWE5ODAtNmYzOWQ0NDM3MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETwxY5SfFPCdnt7mas6oAl15szI1xb55WVsdx6ubCk/CB3zZ96VokNM
SNz/g7RE5Hu5fBQakBozfIuIEPXgbqolcM4OST52Uw5xPF0SwYxWnrdol5meqUFM
l6uLtDXX9abb84jR2Et5D6kP+VpFWNMu9xvODdMsJG5c409Vxq3xuH7kZR2f0nHy
B4J7pRWDmrCEkTJY4jQQeL2Y+cfknoTnvLjf+9ac/BEypuXPhB1GPmmQ/omsfS91
x7el3HlZzW7YSrflfFEKp71Mz1PWyQUHfj3g+MivXf/jlSBKZkRIvK78bhRJ/1Hi
YDhbXToWij/Fkz9fKL799sa0m/5XMmc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:41 2026 by rpki-client