Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/527436f5-a529-3763-92b3-3ac7c4c4bf21.roa
File:                     527436f5-a529-3763-92b3-3ac7c4c4bf21.roa (raw, json)
Hash identifier:          46+o0EkEVY2LWVR6BhPeHY/5fG4/dg6F+qwbdpGLf/g=
Subject key identifier:   DD:A9:93:56:D1:85:8C:1E:8F:F5:BB:B7:E5:7D:57:CE:8C:67:DD:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE583CB94E922627ED0C0000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/527436f5-a529-3763-92b3-3ac7c4c4bf21.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.168.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:3c:b9:4e:92:26:27:ed:0c:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=4e3ee92f-ad12-4a4b-8909-eb546bd17db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:72:a3:2c:3c:dd:5b:83:da:f9:ec:3d:81:
                    c6:2d:39:32:d8:b6:10:69:f6:15:28:a8:e8:24:3f:
                    c2:9f:60:59:88:51:b3:87:d1:b9:ed:21:a5:35:0d:
                    2f:e0:9b:65:dd:a3:dd:fd:6c:50:dc:6f:63:fc:6f:
                    c3:96:08:32:74:7b:de:0b:bb:89:ea:79:21:e8:14:
                    59:ca:d5:7e:d5:8f:1b:cf:3d:5b:f9:2b:1a:ac:0c:
                    cf:90:fe:f9:4e:f7:39:f4:ab:90:10:5b:80:91:da:
                    68:c3:66:a3:87:04:95:98:79:4f:72:af:43:74:b8:
                    81:db:90:b8:a0:bb:c2:89:cc:75:bd:c0:23:b9:de:
                    e9:14:e4:4e:b8:ab:58:10:41:86:fd:09:d5:81:e1:
                    50:49:4a:e0:44:58:b4:2c:02:d8:6f:f6:6f:15:d6:
                    3c:9b:95:be:45:08:d2:cf:40:c7:be:18:ff:c7:77:
                    89:a8:45:d1:dd:13:f9:3b:15:96:66:c0:2e:68:4a:
                    82:da:7b:06:60:6d:7a:58:b9:ae:61:ef:59:62:6b:
                    e1:6d:5c:50:36:d6:22:cf:a3:c6:d8:3b:2a:81:56:
                    3e:2c:e4:15:1d:e4:d9:fc:10:f8:7c:9d:67:ab:76:
                    d5:73:33:83:e2:ec:cf:08:f7:9a:b9:f9:e6:3c:0e:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A9:93:56:D1:85:8C:1E:8F:F5:BB:B7:E5:7D:57:CE:8C:67:DD:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/527436f5-a529-3763-92b3-3ac7c4c4bf21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.168.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7f:51:89:c5:52:c9:44:77:fc:19:22:3f:86:b8:39:f8:e8:
         ec:e4:63:f8:2f:7f:de:ae:4c:40:b0:3e:1f:6c:f5:58:7f:6a:
         32:58:81:a1:7a:bd:28:98:19:b4:e8:ad:8c:75:fc:08:74:f0:
         f4:53:c9:8e:f6:19:ef:0b:17:99:14:d2:6d:60:c2:c7:57:bd:
         3d:7d:27:29:98:d6:c6:f6:cb:c2:75:26:20:87:3b:85:6f:37:
         63:ea:e0:cd:7a:35:eb:18:83:8d:eb:a6:46:15:0c:51:62:e2:
         c2:4e:8f:f4:5f:fa:11:d3:36:1b:82:c6:18:96:60:ad:86:da:
         2b:53:3f:ec:9a:a7:9d:6c:06:c5:73:68:3a:31:f2:82:f6:29:
         f2:ad:02:3b:d1:f0:e9:9c:8b:4c:52:d3:a1:5d:a0:9b:e4:d0:
         73:bf:a3:50:e1:c3:84:0d:4f:d4:df:e6:29:ed:f7:29:a4:31:
         84:54:8f:4c:99:bd:0f:d7:fd:26:c7:02:7a:11:73:a7:9a:91:
         40:11:01:21:16:72:e2:cb:83:a2:d1:3c:7e:ec:49:c7:f4:e1:
         cd:b1:ba:97:48:50:d8:6d:0d:5d:10:3b:f0:b7:b9:97:68:dd:
         fa:27:76:64:58:e5:f3:45:43:fd:ce:46:0a:67:3a:d6:39:82:
         64:18:7d:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWDy5TpImJ+0MAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NGUzZWU5MmYtYWQxMi00YTRiLTg5MDktZWI1NDZiZDE3ZGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTdyoyw83VuD2vnsPYHGLTky2LYQafYVKKjo
JD/Cn2BZiFGzh9G57SGlNQ0v4Jtl3aPd/WxQ3G9j/G/DlggydHveC7uJ6nkh6BRZ
ytV+1Y8bzz1b+SsarAzPkP75Tvc59KuQEFuAkdpow2ajhwSVmHlPcq9DdLiB25C4
oLvCicx1vcAjud7pFOROuKtYEEGG/QnVgeFQSUrgRFi0LALYb/ZvFdY8m5W+RQjS
z0DHvhj/x3eJqEXR3RP5OxWWZsAuaEqC2nsGYG16WLmuYe9ZYmvhbVxQNtYiz6PG
2DsqgVY+LOQVHeTZ/BD4fJ1nq3bVczOD4uzPCPeaufnmPA4bCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2pk1bRhYwej/W7t+V9V86MZ915MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTI3NDM2ZjUtYTUyOS0z
NzYzLTkyYjMtM2FjN2M0YzRiZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaiEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADB/UYnFUslEd/wZIj+GuDn46OzkY/gvf96uTECwPh9s9Vh/ajJYgaF6
vSiYGbTorYx1/Ah08PRTyY72Ge8LF5kU0m1gwsdXvT19JymY1sb2y8J1JiCHO4Vv
N2Pq4M16NesYg43rpkYVDFFi4sJOj/Rf+hHTNhuCxhiWYK2G2itTP+yap51sBsVz
aDox8oL2KfKtAjvR8Omci0xS06FdoJvk0HO/o1Dhw4QNT9Tf5int9ymkMYRUj0yZ
vQ/X/SbHAnoRc6eakUARASEWcuLLg6LRPH7sScf04c2xupdIUNhtDV0QO/C3uZdo
3fondmRY5fNFQ/3ORgpnOtY5gmQYfd8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:45 2026 by rpki-client