Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32028d92-0e48-34cf-b804-e7f7db79f9c3.roa
File:                     32028d92-0e48-34cf-b804-e7f7db79f9c3.roa (raw, json)
Hash identifier:          2gg6Rr9T1eXNF3+4pwDQ3BGT/pi8lx82e/4lpWh1z/s=
Subject key identifier:   75:84:6A:74:BB:44:54:72:44:54:F5:4F:93:DA:76:99:64:26:B2:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D5F82D2891C5202813A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32028d92-0e48-34cf-b804-e7f7db79f9c3.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.226.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:5f:82:d2:89:1c:52:02:81:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=687fae87-fbb7-45df-9080-710e62eabb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:96:23:f6:5f:35:a8:f9:64:0e:ac:03:3e:
                    ba:66:ce:50:5a:5c:d2:b3:37:b3:72:9a:20:01:ab:
                    a3:42:db:58:d4:72:dc:4f:99:eb:65:15:96:24:36:
                    3d:66:41:a6:19:4a:85:b0:b4:4e:40:9e:f2:62:56:
                    d3:f4:64:a0:70:70:c9:6e:1a:ed:d4:48:41:a4:86:
                    11:99:81:27:3f:91:67:b3:50:67:00:0c:44:50:82:
                    4e:0e:33:c4:24:f0:21:68:54:87:93:ce:2f:f6:52:
                    9a:19:42:91:6d:24:75:4a:05:c3:27:3f:b9:6d:f1:
                    a4:de:93:54:51:f4:69:8f:5b:3b:aa:05:1f:93:51:
                    4e:82:c4:48:76:f6:36:a5:03:ae:00:cf:06:02:e7:
                    2d:b6:aa:49:91:bb:8a:ee:47:1d:18:f1:10:c8:65:
                    61:05:17:ed:5a:36:1a:7a:7b:8e:5d:17:11:c3:32:
                    f6:c5:97:eb:2e:59:14:ce:fc:0f:a5:a3:f5:31:b1:
                    58:86:d7:7d:1a:64:d8:5b:e2:fb:fd:67:b3:54:c7:
                    90:c5:e2:b5:d8:7b:e9:58:f7:44:1a:41:00:ed:59:
                    55:3d:77:52:07:14:f0:6b:a4:6f:39:c0:a9:5d:c8:
                    e7:bd:86:81:43:c4:7e:f6:f4:38:08:bb:bf:6c:64:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:84:6A:74:BB:44:54:72:44:54:F5:4F:93:DA:76:99:64:26:B2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32028d92-0e48-34cf-b804-e7f7db79f9c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.226.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:31:13:6e:20:33:68:50:77:3d:b8:61:69:e7:4f:27:10:ae:
         2d:f5:94:47:fd:c9:d0:82:26:8d:22:f3:b2:ce:ca:19:4d:50:
         d9:26:60:f1:2e:2b:8d:b4:5b:0f:03:08:05:40:1e:61:b5:64:
         9c:b0:58:7d:84:5a:03:8b:c1:4d:ca:7a:f7:3b:6c:f2:e3:06:
         41:42:91:b9:3d:63:e6:ee:c1:f6:08:cd:88:98:b5:de:c0:3f:
         8c:a8:f8:48:d1:be:e7:60:c8:d0:1a:b9:80:da:6c:38:a0:8f:
         4b:21:13:1f:11:d5:c4:e6:a8:df:3f:26:30:fb:25:af:ac:42:
         7a:4b:bf:94:e8:7d:f2:e5:a0:70:d6:a2:dc:16:54:72:44:a1:
         d4:17:3c:10:4e:ff:00:88:2e:2a:9e:fb:49:21:53:82:a7:56:
         ad:eb:13:d0:ab:7c:aa:41:0f:ea:c5:31:51:ba:8f:c7:a9:9c:
         a1:34:25:32:a6:00:54:3f:27:fc:41:a1:89:e3:64:a5:54:f9:
         59:b7:ea:51:e7:43:00:5b:8e:03:0b:19:f6:17:8e:90:13:a4:
         ed:d3:b5:83:8e:92:24:b9:32:1a:d0:02:02:36:97:32:2a:6d:
         db:29:5f:24:71:ed:eb:90:38:9b:ee:ed:6f:d1:b5:47:f1:2b:
         f7:72:e3:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnV+C0okcUgKBOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
Njg3ZmFlODctZmJiNy00NWRmLTkwODAtNzEwZTYyZWFiYjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9OWI/ZfNaj5ZA6sAz66Zs5QWlzSszezcpog
AaujQttY1HLcT5nrZRWWJDY9ZkGmGUqFsLROQJ7yYlbT9GSgcHDJbhrt1EhBpIYR
mYEnP5Fns1BnAAxEUIJODjPEJPAhaFSHk84v9lKaGUKRbSR1SgXDJz+5bfGk3pNU
UfRpj1s7qgUfk1FOgsRIdvY2pQOuAM8GAucttqpJkbuK7kcdGPEQyGVhBRftWjYa
enuOXRcRwzL2xZfrLlkUzvwPpaP1MbFYhtd9GmTYW+L7/WezVMeQxeK12HvpWPdE
GkEA7VlVPXdSBxTwa6RvOcCpXcjnvYaBQ8R+9vQ4CLu/bGSXCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHWEanS7RFRyRFT1T5PadplkJrKPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzIwMjhkOTItMGU0OC0z
NGNmLWI4MDQtZTdmN2RiNzlmOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeLUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJExE24gM2hQdz24YWnnTycQri31lEf9ydCCJo0i87LOyhlNUNkmYPEu
K420Ww8DCAVAHmG1ZJywWH2EWgOLwU3Kevc7bPLjBkFCkbk9Y+buwfYIzYiYtd7A
P4yo+EjRvudgyNAauYDabDigj0shEx8R1cTmqN8/JjD7Ja+sQnpLv5ToffLloHDW
otwWVHJEodQXPBBO/wCILiqe+0khU4KnVq3rE9CrfKpBD+rFMVG6j8epnKE0JTKm
AFQ/J/xBoYnjZKVU+Vm36lHnQwBbjgMLGfYXjpATpO3TtYOOkiS5MhrQAgI2lzIq
bdspXyRx7euQOJvu7W/RtUfxK/dy43w=
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:46:45 2026 by rpki-client