Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3115f302-ddee-392e-b789-b5a3af3f5ce3.roa
File:                     3115f302-ddee-392e-b789-b5a3af3f5ce3.roa (raw, json)
Hash identifier:          EbyswHl6AcJxooH40NpTde2izj3ecb8Xx5OqKz/Gs84=
Subject key identifier:   47:7F:09:C9:2C:17:E8:4C:43:93:C7:8D:83:92:5A:89:C8:0C:D3:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA788F91283423D2428D64EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3115f302-ddee-392e-b789-b5a3af3f5ce3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        96.75.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:f9:12:83:42:3d:24:28:d6:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=12ef18b8-7142-45c8-900e-2377ff3f6c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:24:b3:bc:7b:1b:5d:46:2f:fe:71:83:91:
                    0a:9d:3e:65:f0:2e:68:29:25:92:7e:bd:af:3e:8f:
                    74:4e:f2:40:e3:ce:ad:d2:0d:8e:f3:64:3f:00:cf:
                    a4:a8:75:98:1d:34:69:be:44:62:80:a3:66:dc:0b:
                    18:e0:30:d4:fa:7f:55:c1:41:44:c4:eb:16:03:c3:
                    83:78:44:94:c8:7c:78:ad:92:11:4a:db:12:1c:13:
                    08:b6:68:ba:69:6e:8a:07:b9:05:73:22:01:4b:39:
                    c6:b3:33:41:a7:b5:3d:25:e4:85:e0:eb:df:f1:4d:
                    ee:64:55:64:5a:9a:a0:85:df:d4:1f:c0:17:6b:40:
                    5f:ed:f7:33:e1:5f:6a:68:2e:30:44:b7:1c:05:61:
                    0b:34:74:29:ac:a8:38:e3:eb:c9:d6:36:46:a0:b7:
                    09:b1:33:c7:07:4c:9a:cd:5a:41:a5:bd:b1:da:49:
                    6f:c9:3c:ca:11:85:8e:4c:39:18:09:3b:5e:75:75:
                    d4:e1:37:06:0e:26:15:d9:66:5a:b6:b2:5e:55:93:
                    61:e4:3d:95:67:0f:4a:2f:f9:5d:61:be:3f:10:b1:
                    55:ba:b2:22:e7:66:f1:99:ba:9b:80:74:25:22:a6:
                    17:9c:a0:ae:75:ff:5f:d2:e9:67:2d:b5:a8:2d:ca:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7F:09:C9:2C:17:E8:4C:43:93:C7:8D:83:92:5A:89:C8:0C:D3:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3115f302-ddee-392e-b789-b5a3af3f5ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.75.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:26:75:60:3f:0e:ce:59:5e:e8:6a:a8:d4:66:11:3b:80:
         c7:8c:b7:7a:90:1e:5f:11:54:cd:ff:99:e6:e1:a0:d8:30:4d:
         2d:03:d7:61:fd:70:2f:97:be:99:63:04:5d:57:41:62:fc:54:
         1b:01:6c:ee:8a:2d:30:03:1b:ba:e8:a5:e4:b8:67:52:bf:67:
         66:98:57:fe:a9:fc:fd:57:2a:f6:26:a3:88:4f:da:29:78:1d:
         5c:1d:72:6f:24:44:4c:50:20:36:41:fe:65:7a:b8:3c:c8:3c:
         59:0c:0f:66:76:4a:12:e6:2d:18:14:97:cd:86:0e:1e:b5:27:
         d3:f0:46:ec:a0:f4:24:03:50:46:0c:58:96:16:23:d6:ca:04:
         56:86:0c:41:57:a2:f6:89:c0:01:03:46:bc:cb:40:e5:fe:72:
         0c:0c:27:21:b5:d6:e0:54:62:2e:ed:9a:50:e6:ad:74:ad:ee:
         78:4f:6e:cb:5c:0f:30:aa:60:97:7d:5b:2b:d5:58:7c:c6:e9:
         fc:69:7b:b7:6d:d3:02:f6:8d:39:bf:77:66:9c:6b:a4:19:64:
         1a:44:12:45:6a:af:89:45:13:3b:7d:9d:1a:7d:c6:fe:f7:f9:
         b9:2f:c1:00:4b:24:31:98:79:e4:36:4c:d2:b7:46:20:62:dc:
         31:c9:f2:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niPkSg0I9JCjWTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTJlZjE4YjgtNzE0Mi00NWM4LTkwMGUtMjM3N2ZmM2Y2Yzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9sks7x7G11GL/5xg5EKnT5l8C5oKSWSfr2v
Po90TvJA486t0g2O82Q/AM+kqHWYHTRpvkRigKNm3AsY4DDU+n9VwUFExOsWA8OD
eESUyHx4rZIRStsSHBMItmi6aW6KB7kFcyIBSznGszNBp7U9JeSF4Ovf8U3uZFVk
Wpqghd/UH8AXa0Bf7fcz4V9qaC4wRLccBWELNHQprKg44+vJ1jZGoLcJsTPHB0ya
zVpBpb2x2klvyTzKEYWOTDkYCTtedXXU4TcGDiYV2WZatrJeVZNh5D2VZw9KL/ld
Yb4/ELFVurIi52bxmbqbgHQlIqYXnKCudf9f0ulnLbWoLcqLNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEd/CcksF+hMQ5PHjYOSWonIDNNZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzExNWYzMDItZGRlZS0z
OTJlLWI3ODktYjVhM2FmM2Y1Y2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYEsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI48JnVgPw7OWV7oaqjUZhE7gMeMt3qQHl8RVM3/mebhoNgwTS0D12H9
cC+XvpljBF1XQWL8VBsBbO6KLTADG7ropeS4Z1K/Z2aYV/6p/P1XKvYmo4hP2il4
HVwdcm8kRExQIDZB/mV6uDzIPFkMD2Z2ShLmLRgUl82GDh61J9PwRuyg9CQDUEYM
WJYWI9bKBFaGDEFXovaJwAEDRrzLQOX+cgwMJyG11uBUYi7tmlDmrXSt7nhPbstc
DzCqYJd9WyvVWHzG6fxpe7dt0wL2jTm/d2aca6QZZBpEEkVqr4lFEzt9nRp9xv73
+bkvwQBLJDGYeeQ2TNK3RiBi3DHJ8mg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:53:26 2026 by rpki-client