Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/482507ba-0b46-3b7e-81b1-758d6bbc4579.roa
File:                     482507ba-0b46-3b7e-81b1-758d6bbc4579.roa (raw, json)
Hash identifier:          DbWkm/hkRsonVOqrMwgdGZzbMSplbR0SJgEnXGXa97Q=
Subject key identifier:   8F:5F:CF:3A:98:CD:78:DB:A1:21:2A:D9:03:15:98:E5:F6:B0:31:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA788F245D5C1C7993BECAB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/482507ba-0b46-3b7e-81b1-758d6bbc4579.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        73.121.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:f2:45:d5:c1:c7:99:3b:ec:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=29d9a24a-10c0-4406-b493-162af72ac17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:22:9a:89:c9:7b:f2:e0:dd:e6:61:29:38:
                    68:e2:83:7f:10:5f:0b:e5:d1:16:84:95:02:e8:1c:
                    e0:b5:0b:47:59:00:2f:cb:02:3d:08:86:0e:c3:10:
                    43:15:a9:03:29:d7:52:ca:55:bc:79:71:ac:cd:75:
                    d8:0a:2c:a6:f4:93:a8:6e:30:99:d8:e2:ce:03:39:
                    22:66:05:8a:58:bc:da:6a:73:2b:8f:ff:bc:2b:5e:
                    28:3f:a4:da:56:24:3a:45:35:79:3b:03:f5:92:2f:
                    61:bd:61:b5:52:b2:2d:e0:00:22:d9:6e:0c:22:f6:
                    d6:f1:bd:c1:93:6b:43:c8:1b:86:a6:8d:39:0e:36:
                    3a:60:a7:fb:30:0e:68:3f:a1:ab:0c:6f:21:74:0f:
                    cb:95:02:a3:f9:18:f8:0a:77:85:d0:1e:c9:ee:8e:
                    7d:0c:17:05:c1:72:8d:50:8d:2f:2c:e2:6c:c5:44:
                    09:35:72:62:7d:f3:6e:ae:f3:00:f9:24:41:6e:4d:
                    fc:72:82:81:f6:bc:d5:4e:23:2a:db:ee:5d:9c:1a:
                    e2:0f:bd:03:19:a7:b7:38:a2:48:2e:4b:2f:2e:08:
                    e0:d1:92:58:59:3e:83:9a:8b:a8:f4:78:31:fc:95:
                    73:cd:cc:8a:9f:d8:6f:07:9e:99:ef:a6:f0:16:ea:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5F:CF:3A:98:CD:78:DB:A1:21:2A:D9:03:15:98:E5:F6:B0:31:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/482507ba-0b46-3b7e-81b1-758d6bbc4579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.121.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:36:39:e3:7d:3f:5b:e6:87:3a:d8:21:ff:bb:54:a1:52:36:
         1b:aa:23:cf:46:8c:81:48:24:d3:59:43:8f:4f:52:87:a8:09:
         dd:9d:af:5c:de:74:2e:b8:b4:07:76:c8:ae:24:84:8d:a6:c5:
         27:2f:15:12:43:ea:9d:fa:b0:61:5f:bc:61:39:96:bb:c0:60:
         d9:78:b1:37:b7:9d:0c:30:c6:9e:c9:8d:35:79:9e:b5:e8:bb:
         35:a3:00:d9:f1:5e:b8:71:94:4f:47:87:e1:3d:b4:88:6d:59:
         60:96:2b:d4:cf:b0:06:81:65:f8:67:50:05:82:73:45:6a:9a:
         e5:7a:73:58:b2:68:06:41:55:11:92:43:e2:72:f6:0e:71:15:
         d5:b4:a8:ee:fa:d3:9a:79:25:7c:44:f4:2e:43:9d:8c:43:14:
         2b:18:d9:eb:cd:7e:72:55:a1:89:67:b2:0a:56:3c:04:55:9d:
         50:ed:88:33:0b:86:7b:14:0d:da:f2:5d:00:ea:2e:2f:c0:98:
         ff:72:26:84:86:af:07:be:cc:6c:21:c8:c5:ad:95:e8:6f:65:
         43:2c:a9:f1:ad:c3:00:a2:f4:ad:9f:b8:bf:96:e9:09:c8:4d:
         df:b9:42:3f:b4:e5:e8:7a:be:21:e4:77:98:07:77:3a:bc:82:
         2d:af:7e:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niPJF1cHHmTvsq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjlkOWEyNGEtMTBjMC00NDA2LWI0OTMtMTYyYWY3MmFjMTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApooimonJe/Lg3eZhKTho4oN/EF8L5dEWhJUC
6BzgtQtHWQAvywI9CIYOwxBDFakDKddSylW8eXGszXXYCiym9JOobjCZ2OLOAzki
ZgWKWLzaanMrj/+8K14oP6TaViQ6RTV5OwP1ki9hvWG1UrIt4AAi2W4MIvbW8b3B
k2tDyBuGpo05DjY6YKf7MA5oP6GrDG8hdA/LlQKj+Rj4CneF0B7J7o59DBcFwXKN
UI0vLOJsxUQJNXJiffNurvMA+SRBbk38coKB9rzVTiMq2+5dnBriD70DGae3OKJI
LksvLgjg0ZJYWT6Dmouo9Hgx/JVzzcyKn9hvB56Z76bwFupLHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9fzzqYzXjboSEq2QMVmOX2sDFvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDgyNTA3YmEtMGI0Ni0z
YjdlLTgxYjEtNzU4ZDZiYmM0NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANg2OeN9P1vmhzrYIf+7VKFSNhuqI89GjIFIJNNZQ49PUoeoCd2dr1ze
dC64tAd2yK4khI2mxScvFRJD6p36sGFfvGE5lrvAYNl4sTe3nQwwxp7JjTV5nrXo
uzWjANnxXrhxlE9Hh+E9tIhtWWCWK9TPsAaBZfhnUAWCc0VqmuV6c1iyaAZBVRGS
Q+Jy9g5xFdW0qO7605p5JXxE9C5DnYxDFCsY2evNfnJVoYlnsgpWPARVnVDtiDML
hnsUDdryXQDqLi/AmP9yJoSGrwe+zGwhyMWtlehvZUMsqfGtwwCi9K2fuL+W6QnI
Td+5Qj+05eh6viHkd5gHdzq8gi2vfr0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:23:11 2026 by rpki-client