Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa59a82-7caf-3f4f-ab53-7fb6d05a7955.roa
File:                     1fa59a82-7caf-3f4f-ab53-7fb6d05a7955.roa (raw, json)
Hash identifier:          r3NEAD3A7AT1YuY4kWiARb/MdeFk0fLzlqv9+0+v26M=
Subject key identifier:   6D:C5:EF:F9:E7:83:C2:5D:B8:EC:27:D3:38:32:AB:BD:28:B6:60:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBE00B02663AA405AAFCE6
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa59a82-7caf-3f4f-ab53-7fb6d05a7955.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.143.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:e0:0b:02:66:3a:a4:05:aa:fc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=0d37e63f-541c-41e2-bab0-5f6932479149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f7:4a:2a:5f:bf:80:03:44:6c:23:26:53:36:
                    0d:f4:a8:b9:5b:06:94:a1:6a:1f:49:2a:35:2c:40:
                    2b:96:c9:e4:e0:e6:23:47:93:88:65:ec:ab:21:ae:
                    69:78:df:92:98:2d:7b:cb:ca:15:8e:c4:8c:6c:d1:
                    02:26:7b:88:d8:eb:9d:92:ca:ad:18:79:db:d6:bb:
                    5a:1c:f8:8f:07:e8:81:d1:a6:b8:f5:ab:93:e9:a3:
                    ec:82:fa:19:96:54:fd:ac:48:73:08:d5:9b:a9:4c:
                    2a:d1:75:8e:7f:d9:d9:13:e1:3c:3b:c6:7c:25:52:
                    ab:8b:01:f1:48:d9:e0:0b:3c:9e:65:b4:2f:c1:d9:
                    69:4f:ec:8e:f6:3a:9e:f3:4d:85:0b:4d:71:c7:bc:
                    f3:c2:55:a2:ac:64:e5:38:0d:3f:8e:dd:1d:7a:da:
                    85:bf:44:9b:0b:ff:3b:b2:cf:73:c5:77:f4:d8:96:
                    7f:c3:c4:5e:7d:8a:05:d5:90:0e:51:cf:a7:48:b7:
                    ab:79:c4:df:34:d8:d4:c8:3d:20:4f:84:c6:6e:c2:
                    d7:35:31:93:4f:6b:6b:d8:b1:17:b4:80:bf:ec:19:
                    cb:79:ab:47:06:c7:07:fc:4a:0c:03:69:6f:65:b0:
                    8f:36:63:fc:6e:de:77:ee:a5:57:2e:a7:bc:f7:cc:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C5:EF:F9:E7:83:C2:5D:B8:EC:27:D3:38:32:AB:BD:28:B6:60:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa59a82-7caf-3f4f-ab53-7fb6d05a7955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.143.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:cc:bd:6a:05:a7:39:a8:b0:61:ea:18:22:a7:cd:14:ba:86:
         8c:bf:7b:db:fd:de:21:53:bb:f7:6f:84:98:1e:36:b8:53:2d:
         49:38:d2:4c:1e:6a:d8:0d:4f:fa:12:ae:42:2d:63:67:f1:21:
         27:ba:71:4d:9b:8d:0a:6c:88:16:fc:23:43:5b:92:7f:8e:a2:
         8f:ac:ed:6f:8f:e2:58:ef:13:f4:09:19:ba:c0:16:94:2f:45:
         4b:a4:39:89:d8:b1:9e:a5:c7:e5:de:9b:8a:c7:fd:7a:c2:6a:
         af:25:e9:22:97:ff:c9:99:f8:1e:98:aa:30:fb:47:85:28:05:
         6c:32:8a:76:03:8e:04:4c:f0:bd:cb:f7:46:37:d3:24:7b:1e:
         34:23:65:98:cb:8f:20:4b:93:3a:51:a1:44:d6:42:3f:b9:93:
         6c:e3:08:11:7e:e9:e4:6f:b3:be:50:a2:ef:cc:31:c4:86:4e:
         d1:48:c1:a2:91:79:1f:4e:11:88:ec:5c:89:50:a4:92:2e:ab:
         74:4b:8e:42:d4:91:0a:db:b6:ec:ae:5d:a5:9d:fe:05:b3:70:
         35:3f:11:78:3b:82:ae:50:09:20:8d:f1:3a:f4:08:b3:cc:d0:
         52:63:07:f2:e2:6a:f9:b0:4a:1c:e4:ca:b8:25:fc:04:ad:83:
         98:96:6f:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu+ALAmY6pAWq/OYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MGQzN2U2M2YtNTQxYy00MWUyLWJhYjAtNWY2OTMyNDc5MTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vdKKl+/gANEbCMmUzYN9Ki5WwaUoWofSSo1
LEArlsnk4OYjR5OIZeyrIa5peN+SmC17y8oVjsSMbNECJnuI2OudksqtGHnb1rta
HPiPB+iB0aa49auT6aPsgvoZllT9rEhzCNWbqUwq0XWOf9nZE+E8O8Z8JVKriwHx
SNngCzyeZbQvwdlpT+yO9jqe802FC01xx7zzwlWirGTlOA0/jt0detqFv0SbC/87
ss9zxXf02JZ/w8RefYoF1ZAOUc+nSLerecTfNNjUyD0gT4TGbsLXNTGTT2tr2LEX
tIC/7BnLeatHBscH/EoMA2lvZbCPNmP8bt537qVXLqe898zsgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3F7/nng8JduOwn0zgyq70otmCGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWZhNTlhODItN2NhZi0z
ZjRmLWFiNTMtN2ZiNmQwNWE3OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSY98MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjMvWoFpzmosGHqGCKnzRS6hoy/e9v93iFTu/dvhJgeNrhTLUk40kwe
atgNT/oSrkItY2fxISe6cU2bjQpsiBb8I0Nbkn+Ooo+s7W+P4ljvE/QJGbrAFpQv
RUukOYnYsZ6lx+Xem4rH/XrCaq8l6SKX/8mZ+B6YqjD7R4UoBWwyinYDjgRM8L3L
90Y30yR7HjQjZZjLjyBLkzpRoUTWQj+5k2zjCBF+6eRvs75Qou/MMcSGTtFIwaKR
eR9OEYjsXIlQpJIuq3RLjkLUkQrbtuyuXaWd/gWzcDU/EXg7gq5QCSCN8Tr0CLPM
0FJjB/LiavmwShzkyrgl/AStg5iWb4s=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:32 2026 by rpki-client