Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fffba3e-8754-383b-95c5-0915e78fe7d6.roa
File:                     7fffba3e-8754-383b-95c5-0915e78fe7d6.roa (raw, json)
Hash identifier:          xH2R0Q7mLKuyc4Z91I93B+Od7M8u1xJxVm1UcV9fkWc=
Subject key identifier:   12:9C:D8:4E:17:A4:DC:17:8C:1D:F8:ED:17:D4:49:AD:C3:1E:EE:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C45E83448AFE9F2D68FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fffba3e-8754-383b-95c5-0915e78fe7d6.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.247.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:45:e8:34:48:af:e9:f2:d6:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=189b499c-2b05-4a18-b053-490ce22c4c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:75:c1:93:47:d7:fb:74:10:ec:15:f9:a0:
                    4b:2f:93:10:19:94:49:64:f3:d8:9f:11:6d:fd:b7:
                    04:4c:69:41:44:9f:39:bc:6c:68:27:72:f3:3d:ae:
                    b1:1c:fc:86:f8:1c:c6:d4:75:20:1a:77:a2:bf:c7:
                    98:6a:18:2a:9c:ee:91:0f:d2:1e:f4:79:43:dd:d4:
                    19:c8:ca:b7:3e:c5:95:26:6c:77:2c:44:4f:3e:14:
                    57:3f:9a:55:56:bf:e5:e9:09:d8:73:29:48:3d:62:
                    fb:e2:06:67:46:1a:f7:94:1a:3a:59:5a:65:0d:68:
                    d6:d6:e0:d2:31:a1:14:5b:1e:6c:1b:ac:1b:f6:42:
                    a9:1e:76:64:31:e1:52:11:ae:2d:93:61:ad:05:fd:
                    aa:6e:16:0a:4b:87:1b:98:df:7d:40:a5:f2:3c:18:
                    5b:52:60:11:3c:55:b2:a1:55:c8:78:80:df:7f:3b:
                    83:b5:eb:5d:b5:34:72:e6:7f:a9:b9:77:22:19:44:
                    fd:24:60:d3:84:4a:00:80:1a:68:2c:c8:27:97:88:
                    84:d8:af:5c:7c:b9:fa:a0:1c:bd:b1:ce:79:49:43:
                    70:4b:fe:f3:c0:dc:ce:06:fc:13:87:43:2f:19:c4:
                    a9:88:ab:39:37:31:ec:5e:c2:86:b2:3d:c2:f0:68:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:D8:4E:17:A4:DC:17:8C:1D:F8:ED:17:D4:49:AD:C3:1E:EE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fffba3e-8754-383b-95c5-0915e78fe7d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.247.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:58:b3:91:ee:36:01:52:64:3f:10:b9:60:d8:6a:3a:c3:7c:
         b0:9c:d8:3e:5b:3c:7a:9b:ee:59:b2:75:9e:9e:01:c3:b4:65:
         93:73:42:56:ff:98:cf:23:11:f9:f0:7c:a2:03:68:53:ba:2e:
         8d:ed:f5:22:8b:8a:16:8b:7d:42:ec:33:a3:3f:ee:a0:61:c5:
         e3:f0:e8:08:eb:6c:f8:89:4d:5e:61:48:2a:50:bc:41:ba:04:
         3c:6f:d7:35:95:7d:e4:a4:64:df:c8:6e:9e:be:b8:69:5a:96:
         f1:08:b8:23:0e:be:a7:f5:ab:39:2f:69:fc:3e:7a:c7:f5:cc:
         66:a9:dd:bd:e2:a4:54:f6:dc:d1:ac:cd:62:14:d8:98:73:33:
         d5:6d:80:fd:14:17:b0:31:a6:cc:80:75:f8:dd:78:48:ba:ed:
         33:aa:8e:c7:42:7d:2e:24:2a:89:86:8d:97:f3:16:b7:67:d5:
         62:28:f2:75:7f:71:03:3a:53:f0:28:2e:80:bf:a2:fa:4d:6e:
         54:fa:83:e4:99:41:b1:6d:2f:3d:5e:1f:ed:ed:16:cc:37:b7:
         8e:bc:5c:6a:31:e3:a2:be:4e:38:7b:5e:ff:8f:ee:ac:de:5e:
         1e:ae:5c:d1:ec:8b:65:80:0d:33:69:31:71:97:83:55:b8:09:
         fa:72:ad:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXEXoNEiv6fLWj8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MTg5YjQ5OWMtMmIwNS00YTE4LWIwNTMtNDkwY2UyMmM0YzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstN1wZNH1/t0EOwV+aBLL5MQGZRJZPPYnxFt
/bcETGlBRJ85vGxoJ3LzPa6xHPyG+BzG1HUgGneiv8eYahgqnO6RD9Ie9HlD3dQZ
yMq3PsWVJmx3LERPPhRXP5pVVr/l6QnYcylIPWL74gZnRhr3lBo6WVplDWjW1uDS
MaEUWx5sG6wb9kKpHnZkMeFSEa4tk2GtBf2qbhYKS4cbmN99QKXyPBhbUmARPFWy
oVXIeIDffzuDtetdtTRy5n+puXciGUT9JGDThEoAgBpoLMgnl4iE2K9cfLn6oBy9
sc55SUNwS/7zwNzOBvwTh0MvGcSpiKs5NzHsXsKGsj3C8Gju9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBKc2E4XpNwXjB347RfUSa3DHu7ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2ZmZmJhM2UtODc1NC0z
ODNiLTk1YzUtMDkxNWU3OGZlN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfdSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlYs5HuNgFSZD8QuWDYajrDfLCc2D5bPHqb7lmydZ6eAcO0ZZNzQlb/
mM8jEfnwfKIDaFO6Lo3t9SKLihaLfULsM6M/7qBhxePw6AjrbPiJTV5hSCpQvEG6
BDxv1zWVfeSkZN/Ibp6+uGlalvEIuCMOvqf1qzkvafw+esf1zGap3b3ipFT23NGs
zWIU2JhzM9VtgP0UF7AxpsyAdfjdeEi67TOqjsdCfS4kKomGjZfzFrdn1WIo8nV/
cQM6U/AoLoC/ovpNblT6g+SZQbFtLz1eH+3tFsw3t468XGox46K+Tjh7Xv+P7qze
Xh6uXNHsi2WADTNpMXGXg1W4CfpyrZE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:41 2026 by rpki-client