Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8229564e-280a-337f-91bf-87b74a03b2c3.roa
File:                     8229564e-280a-337f-91bf-87b74a03b2c3.roa (raw, json)
Hash identifier:          15tkQLCvntQ7LXCgVLltPSZnzbklLQtjL2o7zPSoT58=
Subject key identifier:   A2:A0:B6:96:8A:9A:6A:A3:4A:FF:07:E4:83:C5:2A:A8:D3:5B:B3:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA568FF9725F9A86368F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8229564e-280a-337f-91bf-87b74a03b2c3.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        67.170.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:56:8f:f9:72:5f:9a:86:36:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=1fb6fbff-b724-44b5-bddf-ad4ebd7a008f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:1d:04:0b:ef:e9:35:db:0d:c4:4a:8b:04:
                    9e:0c:bc:d4:3b:c9:b6:bb:c2:46:1f:18:2d:0f:04:
                    f2:96:17:8a:30:2e:11:4b:b9:6d:02:e7:6e:89:c8:
                    63:67:dc:5c:92:27:1f:37:04:fb:dd:bb:cf:37:9e:
                    e7:e1:a9:80:39:ba:2e:3c:df:c9:30:5d:a3:89:0b:
                    b9:3f:81:2b:bb:ba:9f:69:0a:47:87:46:dd:54:0f:
                    f7:e4:62:46:8d:2b:92:90:92:f7:9b:cc:8f:42:e2:
                    13:12:9c:18:4f:d4:0a:03:48:db:5d:b3:9d:63:47:
                    45:90:0a:9a:74:10:b9:bc:cd:83:9f:55:b6:08:53:
                    5e:15:55:10:b1:cc:bb:a4:d8:e4:54:ac:aa:cd:51:
                    8d:7b:eb:ed:0d:a3:31:45:a5:fd:75:19:f4:5c:6f:
                    12:07:c2:c1:86:86:f8:a8:1d:d0:e8:29:84:48:74:
                    3d:6c:26:42:04:95:02:4d:3e:3c:20:01:fb:f8:f6:
                    82:db:75:92:7c:d5:3c:5e:24:96:63:92:d8:90:c4:
                    39:87:e2:4a:b6:82:74:c8:d2:be:ff:d9:9a:32:17:
                    b3:65:d6:43:78:f3:90:a4:f1:6c:40:ba:73:87:e2:
                    72:23:80:3e:b1:16:32:b9:fd:ac:c2:f0:cc:68:15:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A0:B6:96:8A:9A:6A:A3:4A:FF:07:E4:83:C5:2A:A8:D3:5B:B3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8229564e-280a-337f-91bf-87b74a03b2c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.170.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:4a:ad:3d:b9:f5:53:df:7f:bc:0f:ec:99:e2:1a:47:68:
         54:1f:a9:63:0b:71:5a:02:c7:47:3a:d2:93:68:56:03:6f:48:
         ca:42:ad:0f:8f:f4:ce:8f:43:6b:e9:9b:65:eb:63:6e:c2:6c:
         8f:94:11:6d:cf:36:09:0b:2f:c6:5e:52:c0:2f:98:15:b0:bb:
         4b:c2:75:62:3c:ca:da:76:59:0a:94:f3:05:f7:d8:48:53:71:
         2a:b8:26:52:ca:aa:13:9e:72:5d:98:98:94:26:97:93:3b:0a:
         ec:80:5a:ac:7c:e2:a2:65:4c:36:7f:61:fb:22:44:c5:92:1a:
         f0:d1:57:ee:4b:76:d8:79:f6:42:3c:10:36:15:ef:86:00:fc:
         f5:af:85:e7:80:4f:6d:79:bb:44:56:c3:bb:3e:3b:63:bc:91:
         1b:28:a1:95:00:06:fe:61:2a:49:f7:cf:b6:34:92:23:34:e5:
         d7:a0:ac:dc:89:07:7a:b5:7a:a6:24:03:35:0a:66:66:c6:32:
         c7:65:a9:99:b3:87:1e:57:cf:32:f8:7e:f8:5d:50:a5:56:64:
         9c:3b:d9:ac:bf:e2:dc:9a:82:c9:e1:88:92:31:04:39:0d:b1:
         49:b4:81:9e:0f:66:b9:8a:02:d1:dd:e3:a7:f6:f4:00:06:a8:
         4c:c0:c8:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VulaP+XJfmoY2j4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MWZiNmZiZmYtYjcyNC00NGI1LWJkZGYtYWQ0ZWJkN2EwMDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf8dBAvv6TXbDcRKiwSeDLzUO8m2u8JGHxgt
DwTylheKMC4RS7ltAuduichjZ9xckicfNwT73bvPN57n4amAObouPN/JMF2jiQu5
P4Eru7qfaQpHh0bdVA/35GJGjSuSkJL3m8yPQuITEpwYT9QKA0jbXbOdY0dFkAqa
dBC5vM2Dn1W2CFNeFVUQscy7pNjkVKyqzVGNe+vtDaMxRaX9dRn0XG8SB8LBhob4
qB3Q6CmESHQ9bCZCBJUCTT48IAH7+PaC23WSfNU8XiSWY5LYkMQ5h+JKtoJ0yNK+
/9maMhezZdZDePOQpPFsQLpzh+JyI4A+sRYyuf2swvDMaBX/sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKKgtpaKmmqjSv8H5IPFKqjTW7PWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODIyOTU2NGUtMjgwYS0z
MzdmLTkxYmYtODdiNzRhMDNiMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6q0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErQSq09ufVT33+8D+yZ4hpHaFQfqWMLcVoCx0c60pNoVgNvSMpCrQ+P
9M6PQ2vpm2XrY27CbI+UEW3PNgkLL8ZeUsAvmBWwu0vCdWI8ytp2WQqU8wX32EhT
cSq4JlLKqhOecl2YmJQml5M7CuyAWqx84qJlTDZ/YfsiRMWSGvDRV+5Ldth59kI8
EDYV74YA/PWvheeAT215u0RWw7s+O2O8kRsooZUABv5hKkn3z7Y0kiM05degrNyJ
B3q1eqYkAzUKZmbGMsdlqZmzhx5XzzL4fvhdUKVWZJw72ay/4tyagsnhiJIxBDkN
sUm0gZ4PZrmKAtHd46f29AAGqEzAyBQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:44 2026 by rpki-client