Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7968ca34-68f4-30d7-8bc3-bcddecf4c039.roa
File:                     7968ca34-68f4-30d7-8bc3-bcddecf4c039.roa (raw, json)
Hash identifier:          xHPSfSEVwGDeLOZJZFGXqi7yEGUGfzudw1sKl3934aM=
Subject key identifier:   18:95:BC:4B:E5:3A:24:7E:61:18:76:F2:1C:98:32:B9:C5:9B:17:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BADEC617D3E4AF8E33D640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7968ca34-68f4-30d7-8bc3-bcddecf4c039.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.68.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:de:c6:17:d3:e4:af:8e:33:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=b8e7d505-9285-4da5-a089-75fd3a70eb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:28:6a:86:12:ad:1f:1a:53:dd:09:3f:bf:e5:
                    3e:ad:0a:0c:4a:9f:2e:70:b5:da:af:d3:81:44:02:
                    87:35:f7:45:5a:c0:d2:55:22:69:94:05:62:00:6b:
                    21:25:32:f5:fe:c4:bd:b1:1d:0a:b4:b7:14:99:fd:
                    7d:63:16:15:f5:b9:a2:eb:6a:49:c3:b8:15:36:0d:
                    e0:22:2e:7b:a6:67:95:f0:5e:39:d1:7c:52:81:7c:
                    ef:5b:12:9e:a7:d2:b4:c5:d9:af:83:58:2c:b1:b0:
                    fd:82:e7:6d:bf:f8:d7:86:b8:13:50:29:5d:a9:e7:
                    92:80:4e:af:78:c5:26:d1:2a:bb:a1:c5:d1:03:32:
                    83:3c:ff:2d:a5:02:c0:f6:b3:19:fd:cb:89:0e:4b:
                    ca:ea:27:af:76:35:97:c4:ca:a9:63:3d:c6:7e:0d:
                    fb:df:28:ef:da:7c:7f:b5:79:28:0d:9e:80:26:1b:
                    56:76:6e:39:7a:eb:33:10:e1:61:bd:e9:49:77:a4:
                    32:80:c7:f2:fe:af:bc:45:b2:47:d7:62:8d:c7:f9:
                    15:5f:bb:2b:f9:f2:b4:93:7c:fa:0d:32:79:76:df:
                    06:b8:a6:2a:c1:00:cc:c1:51:7a:aa:3a:76:81:56:
                    f6:19:49:41:b2:91:b0:f5:b3:93:bb:37:2e:6f:31:
                    36:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:95:BC:4B:E5:3A:24:7E:61:18:76:F2:1C:98:32:B9:C5:9B:17:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7968ca34-68f4-30d7-8bc3-bcddecf4c039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:2f:23:7e:9a:fa:d3:73:15:8a:5d:d0:ea:f0:ac:19:76:
         79:0e:50:45:0d:7f:c8:f5:1d:de:02:fd:5a:fa:5a:6a:77:0a:
         4c:99:95:10:97:e2:76:57:f1:4d:0a:d3:b0:87:48:a2:15:1b:
         88:2b:fb:c1:cb:1b:29:97:2b:cc:1f:62:96:ae:09:e4:a8:04:
         72:75:a2:56:7f:c3:1f:f4:06:fd:b9:45:6d:e9:e9:d8:e0:83:
         49:b6:b2:0e:ec:c3:f0:2a:cf:23:1c:fb:89:e0:0d:f0:43:6b:
         03:67:95:86:02:82:71:f4:1d:68:d1:84:ef:eb:e8:fb:76:4d:
         9a:0b:65:42:dc:ee:d5:d6:7a:53:47:12:17:e5:f5:42:26:b4:
         84:e4:9f:73:10:22:ac:c1:eb:87:13:56:ba:99:5b:d0:61:29:
         e6:fb:15:e7:89:18:d4:52:18:7d:4d:a6:ce:e3:af:1d:e3:fc:
         9d:8b:ad:16:3f:f7:80:5c:70:6e:8b:09:7e:9c:18:71:ec:66:
         67:5e:be:5a:41:47:06:03:ba:fa:b9:15:6a:d6:91:ba:bc:b3:
         15:91:72:38:7b:06:0c:88:d0:a5:75:bb:7f:69:5a:4b:ce:44:
         9a:37:27:5d:bf:f5:41:20:e1:b5:1f:ab:0e:38:7f:02:97:65:
         c2:86:d8:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vut7GF9Pkr44z1kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
YjhlN2Q1MDUtOTI4NS00ZGE1LWEwODktNzVmZDNhNzBlYjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgihqhhKtHxpT3Qk/v+U+rQoMSp8ucLXar9OB
RAKHNfdFWsDSVSJplAViAGshJTL1/sS9sR0KtLcUmf19YxYV9bmi62pJw7gVNg3g
Ii57pmeV8F450XxSgXzvWxKep9K0xdmvg1gssbD9gudtv/jXhrgTUCldqeeSgE6v
eMUm0Sq7ocXRAzKDPP8tpQLA9rMZ/cuJDkvK6ievdjWXxMqpYz3Gfg373yjv2nx/
tXkoDZ6AJhtWdm45euszEOFhvelJd6QygMfy/q+8RbJH12KNx/kVX7sr+fK0k3z6
DTJ5dt8GuKYqwQDMwVF6qjp2gVb2GUlBspGw9bOTuzcubzE2BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiVvEvlOiR+YRh28hyYMrnFmxfoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzk2OGNhMzQtNjhmNC0z
MGQ3LThiYzMtYmNkZGVjZjRjMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUSQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABC0LyN+mvrTcxWKXdDq8KwZdnkOUEUNf8j1Hd4C/Vr6Wmp3CkyZlRCX
4nZX8U0K07CHSKIVG4gr+8HLGymXK8wfYpauCeSoBHJ1olZ/wx/0Bv25RW3p6djg
g0m2sg7sw/AqzyMc+4ngDfBDawNnlYYCgnH0HWjRhO/r6Pt2TZoLZULc7tXWelNH
Ehfl9UImtITkn3MQIqzB64cTVrqZW9BhKeb7FeeJGNRSGH1Nps7jrx3j/J2LrRY/
94BccG6LCX6cGHHsZmdevlpBRwYDuvq5FWrWkbq8sxWRcjh7BgyI0KV1u39pWkvO
RJo3J12/9UEg4bUfqw44fwKXZcKG2CI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:35 2026 by rpki-client