Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6720b90a-2b3c-31f4-bd3b-5c29efa44556.roa
File:                     6720b90a-2b3c-31f4-bd3b-5c29efa44556.roa (raw, json)
Hash identifier:          zREC+Vxf9P1Vm/A9mwOzE0kOay9buI+vbvDIVz9SLKs=
Subject key identifier:   04:D3:11:10:92:C1:AF:A2:7E:D1:C9:72:0D:54:C1:36:E9:95:3D:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58E7990C8B52FE10360700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6720b90a-2b3c-31f4-bd3b-5c29efa44556.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        73.231.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:e7:99:0c:8b:52:fe:10:36:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=3da54ff5-07dd-4868-8be4-8b87b6e071e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:78:05:d7:e8:51:31:eb:7a:9a:0b:7e:5c:
                    ae:84:aa:94:9f:7b:4b:f6:b6:f1:45:24:5f:f3:43:
                    23:46:78:d0:97:44:0e:46:a2:b1:d5:37:55:d3:a4:
                    b0:44:7a:1b:78:d9:d4:5d:46:9e:7a:4b:98:a7:3c:
                    16:9a:fb:3e:d8:64:99:29:b1:51:85:38:db:d4:df:
                    f3:36:32:dc:29:51:b1:dd:31:27:74:bc:c4:39:ef:
                    af:4c:9b:04:fb:8d:9a:5e:b4:fd:8e:b2:03:b0:90:
                    31:06:fa:32:ef:af:22:2b:08:b6:df:2f:9c:7a:8c:
                    96:7a:7b:3c:1e:43:b7:43:43:96:2e:0a:63:f2:3c:
                    dd:a8:33:15:67:9d:e2:6d:c3:75:52:07:8b:27:f0:
                    92:64:eb:ab:b9:f2:84:06:8d:7c:f6:86:2c:74:24:
                    20:cd:ac:db:fc:6f:89:b6:ca:78:e2:08:cc:bb:87:
                    2b:f8:e4:21:47:a1:0b:85:0c:06:12:78:0b:8c:e2:
                    96:87:93:ee:1d:b4:dc:e2:b0:4b:2e:12:40:2f:27:
                    d3:f7:d7:10:91:12:1b:0d:75:be:ef:94:b4:1c:8d:
                    2f:57:c8:c8:ef:4f:0a:a5:28:ee:73:de:37:bc:64:
                    44:98:4f:0b:ce:0d:af:9d:30:6a:01:bc:a4:aa:28:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:11:10:92:C1:AF:A2:7E:D1:C9:72:0D:54:C1:36:E9:95:3D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6720b90a-2b3c-31f4-bd3b-5c29efa44556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.231.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:26:09:bc:e6:b7:08:52:78:28:9c:d6:c2:72:10:3b:6f:79:
         11:9e:b7:6d:bd:37:5b:33:26:12:89:95:36:50:0d:ad:a2:fc:
         00:69:f5:32:78:52:b4:25:20:f3:ff:68:44:88:2b:52:50:b3:
         c4:c4:52:35:a4:60:f7:e5:38:9e:ae:e8:a5:95:d8:4b:a7:28:
         ea:18:73:fa:8a:a3:f4:e6:ef:fa:92:2f:e2:da:18:ad:48:68:
         67:f7:ef:71:68:8e:f2:f7:d7:f9:bb:9f:d9:7e:62:bf:09:8f:
         a0:c9:b9:a1:56:a8:88:ec:e0:b9:29:89:3e:00:b9:83:45:52:
         4a:5b:1a:fc:ec:b0:e2:49:6c:9e:3a:6d:bb:38:3b:e3:89:82:
         0d:36:df:36:a1:43:cc:b2:3b:85:26:0f:54:ab:38:67:ca:ed:
         5c:ce:42:85:f0:3d:d1:39:36:6e:82:ed:8b:6b:a6:d6:98:36:
         3a:af:bc:97:a2:97:10:90:51:08:19:74:72:14:bc:7d:7e:c2:
         2b:11:03:c2:dd:49:dd:29:d3:85:3e:b9:49:3a:10:1a:96:2d:
         96:f5:ad:d7:cc:d6:0d:8c:f3:58:32:2f:45:49:6b:b8:19:7e:
         94:d4:90:02:72:bd:ad:1d:a7:55:96:0a:6c:db:c1:7b:d2:7e:
         f7:03:aa:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWOeZDItS/hA2BwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
M2RhNTRmZjUtMDdkZC00ODY4LThiZTQtOGI4N2I2ZTA3MWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD54BdfoUTHrepoLflyuhKqUn3tL9rbxRSRf
80MjRnjQl0QORqKx1TdV06SwRHobeNnUXUaeekuYpzwWmvs+2GSZKbFRhTjb1N/z
NjLcKVGx3TEndLzEOe+vTJsE+42aXrT9jrIDsJAxBvoy768iKwi23y+ceoyWens8
HkO3Q0OWLgpj8jzdqDMVZ53ibcN1UgeLJ/CSZOurufKEBo189oYsdCQgzazb/G+J
tsp44gjMu4cr+OQhR6ELhQwGEngLjOKWh5PuHbTc4rBLLhJALyfT99cQkRIbDXW+
75S0HI0vV8jI708KpSjuc943vGREmE8Lzg2vnTBqAbykqihzRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATTERCSwa+iftHJcg1UwTbplT0fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjcyMGI5MGEtMmIzYy0z
MWY0LWJkM2ItNWMyOWVmYTQ0NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSedaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANgmCbzmtwhSeCic1sJyEDtveRGet229N1szJhKJlTZQDa2i/ABp9TJ4
UrQlIPP/aESIK1JQs8TEUjWkYPflOJ6u6KWV2EunKOoYc/qKo/Tm7/qSL+LaGK1I
aGf373FojvL31/m7n9l+Yr8Jj6DJuaFWqIjs4LkpiT4AuYNFUkpbGvzssOJJbJ46
bbs4O+OJgg023zahQ8yyO4UmD1SrOGfK7VzOQoXwPdE5Nm6C7YtrptaYNjqvvJei
lxCQUQgZdHIUvH1+wisRA8LdSd0p04U+uUk6EBqWLZb1rdfM1g2M81gyL0VJa7gZ
fpTUkAJyva0dp1WWCmzbwXvSfvcDqhc=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:47:42 2026 by rpki-client