Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54839322-a750-35d7-92a2-99ca6ddb9a12.roa
File:                     54839322-a750-35d7-92a2-99ca6ddb9a12.roa (raw, json)
Hash identifier:          XVLJQJRpvzWokirP/2CZjqI6RA/OVPO0vcfe0yUkcsY=
Subject key identifier:   5F:24:56:7A:08:80:FC:60:9B:C5:31:0B:21:91:34:85:B3:DF:EC:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86E1225FE8D32E88CD7800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54839322-a750-35d7-92a2-99ca6ddb9a12.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        68.32.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:e1:22:5f:e8:d3:2e:88:cd:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=fc83d08c-73bf-42e2-aee0-b917fbcc67b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:d0:7f:f6:12:14:f5:b5:5d:00:89:21:27:
                    6e:b3:8c:21:2f:32:3d:7c:b2:a1:ed:c2:f2:e1:8a:
                    4e:2e:db:aa:08:07:6a:dd:55:dd:93:b2:cc:ed:23:
                    10:54:89:5a:f2:ce:04:30:ee:a0:6d:36:fe:d2:73:
                    81:ff:92:80:30:5d:c1:dd:49:82:7f:d8:67:c3:fe:
                    ef:18:2a:91:c1:fc:fa:95:1b:35:f3:7b:38:69:de:
                    06:b4:f8:03:d1:af:ee:a1:90:81:73:75:03:69:2c:
                    29:7b:3a:69:b2:61:97:ba:04:94:90:d9:cc:a4:de:
                    dc:92:82:f4:0d:95:40:b5:9d:67:92:7e:03:25:db:
                    20:4e:40:07:05:4f:0d:33:9c:05:2e:56:85:e0:40:
                    ce:ea:a3:55:77:3d:57:77:cf:28:99:d9:3d:79:ca:
                    db:64:82:74:2d:9e:a5:54:7c:b9:a8:32:32:9b:5d:
                    aa:9a:09:ed:4c:e9:c8:a6:7a:a7:29:fe:97:07:2b:
                    a5:ed:90:26:ee:fd:0f:19:1c:fe:26:d9:68:c3:ec:
                    4d:e6:43:24:81:7f:0b:de:98:e5:af:c8:55:06:a2:
                    b1:51:19:c5:de:c0:67:0c:16:2d:90:f2:fc:47:ea:
                    1d:8c:c6:b1:5e:18:98:01:2e:be:f7:b8:e8:77:ab:
                    05:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:56:7A:08:80:FC:60:9B:C5:31:0B:21:91:34:85:B3:DF:EC:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54839322-a750-35d7-92a2-99ca6ddb9a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:2a:d1:e5:ba:ee:1e:34:72:df:88:c2:46:f5:49:93:f3:4e:
         6b:77:35:9a:61:93:95:6a:c2:5c:65:19:dc:93:33:be:39:db:
         44:36:fc:e6:c4:6b:7f:32:d7:4a:fc:64:73:f7:56:ed:c7:4b:
         40:3f:70:d2:6d:7f:db:96:0b:32:fe:a3:e4:66:67:ee:c0:80:
         ac:bb:b8:95:5c:73:98:41:5e:25:6b:2a:ea:82:e0:b0:a8:8a:
         9e:9e:93:9c:86:e2:0d:3e:6c:d4:bb:6c:b8:12:3c:fa:d5:c9:
         71:41:36:6f:65:43:8a:df:d2:3f:ee:5b:79:52:af:8c:ce:b2:
         ad:fa:3e:f7:03:01:4b:63:4f:4d:65:09:c9:52:ea:14:ed:51:
         c3:68:0f:45:ab:60:2d:40:85:89:b9:e0:8d:c3:ac:cd:f1:f2:
         db:a1:b6:80:be:6e:83:85:59:6b:48:14:86:b0:65:99:e5:5e:
         e6:af:8c:44:0f:ae:6e:9c:e9:4e:97:e2:f3:e8:e7:05:09:5b:
         74:76:9e:e4:1a:56:46:98:58:3b:bc:62:0e:8e:69:96:2d:5c:
         7d:6c:d4:d3:d4:b3:7f:be:f0:6f:52:cb:37:ef:fe:71:b7:9a:
         a8:a0:9a:94:3c:44:b7:3b:cf:df:e7:b1:c1:55:35:ea:7a:7e:
         13:90:0b:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehuEiX+jTLojNeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
ZmM4M2QwOGMtNzNiZi00MmUyLWFlZTAtYjkxN2ZiY2M2N2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgnQf/YSFPW1XQCJISdus4whLzI9fLKh7cLy
4YpOLtuqCAdq3VXdk7LM7SMQVIla8s4EMO6gbTb+0nOB/5KAMF3B3UmCf9hnw/7v
GCqRwfz6lRs183s4ad4GtPgD0a/uoZCBc3UDaSwpezppsmGXugSUkNnMpN7ckoL0
DZVAtZ1nkn4DJdsgTkAHBU8NM5wFLlaF4EDO6qNVdz1Xd88omdk9ecrbZIJ0LZ6l
VHy5qDIym12qmgntTOnIpnqnKf6XByul7ZAm7v0PGRz+Jtlow+xN5kMkgX8L3pjl
r8hVBqKxURnF3sBnDBYtkPL8R+odjMaxXhiYAS6+97jod6sF6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8kVnoIgPxgm8UxCyGRNIWz3+xLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQ4MzkzMjItYTc1MC0z
NWQ3LTkyYTItOTljYTZkZGI5YTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCBmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0q0eW67h40ct+Iwkb1SZPzTmt3NZphk5VqwlxlGdyTM74520Q2/ObE
a38y10r8ZHP3Vu3HS0A/cNJtf9uWCzL+o+RmZ+7AgKy7uJVcc5hBXiVrKuqC4LCo
ip6ek5yG4g0+bNS7bLgSPPrVyXFBNm9lQ4rf0j/uW3lSr4zOsq36PvcDAUtjT01l
CclS6hTtUcNoD0WrYC1AhYm54I3DrM3x8tuhtoC+boOFWWtIFIawZZnlXuavjEQP
rm6c6U6X4vPo5wUJW3R2nuQaVkaYWDu8Yg6OaZYtXH1s1NPUs3++8G9Syzfv/nG3
mqigmpQ8RLc7z9/nscFVNep6fhOQC9o=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:52:24 2026 by rpki-client