Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19bda909-ea67-3ee0-a926-db2210c55dcd.roa
File:                     19bda909-ea67-3ee0-a926-db2210c55dcd.roa (raw, json)
Hash identifier:          XKGktGd9I0dVrBfEpG1pQI8M6QXhYXwtHTixlYbOADM=
Subject key identifier:   E8:27:04:BE:E0:26:5B:E8:33:C0:84:65:00:57:B4:F3:27:68:56:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EA4B4BC2EDE11844E2380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19bda909-ea67-3ee0-a926-db2210c55dcd.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.160.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:a4:b4:bc:2e:de:11:84:4e:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=d2a53395-303f-417b-8bcb-a800b6dbea5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:97:2a:70:ba:3e:b7:f6:ba:f8:53:cd:2a:
                    e2:a4:d2:56:81:1a:a6:fc:b5:ba:c1:93:dc:d2:6c:
                    54:7f:1e:58:e1:a5:00:35:f1:d5:30:f4:83:55:30:
                    34:8e:18:f4:35:47:b9:49:18:b0:24:99:92:5b:74:
                    f4:6e:07:a2:fc:f1:f5:ed:a6:06:48:bb:ff:55:2c:
                    42:a4:ad:96:b0:5e:59:f7:78:f7:b3:c9:b5:18:4f:
                    99:56:7b:ba:8d:b3:10:ef:bc:f7:2f:44:50:a4:4e:
                    99:30:eb:53:10:0e:a8:59:d9:ad:fc:87:2c:38:94:
                    4d:d3:f5:dd:58:58:ae:7f:81:e6:8b:ac:ac:fe:45:
                    8a:b4:2a:ac:b7:3c:e6:04:dc:81:ee:fa:d7:76:46:
                    26:90:ba:1e:ce:9e:69:31:4b:2a:ab:ae:c9:b3:d9:
                    17:55:28:80:80:a6:05:d7:30:95:96:a6:94:28:96:
                    26:4b:00:1f:b4:98:c9:51:0f:b8:38:a8:e4:cc:ea:
                    05:a9:cd:33:9c:5a:d0:83:e4:37:d1:7c:b9:3c:f6:
                    f0:37:0a:9d:5d:70:99:af:5e:5d:64:26:d5:b5:69:
                    30:e5:8c:d4:e6:18:08:4e:25:96:bc:41:fc:7e:af:
                    27:d9:57:eb:ea:8d:ac:53:5f:06:77:13:41:a6:29:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:27:04:BE:E0:26:5B:E8:33:C0:84:65:00:57:B4:F3:27:68:56:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19bda909-ea67-3ee0-a926-db2210c55dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:20:7d:68:e8:76:1f:32:21:21:3c:cd:d3:6d:1c:30:0b:d1:
         41:f0:21:42:4a:c8:af:0b:4f:57:95:61:4d:a3:9b:6d:3e:bb:
         cb:33:a4:23:96:cc:81:28:83:ee:37:43:78:68:f3:36:02:f8:
         02:0a:25:75:e5:a6:03:10:f6:ce:49:03:82:99:7e:75:73:02:
         ac:b8:a4:c3:60:29:f7:b6:d1:f4:0f:8b:cd:2e:66:7b:59:91:
         19:35:a6:ae:25:98:81:8c:3c:35:27:d7:65:78:5f:9d:41:c1:
         e5:17:f5:00:12:39:41:ed:5e:f4:57:2d:f3:e5:82:9b:19:b7:
         c3:0a:78:14:8a:fa:5f:21:8f:c8:a5:01:d1:3b:98:9d:9e:68:
         14:f7:3e:18:33:7c:3d:bb:11:37:76:bd:8b:ee:3b:dc:f9:b0:
         94:11:1a:ff:d8:a1:15:47:41:b5:5a:77:79:75:cf:f6:b2:40:
         84:5c:4b:c5:85:d5:93:94:1a:85:ea:2e:cb:b4:7c:2b:78:96:
         75:3d:e2:d2:93:63:1f:0d:58:d1:c0:7e:e2:ee:af:cf:01:60:
         89:17:87:83:5d:82:9a:e6:60:bd:e6:c3:6e:5b:a8:8d:ed:75:
         4d:f0:b6:4d:3a:00:cf:64:03:f4:27:fa:e4:19:e1:09:c0:57:
         1f:01:df:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnqS0vC7eEYROI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDJhNTMzOTUtMzAzZi00MTdiLThiY2ItYTgwMGI2ZGJlYTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI+XKnC6Prf2uvhTzSripNJWgRqm/LW6wZPc
0mxUfx5Y4aUANfHVMPSDVTA0jhj0NUe5SRiwJJmSW3T0bgei/PH17aYGSLv/VSxC
pK2WsF5Z93j3s8m1GE+ZVnu6jbMQ77z3L0RQpE6ZMOtTEA6oWdmt/IcsOJRN0/Xd
WFiuf4Hmi6ys/kWKtCqstzzmBNyB7vrXdkYmkLoezp5pMUsqq67Js9kXVSiAgKYF
1zCVlqaUKJYmSwAftJjJUQ+4OKjkzOoFqc0znFrQg+Q30Xy5PPbwNwqdXXCZr15d
ZCbVtWkw5YzU5hgITiWWvEH8fq8n2Vfr6o2sU18GdxNBpik87wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOgnBL7gJlvoM8CEZQBXtPMnaFaZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTliZGE5MDktZWE2Ny0z
ZWUwLWE5MjYtZGIyMjEwYzU1ZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsgfWjodh8yISE8zdNtHDAL0UHwIUJKyK8LT1eVYU2jm20+u8szpCOW
zIEog+43Q3ho8zYC+AIKJXXlpgMQ9s5JA4KZfnVzAqy4pMNgKfe20fQPi80uZntZ
kRk1pq4lmIGMPDUn12V4X51BweUX9QASOUHtXvRXLfPlgpsZt8MKeBSK+l8hj8il
AdE7mJ2eaBT3PhgzfD27ETd2vYvuO9z5sJQRGv/YoRVHQbVad3l1z/ayQIRcS8WF
1ZOUGoXqLsu0fCt4lnU94tKTYx8NWNHAfuLur88BYIkXh4NdgprmYL3mw25bqI3t
dU3wtk06AM9kA/Qn+uQZ4QnAVx8B36k=
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:12:41 2026 by rpki-client