Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7b5dc5-b7b7-3600-8e4e-a6b7897330f8.roa
File:                     2c7b5dc5-b7b7-3600-8e4e-a6b7897330f8.roa (raw, json)
Hash identifier:          EZXzuL95RuSua1qTRIGzHCvf45kDtL4LIBWxofkNYCo=
Subject key identifier:   FB:EE:8A:BB:E8:D3:3C:9E:C2:7A:F5:14:7E:1D:07:9D:95:D1:F3:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EDA016958C2614BE5ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7b5dc5-b7b7-3600-8e4e-a6b7897330f8.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        71.230.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:da:01:69:58:c2:61:4b:e5:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=52467634-cd70-4ddf-b4fc-b3f47552683b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:ff:b5:5d:0b:1d:1e:22:6b:7a:2e:a5:5e:
                    2b:38:1d:dd:af:f5:01:78:89:fd:05:2d:55:b4:02:
                    7a:73:e4:bf:f2:61:7b:38:48:03:34:a1:11:9c:d8:
                    0b:8e:4c:f8:8c:14:64:ed:c5:89:be:5f:6c:0b:da:
                    08:77:70:41:8c:b8:71:9b:dd:7a:81:9f:4e:b4:3c:
                    26:f4:5e:78:55:83:ba:e6:e7:b4:b0:7d:4b:b6:84:
                    25:c7:ab:6f:4c:0d:a2:36:8f:12:54:f3:41:d9:7a:
                    32:d9:3a:b1:11:05:f1:3d:19:ac:e2:70:dc:fb:3f:
                    08:c8:89:45:cc:e1:6d:6d:04:30:d5:a1:62:4b:33:
                    b3:ac:da:a9:06:8b:16:a3:87:4c:d5:8e:f4:9d:48:
                    6f:81:1a:bf:d2:ba:f2:1f:96:41:06:ed:2c:2f:c0:
                    42:19:3e:50:24:37:b2:6e:78:ad:d7:e6:4f:b7:96:
                    8d:55:96:d8:b6:e1:05:5d:e4:0b:f5:24:c6:d9:7c:
                    0c:90:62:f0:12:f6:6a:3b:9b:a6:b2:a9:31:57:38:
                    a5:3b:5a:b5:21:2b:92:0f:0c:d0:0d:ad:b9:84:fa:
                    a2:22:d1:cb:97:89:0d:43:d2:1c:ec:80:ad:42:60:
                    47:ad:d4:49:80:d1:2b:de:2c:88:24:62:e1:2f:5e:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EE:8A:BB:E8:D3:3C:9E:C2:7A:F5:14:7E:1D:07:9D:95:D1:F3:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7b5dc5-b7b7-3600-8e4e-a6b7897330f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.230.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:5c:fe:f1:ed:b4:2f:61:cf:eb:c3:28:56:65:f8:e6:e6:d0:
         df:ae:74:3f:d7:06:b8:4d:80:be:70:49:70:2a:0d:20:23:6d:
         9c:34:a3:00:d4:48:f1:37:6b:93:89:45:47:24:4b:3f:a5:f6:
         66:89:97:ca:24:00:1e:dd:68:c2:d0:f2:4b:97:f5:4d:d3:ea:
         7d:18:be:35:e0:b7:5b:f0:c4:6e:9e:9a:9f:5a:d2:b0:a8:cb:
         fa:f6:59:32:de:12:31:e9:1e:fa:58:5e:b2:dc:2c:de:d3:50:
         89:cd:7e:02:12:de:a7:41:e5:8f:96:9c:ee:2e:1e:7e:57:e5:
         25:eb:8e:68:5c:18:20:28:5e:f4:20:eb:f4:ba:85:3a:4a:dc:
         65:fd:5f:07:68:2d:79:fb:a5:ca:c8:04:03:3c:11:41:93:52:
         86:90:9a:65:c0:07:75:1b:99:4b:50:61:a8:27:59:8d:72:16:
         fc:72:d6:b1:f2:83:bc:df:8b:95:06:dc:2c:6e:22:ad:f8:64:
         52:07:cf:87:2c:55:8e:b2:a4:7f:4d:a2:e4:07:16:c0:3c:ac:
         2a:62:e0:fa:f0:96:24:5b:fa:5e:5f:4b:76:16:68:fb:40:0b:
         a9:0c:23:86:93:ce:0a:6a:1d:f1:c8:96:a7:2d:ac:33:84:99:
         7f:46:b8:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RntoBaVjCYUvl7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTI0Njc2MzQtY2Q3MC00ZGRmLWI0ZmMtYjNmNDc1NTI2ODNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+7/tV0LHR4ia3oupV4rOB3dr/UBeIn9BS1V
tAJ6c+S/8mF7OEgDNKERnNgLjkz4jBRk7cWJvl9sC9oId3BBjLhxm916gZ9OtDwm
9F54VYO65ue0sH1LtoQlx6tvTA2iNo8SVPNB2Xoy2TqxEQXxPRms4nDc+z8IyIlF
zOFtbQQw1aFiSzOzrNqpBosWo4dM1Y70nUhvgRq/0rryH5ZBBu0sL8BCGT5QJDey
bnit1+ZPt5aNVZbYtuEFXeQL9STG2XwMkGLwEvZqO5umsqkxVzilO1q1ISuSDwzQ
Da25hPqiItHLl4kNQ9Ic7ICtQmBHrdRJgNEr3iyIJGLhL173+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvuirvo0zyewnr1FH4dB52V0fMpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM3YjVkYzUtYjdiNy0z
NjAwLThlNGUtYTZiNzg5NzMzMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+awMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANNc/vHttC9hz+vDKFZl+Obm0N+udD/XBrhNgL5wSXAqDSAjbZw0owDU
SPE3a5OJRUckSz+l9maJl8okAB7daMLQ8kuX9U3T6n0YvjXgt1vwxG6emp9a0rCo
y/r2WTLeEjHpHvpYXrLcLN7TUInNfgIS3qdB5Y+WnO4uHn5X5SXrjmhcGCAoXvQg
6/S6hTpK3GX9XwdoLXn7pcrIBAM8EUGTUoaQmmXAB3UbmUtQYagnWY1yFvxy1rHy
g7zfi5UG3CxuIq34ZFIHz4csVY6ypH9NouQHFsA8rCpi4PrwliRb+l5fS3YWaPtA
C6kMI4aTzgpqHfHIlqctrDOEmX9GuJA=
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:36:36 2026 by rpki-client