Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3309d233-34a4-396f-b82d-9b714546e0cc.roa
File:                     3309d233-34a4-396f-b82d-9b714546e0cc.roa (raw, json)
Hash identifier:          pIfsEPo3nPmhlOvZJQFXVKQ8q86i30PvaDY9jIBSNWI=
Subject key identifier:   F8:C6:81:F2:6C:A7:6A:91:51:2F:A0:73:00:7D:2A:FA:67:E7:41:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA6FFBED6CE6836A112D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3309d233-34a4-396f-b82d-9b714546e0cc.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        73.67.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:6f:fb:ed:6c:e6:83:6a:11:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=9a26fcbf-b266-425f-beac-350b89332081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7e:37:9b:9f:ac:b9:da:dc:e8:90:a1:83:81:
                    99:d4:d8:d6:10:af:e0:71:58:69:e0:c8:63:ed:e8:
                    48:87:6c:7b:58:07:24:b3:14:07:4d:ad:da:ee:f0:
                    21:72:54:17:ed:6f:01:79:f6:37:d3:86:fa:43:91:
                    6e:e3:b8:73:c1:29:dc:4e:d3:1a:8d:8e:6b:81:c4:
                    8a:7b:f5:f4:6a:ea:7f:af:29:15:49:63:bb:4b:ea:
                    b7:ba:c7:43:28:24:ed:25:c5:29:f1:4b:ea:96:08:
                    30:01:74:55:0b:b5:03:d0:d4:80:54:b8:d0:c5:d5:
                    3f:34:f5:10:73:1c:2c:19:c8:7f:aa:64:87:d5:7c:
                    5c:07:fd:6e:06:84:94:f5:a3:01:91:19:48:b6:7d:
                    2a:9e:e4:45:66:55:32:a6:c2:5c:fe:64:b9:d7:5a:
                    dd:91:44:8d:ca:7c:41:c3:d8:d5:e5:64:5f:81:6b:
                    09:be:c6:af:bf:79:3e:59:68:f8:55:1b:3b:c7:d5:
                    6e:b9:77:f0:15:bd:26:56:2c:1d:7f:ee:01:6c:66:
                    b2:d3:7a:4a:15:f4:80:fa:49:e8:29:88:a7:6f:5b:
                    d9:a5:f9:b1:ef:ba:3b:7c:42:0a:e0:3c:31:a0:27:
                    b0:32:70:eb:c5:bf:e2:27:e8:04:9b:9b:a1:6d:c2:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C6:81:F2:6C:A7:6A:91:51:2F:A0:73:00:7D:2A:FA:67:E7:41:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3309d233-34a4-396f-b82d-9b714546e0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.67.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:84:fe:17:28:c9:2a:69:7e:16:a2:8e:eb:8d:35:1f:a0:
         84:9f:f1:bc:52:4c:1a:f9:79:3a:87:47:ac:ab:8e:c5:32:b9:
         99:8c:74:a2:ee:d7:15:cd:7c:9c:1d:05:fd:46:14:e9:4b:77:
         1b:b3:bb:10:3e:da:1c:54:4f:ea:7d:13:80:b6:01:37:cf:5d:
         a0:bf:2e:89:78:9a:46:87:49:c1:4e:44:b6:28:47:83:3d:0b:
         7b:69:ea:6d:fc:e1:30:f2:72:26:06:f4:9b:2f:3b:24:30:b2:
         57:97:00:66:86:97:a6:12:54:6b:32:d2:d1:c4:d6:a1:83:dc:
         2d:4c:93:60:09:98:55:f4:cb:9b:10:8e:d4:81:5c:9d:e8:97:
         60:c9:8d:58:dc:cd:9c:8b:6c:e5:78:c9:c5:5f:e0:5b:b3:bd:
         75:4e:86:08:95:16:86:a8:ac:e6:0f:12:8f:4a:cf:70:51:48:
         81:30:96:34:b0:f2:2a:ad:77:6d:c0:b0:6b:6c:1c:34:70:34:
         14:73:d3:04:ed:3e:4f:2e:a4:5b:ae:22:90:55:15:f5:7f:5f:
         7a:46:54:72:0a:85:a7:4c:29:94:80:ca:d7:c0:4e:6f:2f:0e:
         21:df:99:04:b7:b1:43:06:2c:a1:b3:2c:6b:4e:ee:61:dd:be:
         37:27:19:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vum/77Wzmg2oRLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
OWEyNmZjYmYtYjI2Ni00MjVmLWJlYWMtMzUwYjg5MzMyMDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH43m5+sudrc6JChg4GZ1NjWEK/gcVhp4Mhj
7ehIh2x7WAcksxQHTa3a7vAhclQX7W8BefY304b6Q5Fu47hzwSncTtMajY5rgcSK
e/X0aup/rykVSWO7S+q3usdDKCTtJcUp8UvqlggwAXRVC7UD0NSAVLjQxdU/NPUQ
cxwsGch/qmSH1XxcB/1uBoSU9aMBkRlItn0qnuRFZlUypsJc/mS511rdkUSNynxB
w9jV5WRfgWsJvsavv3k+WWj4VRs7x9VuuXfwFb0mViwdf+4BbGay03pKFfSA+kno
KYinb1vZpfmx77o7fEIK4DwxoCewMnDrxb/iJ+gEm5uhbcJxbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjGgfJsp2qRUS+gcwB9Kvpn50HQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMwOWQyMzMtMzRhNC0z
OTZmLWI4MmQtOWI3MTQ1NDZlMGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUOyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJpdhP4XKMkqaX4Woo7rjTUfoISf8bxSTBr5eTqHR6yrjsUyuZmMdKLu
1xXNfJwdBf1GFOlLdxuzuxA+2hxUT+p9E4C2ATfPXaC/Lol4mkaHScFORLYoR4M9
C3tp6m384TDyciYG9JsvOyQwsleXAGaGl6YSVGsy0tHE1qGD3C1Mk2AJmFX0y5sQ
jtSBXJ3ol2DJjVjczZyLbOV4ycVf4FuzvXVOhgiVFoaorOYPEo9Kz3BRSIEwljSw
8iqtd23AsGtsHDRwNBRz0wTtPk8upFuuIpBVFfV/X3pGVHIKhadMKZSAytfATm8v
DiHfmQS3sUMGLKGzLGtO7mHdvjcnGUY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:27 2026 by rpki-client