Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52807f38-cf6f-37f4-ab6d-82be6026a4e9.roa
File:                     52807f38-cf6f-37f4-ab6d-82be6026a4e9.roa (raw, json)
Hash identifier:          gKXlSAQTmTcOlKyDdwrx65+tD8Wk6VDqxRJKQdpnAYA=
Subject key identifier:   E5:D8:F9:CD:24:FC:6B:5E:33:0D:B8:B4:F6:5F:08:31:0B:6D:B7:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5AAD3B9247FC39D4373F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52807f38-cf6f-37f4-ab6d-82be6026a4e9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33287
IP address blocks:        68.82.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:ad:3b:92:47:fc:39:d4:37:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=3c08513b-602b-4eb8-a342-e6022e3ba7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:f1:8e:49:b0:08:c2:4c:72:9d:70:04:78:
                    ce:38:dc:d8:35:f1:2f:c9:da:aa:bf:28:b1:f3:32:
                    e8:66:19:3d:a4:61:fa:59:92:7f:40:1c:b3:1c:2e:
                    98:84:70:94:52:e0:79:fd:4e:be:1e:56:7d:bc:fc:
                    24:d7:1b:a1:ab:2b:bb:3e:29:44:06:b0:04:91:31:
                    e8:de:fc:88:89:a4:e4:a9:27:41:e7:c0:7b:db:92:
                    91:72:dd:0a:7e:13:fc:a3:51:05:f7:52:66:c7:10:
                    0e:47:17:32:5f:e5:fb:e3:16:5f:02:8d:26:e0:35:
                    96:50:5d:85:dc:28:21:3a:50:bb:51:15:a7:ed:c5:
                    17:8b:2e:60:eb:6a:7b:03:5d:17:49:a0:38:cf:5e:
                    d4:cf:0f:84:e7:31:7f:11:7c:65:2e:e4:2e:eb:67:
                    2b:d3:a3:d4:20:22:d1:ed:fd:06:53:a0:73:e4:fa:
                    d0:5f:2c:8f:74:bc:bf:e8:8a:a0:13:f0:be:69:24:
                    24:10:94:d2:d1:36:c9:19:84:2a:39:e4:b4:ff:22:
                    2c:80:19:07:15:1a:d6:86:ae:21:b2:92:a4:d5:30:
                    60:1c:91:49:f5:cc:bb:ca:f3:37:88:2d:d7:0a:f9:
                    7a:55:6f:3c:e3:0f:82:74:df:02:71:e9:3a:9c:52:
                    37:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D8:F9:CD:24:FC:6B:5E:33:0D:B8:B4:F6:5F:08:31:0B:6D:B7:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52807f38-cf6f-37f4-ab6d-82be6026a4e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.82.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:c4:18:ba:6b:39:0f:8f:15:b7:a0:02:e6:32:9c:10:07:
         19:1e:7c:2c:a0:58:9a:23:ca:bd:bc:e3:05:d8:37:ec:fe:5e:
         10:6d:6f:bc:9f:38:13:c1:2f:8e:20:cb:6c:ab:e0:30:98:53:
         e9:40:47:bd:9b:67:6b:a0:06:7b:94:3f:4c:98:f2:a3:c8:42:
         4f:e6:d2:a9:3c:0e:85:49:cb:15:d6:8a:93:ec:d7:6b:d8:9a:
         08:b7:2e:48:2e:36:41:03:9a:10:2a:7d:d6:69:e7:08:62:56:
         b3:8e:5e:de:9f:32:bc:42:a4:88:7b:2b:30:fa:b7:e9:df:be:
         27:1c:96:b0:89:ba:aa:fa:1a:4e:40:76:75:26:b9:dc:14:12:
         e7:1c:2f:6f:77:e9:59:10:82:20:ec:97:d4:7f:0f:1f:01:aa:
         6e:be:79:09:3a:8c:42:3d:4e:ef:34:b0:41:72:60:ba:ef:ea:
         f9:6e:34:59:de:43:4b:8c:37:8f:6b:2f:07:ca:27:28:74:e0:
         95:6b:d2:e3:c2:1b:94:91:40:56:6b:52:07:e0:b5:56:44:62:
         23:81:c8:73:a5:90:4e:32:15:2a:a4:a1:cf:f0:f6:56:7a:e8:
         77:27:ab:a4:eb:19:2e:3a:32:81:c1:a8:76:be:c7:13:86:38:
         12:37:6f:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWq07kkf8OdQ3PwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
M2MwODUxM2ItNjAyYi00ZWI4LWEzNDItZTYwMjJlM2JhN2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CXxjkmwCMJMcp1wBHjOONzYNfEvydqqvyix
8zLoZhk9pGH6WZJ/QByzHC6YhHCUUuB5/U6+HlZ9vPwk1xuhqyu7PilEBrAEkTHo
3vyIiaTkqSdB58B725KRct0KfhP8o1EF91JmxxAORxcyX+X74xZfAo0m4DWWUF2F
3CghOlC7URWn7cUXiy5g62p7A10XSaA4z17Uzw+E5zF/EXxlLuQu62cr06PUICLR
7f0GU6Bz5PrQXyyPdLy/6IqgE/C+aSQkEJTS0TbJGYQqOeS0/yIsgBkHFRrWhq4h
spKk1TBgHJFJ9cy7yvM3iC3XCvl6VW884w+CdN8Ccek6nFI3sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXY+c0k/GteMw24tPZfCDELbbf8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTI4MDdmMzgtY2Y2Zi0z
N2Y0LWFiNmQtODJiZTYwMjZhNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFIcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+CxBi6azkPjxW3oALmMpwQBxkefCygWJojyr284wXYN+z+XhBtb7yf
OBPBL44gy2yr4DCYU+lAR72bZ2ugBnuUP0yY8qPIQk/m0qk8DoVJyxXWipPs12vY
mgi3LkguNkEDmhAqfdZp5whiVrOOXt6fMrxCpIh7KzD6t+nfvicclrCJuqr6Gk5A
dnUmudwUEuccL2936VkQgiDsl9R/Dx8Bqm6+eQk6jEI9Tu80sEFyYLrv6vluNFne
Q0uMN49rLwfKJyh04JVr0uPCG5SRQFZrUgfgtVZEYiOByHOlkE4yFSqkoc/w9lZ6
6Hcnq6TrGS46MoHBqHa+xxOGOBI3bz0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:08 2026 by rpki-client