Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1329df48-419f-3d84-9f65-5250e56291cc.roa
File:                     1329df48-419f-3d84-9f65-5250e56291cc.roa (raw, json)
Hash identifier:          esFOlz0Wa+UhyJl3QzUpfefgJQZwVBVSn3/2Pr30y1s=
Subject key identifier:   47:93:ED:BC:B9:B7:87:2C:B5:67:B2:4C:07:24:D1:BD:7C:2C:30:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBD75E0B6694FFEAA9B200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1329df48-419f-3d84-9f65-5250e56291cc.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.100.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:d7:5e:0b:66:94:ff:ea:a9:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=2c4d7fbb-ef57-4c5e-89fb-fece210292dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:f6:2d:5b:97:51:ab:a7:7d:fd:0d:79:56:
                    78:5b:02:70:61:37:ae:82:5d:24:9f:c7:be:b8:09:
                    0b:17:d1:ad:99:c0:b2:38:91:3b:0d:0f:d4:df:a6:
                    cc:77:55:d6:d7:2a:c0:32:0c:f8:15:ed:db:cc:c2:
                    bf:7c:ba:e4:87:77:72:50:f3:e7:d9:54:47:46:ea:
                    71:41:f1:f3:93:5e:b3:08:74:db:a5:a9:73:2d:cd:
                    1b:34:d6:6d:fa:07:a0:33:e0:43:f4:2a:43:ba:ed:
                    49:0b:57:ef:db:fb:1a:16:c8:62:3a:25:77:43:f4:
                    ed:eb:d3:ad:3e:2d:23:8e:8f:44:f6:df:28:a2:d6:
                    5e:3f:63:b8:67:e2:46:e2:06:cb:1c:91:99:f5:7c:
                    59:8a:eb:21:6a:e5:04:8a:4e:58:1f:85:06:41:e1:
                    21:7f:d0:d0:95:f4:43:a2:bb:b5:a1:9c:1d:7a:de:
                    af:6d:31:da:f9:01:6a:5d:bd:7a:9e:60:73:ea:39:
                    90:28:29:84:f5:18:e8:05:94:b8:e5:41:b6:28:8f:
                    69:41:88:a4:f0:37:e2:b4:14:c2:41:0b:49:41:87:
                    e7:55:03:12:62:14:c4:91:fd:26:e1:b4:22:ca:13:
                    f9:c1:ed:bc:3e:fa:6f:2b:a6:81:d2:ac:80:c2:5d:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:93:ED:BC:B9:B7:87:2C:B5:67:B2:4C:07:24:D1:BD:7C:2C:30:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1329df48-419f-3d84-9f65-5250e56291cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.100.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:81:fd:32:7a:81:42:6d:71:d4:ed:6c:6f:4e:12:87:7f:b8:
         02:35:88:cb:a0:4d:f8:4e:fc:7d:e5:e3:d5:85:a4:9c:5d:84:
         43:3a:f4:48:1e:dc:27:7a:9a:c8:e9:08:62:96:61:fc:92:b5:
         64:d2:4b:ab:3e:ab:7f:26:aa:60:b1:f6:34:e5:11:72:e5:2c:
         1c:b2:b3:cc:e1:8e:0d:dc:32:96:ed:c3:e8:12:b7:d2:94:18:
         2f:c9:3c:54:1a:c1:9c:d0:7a:0d:8b:a1:37:4e:06:e4:b2:39:
         e4:d5:d2:2b:c5:a6:e9:8d:09:86:68:45:bf:9e:9e:9f:67:8e:
         98:db:76:84:05:06:fe:6a:ea:b1:19:69:07:63:5a:5f:0a:7d:
         c9:fc:37:f5:a3:8b:ec:99:fd:fc:fa:d0:bc:77:cc:aa:d2:ff:
         2d:67:fa:94:3e:5b:21:a4:e4:09:17:ff:08:08:ff:70:bb:5a:
         c7:a4:79:f2:c7:14:cc:9a:90:89:22:d5:02:5c:72:dc:d3:6d:
         f8:94:ec:d7:86:1a:51:5c:0a:89:69:0c:cf:ff:fd:a2:d9:73:
         37:cc:9f:da:07:b1:77:e7:19:39:52:f4:f4:7e:a8:8f:3f:a1:
         51:f4:8e:37:f8:d3:ba:e7:68:70:16:f8:d6:f2:d9:ed:61:ee:
         91:66:29:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu9deC2aU/+qpsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MmM0ZDdmYmItZWY1Ny00YzVlLTg5ZmItZmVjZTIxMDI5MmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7L2LVuXUaunff0NeVZ4WwJwYTeugl0kn8e+
uAkLF9GtmcCyOJE7DQ/U36bMd1XW1yrAMgz4Fe3bzMK/fLrkh3dyUPPn2VRHRupx
QfHzk16zCHTbpalzLc0bNNZt+gegM+BD9CpDuu1JC1fv2/saFshiOiV3Q/Tt69Ot
Pi0jjo9E9t8ootZeP2O4Z+JG4gbLHJGZ9XxZiushauUEik5YH4UGQeEhf9DQlfRD
oru1oZwdet6vbTHa+QFqXb16nmBz6jmQKCmE9RjoBZS45UG2KI9pQYik8DfitBTC
QQtJQYfnVQMSYhTEkf0m4bQiyhP5we28PvpvK6aB0qyAwl0W5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeT7by5t4cstWeyTAck0b18LDAmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTMyOWRmNDgtNDE5Zi0z
ZDg0LTlmNjUtNTI1MGU1NjI5MWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWTcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2B/TJ6gUJtcdTtbG9OEod/uAI1iMugTfhO/H3l49WFpJxdhEM69Ege
3Cd6msjpCGKWYfyStWTSS6s+q38mqmCx9jTlEXLlLByys8zhjg3cMpbtw+gSt9KU
GC/JPFQawZzQeg2LoTdOBuSyOeTV0ivFpumNCYZoRb+enp9njpjbdoQFBv5q6rEZ
aQdjWl8Kfcn8N/Wji+yZ/fz60Lx3zKrS/y1n+pQ+WyGk5AkX/wgI/3C7WsekefLH
FMyakIki1QJcctzTbfiU7NeGGlFcColpDM///aLZczfMn9oHsXfnGTlS9PR+qI8/
oVH0jjf407rnaHAW+Nby2e1h7pFmKXs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:09 2026 by rpki-client