Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1149faf8-5cdd-306b-a5c2-5bae31984d8a.roa
File:                     1149faf8-5cdd-306b-a5c2-5bae31984d8a.roa (raw, json)
Hash identifier:          Qs7EOAbUdwWnABvQmZ8h/sJ1no2tRP0TyV/wacyqYXs=
Subject key identifier:   1E:81:07:49:E0:28:B4:0B:0D:4A:F4:0C:D8:30:5E:FA:81:D0:DA:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49825590657ABE06CD91B500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1149faf8-5cdd-306b-a5c2-5bae31984d8a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        71.194.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:55:90:65:7a:be:06:cd:91:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=38d8cb58-c5fb-4d5d-bf67-0d59cf792942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:b8:16:8b:94:3f:76:36:a5:e4:6b:4e:47:
                    72:1d:c1:be:b2:74:30:ae:fe:f8:70:70:71:f3:bb:
                    10:42:6b:07:e4:98:ae:2a:8e:5d:a3:27:81:34:d1:
                    4c:0c:fd:e4:06:23:48:13:36:2d:b5:99:a4:07:12:
                    f2:21:01:8d:c5:31:91:a6:bd:3a:a9:63:0f:de:42:
                    80:92:82:07:85:d7:e3:6f:1c:4a:70:22:56:83:d6:
                    ad:a5:e2:6a:3e:c2:82:67:ea:7d:0c:5c:6e:90:f0:
                    3e:22:14:5b:1b:e5:7a:1e:75:5d:cb:33:ec:ed:00:
                    a3:14:3f:3e:63:0c:71:21:0d:14:ca:ea:1a:12:be:
                    7b:f4:62:df:ba:5c:f4:f6:06:ce:56:cd:72:05:97:
                    a8:87:2a:f9:17:35:fc:d9:0e:a3:3f:5c:9e:7f:2e:
                    eb:b1:48:8c:0e:1b:e9:33:cb:2b:87:4f:ce:47:10:
                    7a:af:f6:01:9f:56:cb:76:0a:db:ce:93:7a:ac:5b:
                    56:99:4b:1c:a4:60:75:b1:97:33:8f:56:1b:2b:d5:
                    f7:17:25:3e:01:9e:71:38:a0:c9:e8:de:54:44:39:
                    1c:19:d4:0f:0c:04:5b:e6:33:0d:f4:2a:8a:7c:9f:
                    8b:e4:a1:ab:86:a8:0d:90:10:2e:ee:c6:45:22:ef:
                    44:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:81:07:49:E0:28:B4:0B:0D:4A:F4:0C:D8:30:5E:FA:81:D0:DA:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1149faf8-5cdd-306b-a5c2-5bae31984d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.194.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ed:93:5d:aa:6a:8d:fe:ab:8e:c4:82:6a:4d:4a:03:23:92:
         76:ea:d8:2b:63:2c:d3:7b:af:23:b9:8c:23:f4:11:f8:9d:e9:
         18:68:80:c1:62:03:da:c2:24:ff:a5:b2:7b:a9:cd:71:68:3e:
         68:b1:3a:f1:18:3e:d1:0c:c4:85:63:4a:cb:44:fa:9e:08:16:
         a9:0d:37:3b:b7:6c:f0:ba:08:2b:0e:fc:80:f6:52:df:80:3f:
         18:bf:ce:00:b4:05:8e:4e:23:51:7b:bb:c2:7c:27:98:6d:08:
         ce:b8:70:c5:95:1f:28:3d:80:f3:91:7f:8e:f4:8f:0d:96:2e:
         9b:f6:e6:bf:9f:9a:79:04:80:0b:6b:37:6d:b1:18:c4:7b:04:
         3e:7b:c9:64:49:84:f0:66:56:0d:9f:2a:45:88:da:a4:28:f5:
         69:4c:75:e3:30:c3:fa:16:8e:af:36:c4:2a:2d:d4:4b:91:bc:
         9a:2d:3b:a3:c7:8b:b8:9d:df:8c:2d:cc:b4:6c:a7:4e:64:f3:
         cb:59:a2:a3:d6:87:e9:81:9f:48:78:9d:e0:60:f3:72:a6:22:
         fe:74:d2:3d:25:c9:8a:6d:10:4c:27:8e:b6:07:5d:9c:b0:3c:
         97:d8:cf:85:af:2e:c5:18:ee:14:37:49:d1:2f:7c:6f:f8:3c:
         b8:af:23:24
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JglWQZXq+Bs2RtQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzhkOGNiNTgtYzVmYi00ZDVkLWJmNjctMGQ1OWNmNzkyOTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsey4FouUP3Y2peRrTkdyHcG+snQwrv74cHBx
87sQQmsH5JiuKo5doyeBNNFMDP3kBiNIEzYttZmkBxLyIQGNxTGRpr06qWMP3kKA
koIHhdfjbxxKcCJWg9atpeJqPsKCZ+p9DFxukPA+IhRbG+V6HnVdyzPs7QCjFD8+
YwxxIQ0UyuoaEr579GLfulz09gbOVs1yBZeohyr5FzX82Q6jP1yefy7rsUiMDhvp
M8srh0/ORxB6r/YBn1bLdgrbzpN6rFtWmUscpGB1sZczj1YbK9X3FyU+AZ5xOKDJ
6N5URDkcGdQPDARb5jMN9CqKfJ+L5KGrhqgNkBAu7sZFIu9EyQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB6BB0ngKLQLDUr0DNgwXvqB0NrJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTE0OWZhZjgtNWNkZC0z
MDZiLWE1YzItNWJhZTMxOTg0ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR8IwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPe2TXapqjf6rjsSCak1KAyOSdurYK2Ms03uvI7mMI/QR+J3pGGiAwWID
2sIk/6Wye6nNcWg+aLE68Rg+0QzEhWNKy0T6nggWqQ03O7ds8LoIKw78gPZS34A/
GL/OALQFjk4jUXu7wnwnmG0IzrhwxZUfKD2A85F/jvSPDZYum/bmv5+aeQSAC2s3
bbEYxHsEPnvJZEmE8GZWDZ8qRYjapCj1aUx14zDD+haOrzbEKi3US5G8mi07o8eL
uJ3fjC3MtGynTmTzy1mio9aH6YGfSHid4GDzcqYi/nTSPSXJim0QTCeOtgddnLA8
l9jPha8uxRjuFDdJ0S98b/g8uK8jJA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:49:37 2026 by rpki-client