Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14cd64ff-55b3-30df-bced-a6b1bdcb716d.roa
File:                     14cd64ff-55b3-30df-bced-a6b1bdcb716d.roa (raw, json)
Hash identifier:          tyey0cTo5WGZDiy/a5ZZjunR3GnEwv6fUx7HzCXBQ2k=
Subject key identifier:   0E:AA:C1:37:B1:74:DB:04:EA:2E:A2:B7:D7:14:C1:DA:4A:2A:9A:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BAAA5B78688C69A1B1E200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14cd64ff-55b3-30df-bced-a6b1bdcb716d.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.123.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:aa:5b:78:68:8c:69:a1:b1:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=3c283eef-2730-48e5-b943-196bc1de0ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c5:54:dd:58:35:87:94:3c:ab:41:5c:32:f9:
                    82:88:09:9b:db:ac:a2:ad:bb:9f:54:af:a0:a1:10:
                    a6:ce:27:4e:8a:24:7d:0a:ca:85:b2:a2:73:3e:b0:
                    28:15:af:5f:69:74:8b:2d:6a:66:75:51:03:e9:d2:
                    7c:b5:d4:9a:54:e1:e0:5e:92:60:3e:f0:4b:cc:43:
                    af:ec:67:4a:ef:05:78:b6:46:a1:03:cf:0f:53:77:
                    e1:16:ee:96:3d:f3:95:7a:f7:5d:80:ca:33:2a:3f:
                    d9:74:e8:d3:d9:67:2a:72:2d:12:ed:d7:f5:74:aa:
                    73:de:ab:55:b9:49:56:1c:e1:04:1f:f7:37:88:0c:
                    94:b6:d3:e2:66:1a:d3:b1:ea:4a:58:95:33:5c:a3:
                    50:38:49:9b:be:c4:35:10:18:38:fb:87:0d:50:f7:
                    97:65:d2:3a:36:e5:b5:36:73:0b:9a:5a:93:71:90:
                    54:41:99:86:c4:d9:f8:9a:ab:dd:8d:9f:25:6a:33:
                    91:ea:ca:e1:47:5c:c7:50:dc:6d:a0:11:5f:21:5e:
                    6e:b6:5a:90:4f:09:cb:1f:74:0a:02:3e:f2:9e:d8:
                    66:a1:ea:ec:18:23:e1:95:10:bd:16:dc:1a:3f:36:
                    ab:12:f5:81:36:14:14:2d:8f:17:61:e5:cb:fb:51:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AA:C1:37:B1:74:DB:04:EA:2E:A2:B7:D7:14:C1:DA:4A:2A:9A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14cd64ff-55b3-30df-bced-a6b1bdcb716d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.123.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:21:7d:b2:6f:1b:8f:9e:79:f0:15:45:27:f3:fc:6b:95:bb:
         ad:5a:ec:54:01:96:98:c4:d3:ca:dc:34:11:a3:f5:f5:80:e2:
         b2:09:a2:f7:1d:f3:df:c3:f7:f2:d8:04:9d:ad:19:d7:b2:a5:
         aa:87:55:83:75:13:3d:e3:6c:6f:14:b1:21:fc:1c:ed:e1:a3:
         07:68:28:e5:f5:31:de:d0:b2:a1:cc:8c:92:d6:04:f8:ae:98:
         a2:35:34:ce:f7:09:ea:22:30:51:4b:46:42:15:d5:40:9b:be:
         86:50:9b:9a:64:38:61:69:e0:52:9a:59:62:8e:83:33:22:cc:
         05:86:8a:e9:5f:e7:bc:8e:b2:61:40:01:a6:d7:24:2c:b7:db:
         b0:a1:73:14:f9:17:57:0a:95:4e:c1:75:f2:72:11:d6:24:41:
         06:80:c0:a1:d8:36:2f:e1:c0:97:cb:88:64:e0:2b:55:d2:b7:
         08:9a:c4:f0:51:dd:ed:cb:8e:b8:e5:e7:32:e9:79:3f:1e:e6:
         4c:fd:b3:6a:01:72:f8:d1:80:3a:25:f9:26:e5:31:fc:30:40:
         97:a1:df:79:26:ab:61:f7:f3:cf:bf:cb:49:8e:1a:21:bd:28:
         6a:e7:ac:c2:58:2b:df:84:ac:a0:a5:70:f5:6d:34:df:ac:7d:
         46:ed:e7:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuqpbeGiMaaGx4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
M2MyODNlZWYtMjczMC00OGU1LWI5NDMtMTk2YmMxZGUwYmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28VU3Vg1h5Q8q0FcMvmCiAmb26yirbufVK+g
oRCmzidOiiR9CsqFsqJzPrAoFa9faXSLLWpmdVED6dJ8tdSaVOHgXpJgPvBLzEOv
7GdK7wV4tkahA88PU3fhFu6WPfOVevddgMozKj/ZdOjT2Wcqci0S7df1dKpz3qtV
uUlWHOEEH/c3iAyUttPiZhrTsepKWJUzXKNQOEmbvsQ1EBg4+4cNUPeXZdI6NuW1
NnMLmlqTcZBUQZmGxNn4mqvdjZ8lajOR6srhR1zHUNxtoBFfIV5utlqQTwnLH3QK
Aj7ynthmoersGCPhlRC9FtwaPzarEvWBNhQULY8XYeXL+1F66wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA6qwTexdNsE6i6it9cUwdpKKprEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTRjZDY0ZmYtNTViMy0z
MGRmLWJjZWQtYTZiMWJkY2I3MTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXvIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUhfbJvG4+eefAVRSfz/GuVu61a7FQBlpjE08rcNBGj9fWA4rIJovcd
89/D9/LYBJ2tGdeypaqHVYN1Ez3jbG8UsSH8HO3howdoKOX1Md7QsqHMjJLWBPiu
mKI1NM73CeoiMFFLRkIV1UCbvoZQm5pkOGFp4FKaWWKOgzMizAWGiulf57yOsmFA
AabXJCy327ChcxT5F1cKlU7BdfJyEdYkQQaAwKHYNi/hwJfLiGTgK1XStwiaxPBR
3e3Ljrjl5zLpeT8e5kz9s2oBcvjRgDol+SblMfwwQJeh33kmq2H388+/y0mOGiG9
KGrnrMJYK9+ErKClcPVtNN+sfUbt5z8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:13 2026 by rpki-client