Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72b7674b-66eb-34be-ad37-a21756e118c2.roa
File:                     72b7674b-66eb-34be-ad37-a21756e118c2.roa (raw, json)
Hash identifier:          BZYXQhW+I/FDJ33VGLr+jxfk//6qL6XwDSsDPWh0BRE=
Subject key identifier:   40:04:56:51:CC:03:EC:1B:2C:FF:5F:27:EA:78:0F:AC:79:C5:88:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A79C7D17EBA16446D7DD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72b7674b-66eb-34be-ad37-a21756e118c2.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        174.49.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:9c:7d:17:eb:a1:64:46:d7:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=3d87b395-699f-412a-9452-92303bda6dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:df:1c:7b:04:03:2b:c1:ea:73:b7:d6:d9:
                    fa:b8:9c:83:9f:52:a0:c3:66:8a:df:78:18:e9:a5:
                    23:27:ed:c9:f2:70:9b:b1:46:c3:5b:69:a6:d2:ec:
                    9f:bf:9b:6a:24:2b:16:b2:e1:48:bd:40:73:86:b3:
                    94:d3:d2:eb:ac:0e:76:a1:57:ee:2e:85:26:b6:e8:
                    ab:f8:61:8a:72:b3:f2:21:11:16:64:40:40:a6:ac:
                    c8:76:6f:72:d8:ad:2c:7d:bd:b6:c6:fa:da:95:0d:
                    83:e9:a0:d5:fe:b9:00:63:bb:23:a8:34:7e:8c:54:
                    33:b6:6d:0b:50:da:42:41:c5:de:11:43:3f:7e:33:
                    b8:bf:6f:bd:3f:c3:3d:b1:50:cd:54:33:70:b1:07:
                    e0:1a:07:c5:63:b8:4f:cf:f0:cd:28:8c:75:62:f8:
                    c1:0b:f9:2a:70:c1:e6:df:de:1e:b0:79:95:6b:a4:
                    70:d4:ef:48:40:3a:2c:92:71:75:9d:d8:41:9c:e8:
                    e4:ee:fa:33:c2:0a:ea:6e:d9:1c:24:6a:50:eb:1f:
                    e5:ea:86:50:eb:71:76:6d:90:1f:76:f8:c5:18:27:
                    9c:e0:38:4f:e3:91:a1:99:af:46:c4:8b:f0:2b:3d:
                    fa:0c:e7:1b:ea:e6:7b:3d:13:13:93:1a:db:47:c2:
                    fb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:04:56:51:CC:03:EC:1B:2C:FF:5F:27:EA:78:0F:AC:79:C5:88:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72b7674b-66eb-34be-ad37-a21756e118c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.49.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:cc:12:fb:a0:c7:63:5c:eb:9f:5a:e9:a6:fd:28:99:57:16:
         d0:50:cb:c1:57:c8:b9:f2:d1:43:0e:16:8f:23:17:e3:0d:0e:
         0a:2f:40:93:e8:8e:2d:61:78:1d:91:61:17:9b:62:e7:27:2e:
         b6:54:c6:86:20:ee:e3:8f:6f:d2:48:23:6e:63:67:74:a6:36:
         cf:e6:f6:d8:79:4c:8b:ca:c3:bf:a7:ca:d0:14:71:e0:b6:b2:
         2c:61:e8:62:3e:46:05:a3:b2:e0:ad:b0:dd:f6:9e:21:ac:46:
         c4:f0:13:3a:28:a8:10:38:0a:1d:bf:aa:9c:0b:50:19:6a:64:
         f9:95:f7:cb:2b:dd:db:1a:21:1d:21:ab:cd:d8:91:04:3f:ec:
         71:17:44:ae:d3:31:87:73:8c:2f:f0:d5:e1:00:25:8f:4d:e7:
         44:0a:fc:6f:98:12:fb:91:38:70:d8:22:d3:1a:99:57:0e:f3:
         a4:40:ce:cb:00:67:8d:d6:f4:6e:a3:e0:af:ae:17:f4:e8:0d:
         16:d4:c4:a6:0a:35:0b:f0:87:43:8d:6c:4c:b9:43:6b:3e:be:
         cd:f1:c3:a0:2a:ab:86:60:90:72:10:ab:1c:30:08:b1:76:58:
         1c:59:79:b3:17:7e:8b:a9:37:c7:42:6e:3d:e1:31:74:77:00:
         3e:f6:f6:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp5x9F+uhZEbX3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
M2Q4N2IzOTUtNjk5Zi00MTJhLTk0NTItOTIzMDNiZGE2ZGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG/fHHsEAyvB6nO31tn6uJyDn1Kgw2aK33gY
6aUjJ+3J8nCbsUbDW2mm0uyfv5tqJCsWsuFIvUBzhrOU09LrrA52oVfuLoUmtuir
+GGKcrPyIREWZEBApqzIdm9y2K0sfb22xvralQ2D6aDV/rkAY7sjqDR+jFQztm0L
UNpCQcXeEUM/fjO4v2+9P8M9sVDNVDNwsQfgGgfFY7hPz/DNKIx1YvjBC/kqcMHm
394esHmVa6Rw1O9IQDosknF1ndhBnOjk7vozwgrqbtkcJGpQ6x/l6oZQ63F2bZAf
dvjFGCec4DhP45Ghma9GxIvwKz36DOcb6uZ7PRMTkxrbR8L7mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAEVlHMA+wbLP9fJ+p4D6x5xYivMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzJiNzY3NGItNjZlYi0z
NGJlLWFkMzctYTIxNzU2ZTExOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArjFjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvMEvugx2Nc659a6ab9KJlXFtBQy8FXyLny0UMOFo8jF+MNDgovQJPo
ji1heB2RYRebYucnLrZUxoYg7uOPb9JII25jZ3SmNs/m9th5TIvKw7+nytAUceC2
sixh6GI+RgWjsuCtsN32niGsRsTwEzooqBA4Ch2/qpwLUBlqZPmV98sr3dsaIR0h
q83YkQQ/7HEXRK7TMYdzjC/w1eEAJY9N50QK/G+YEvuROHDYItMamVcO86RAzssA
Z43W9G6j4K+uF/ToDRbUxKYKNQvwh0ONbEy5Q2s+vs3xw6Aqq4ZgkHIQqxwwCLF2
WBxZebMXfoupN8dCbj3hMXR3AD729t8=
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:37:36 2026 by rpki-client