Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad91a37-8d24-3024-bd19-e14e53f776e4.roa
File:                     1ad91a37-8d24-3024-bd19-e14e53f776e4.roa (raw, json)
Hash identifier:          SWCpx5GzBESJk7CvWsZe/0eEX8wYD5s9H6Qr5jKejIg=
Subject key identifier:   3A:51:18:10:92:42:FD:59:8A:99:66:F2:F4:95:81:AF:0F:5F:7E:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5980FC297E5AFCACFD2380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad91a37-8d24-3024-bd19-e14e53f776e4.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        69.141.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:80:fc:29:7e:5a:fc:ac:fd:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=85f745ec-364c-4368-adad-a6649e526f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:b7:50:f3:cd:03:16:75:74:4d:b5:76:27:
                    19:74:28:c7:24:a5:de:a7:ba:69:87:6d:81:25:63:
                    76:ab:ea:86:20:fd:2c:1c:d4:5e:b4:39:32:70:7b:
                    e8:c9:b5:ee:50:3e:2b:56:a5:85:6c:15:d4:b6:b4:
                    f7:b0:ea:a2:3d:97:db:c0:bd:de:3b:60:aa:b7:cd:
                    9c:3c:7a:fa:ec:c6:c9:4b:3a:67:b4:d0:7e:b5:79:
                    98:2b:d0:c8:96:d1:03:2c:81:76:99:8a:e8:cc:1e:
                    4b:fa:05:3b:65:a9:c7:8b:e0:53:9e:6e:1c:3d:d4:
                    7e:4b:8f:c6:30:3e:ca:c7:25:9a:ae:81:36:87:2b:
                    72:9d:61:a2:1b:78:96:8f:4e:5d:d0:e4:c9:18:de:
                    12:ef:38:81:a7:2e:1a:64:2e:d6:eb:9e:89:12:d5:
                    80:98:cb:71:12:32:82:e5:9e:f9:cd:5c:1b:98:81:
                    b7:fd:c8:cf:5b:a7:21:08:09:55:6e:67:73:59:11:
                    f8:cb:18:d0:14:ad:cc:2e:53:de:81:e4:5b:26:e8:
                    fc:aa:9a:3c:e4:7f:4b:de:e1:5b:51:3f:d8:b9:68:
                    ee:9f:55:29:23:dc:d3:b8:96:14:22:e2:44:6a:c7:
                    26:c4:f1:cc:96:66:fd:1f:4c:74:65:26:fd:6d:39:
                    df:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:51:18:10:92:42:FD:59:8A:99:66:F2:F4:95:81:AF:0F:5F:7E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad91a37-8d24-3024-bd19-e14e53f776e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.141.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:13:f3:e0:aa:be:41:87:e7:ea:72:c2:48:7a:37:c3:e0:
         5b:57:a5:31:eb:d4:b3:de:06:f0:47:01:02:b0:be:d6:f6:ee:
         5a:78:ff:34:e1:1a:67:24:92:79:ac:ae:f2:d4:f9:4b:82:bd:
         2e:8e:75:0a:4a:4d:d0:7a:44:04:08:a1:49:36:44:73:f7:52:
         a2:61:a3:09:9e:0a:b0:ba:34:eb:b8:ba:f3:c7:1b:62:e8:b8:
         79:16:15:9d:90:24:44:ee:5c:14:5b:b3:b4:7c:bc:5d:51:67:
         e2:94:96:50:28:a2:80:51:d6:07:8d:81:56:20:e6:a7:cc:b4:
         57:b0:be:1f:da:53:09:8a:c7:4b:fb:c6:44:b2:a4:e8:89:9f:
         83:91:56:de:ac:9c:74:f3:47:3d:5d:fd:1d:aa:61:79:65:e5:
         ac:c0:ac:17:ec:67:07:36:c2:27:a9:54:68:56:23:10:18:ff:
         98:c9:b1:29:0b:d3:7d:31:86:24:36:30:9c:cc:73:54:6c:96:
         b2:92:92:33:ab:ce:73:1a:11:91:17:0f:60:1f:25:d2:9b:39:
         1a:d8:51:82:ba:72:85:14:e2:57:2b:d5:ea:3a:4f:e5:24:26:
         f2:ed:a9:e3:6c:7f:b4:07:94:f1:03:3c:9a:87:78:35:0c:9a:
         5c:8c:4e:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWYD8KX5a/Kz9I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ODVmNzQ1ZWMtMzY0Yy00MzY4LWFkYWQtYTY2NDllNTI2ZjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXu3UPPNAxZ1dE21dicZdCjHJKXep7pph22B
JWN2q+qGIP0sHNRetDkycHvoybXuUD4rVqWFbBXUtrT3sOqiPZfbwL3eO2Cqt82c
PHr67MbJSzpntNB+tXmYK9DIltEDLIF2mYrozB5L+gU7ZanHi+BTnm4cPdR+S4/G
MD7KxyWaroE2hytynWGiG3iWj05d0OTJGN4S7ziBpy4aZC7W656JEtWAmMtxEjKC
5Z75zVwbmIG3/cjPW6chCAlVbmdzWRH4yxjQFK3MLlPegeRbJuj8qpo85H9L3uFb
UT/YuWjun1UpI9zTuJYUIuJEascmxPHMlmb9H0x0ZSb9bTnfVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpRGBCSQv1Ziplm8vSVga8PX369MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFkOTFhMzctOGQyNC0z
MDI0LWJkMTktZTE0ZTUzZjc3NmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRY0IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKpE/Pgqr5Bh+fqcsJIejfD4FtXpTHr1LPeBvBHAQKwvtb27lp4/zTh
GmckknmsrvLU+UuCvS6OdQpKTdB6RAQIoUk2RHP3UqJhowmeCrC6NOu4uvPHG2Lo
uHkWFZ2QJETuXBRbs7R8vF1RZ+KUllAoooBR1geNgVYg5qfMtFewvh/aUwmKx0v7
xkSypOiJn4ORVt6snHTzRz1d/R2qYXll5azArBfsZwc2wiepVGhWIxAY/5jJsSkL
030xhiQ2MJzMc1RslrKSkjOrznMaEZEXD2AfJdKbORrYUYK6coUU4lcr1eo6T+Uk
JvLtqeNsf7QHlPEDPJqHeDUMmlyMTus=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:40:54 2026 by rpki-client