Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dba9360-3686-37b3-9673-1433bad51c23.roa
File:                     8dba9360-3686-37b3-9673-1433bad51c23.roa (raw, json)
Hash identifier:          F5iJ96HLkjWdrQ5WBSBty4nLA/eGLCF6owAD8bEv/2s=
Subject key identifier:   D1:0C:A5:F6:86:31:ED:13:50:D5:91:34:A2:DC:64:76:0B:14:82:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78BAA62BCC92E1ECD966400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dba9360-3686-37b3-9673-1433bad51c23.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        67.187.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8b:aa:62:bc:c9:2e:1e:cd:96:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1079962e-001a-4a51-ba6f-e42687a09c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2c:27:cc:d7:76:ae:14:3f:f0:72:c0:28:3d:
                    c6:be:31:9b:05:8d:34:ea:33:90:49:22:66:bb:63:
                    94:dc:c4:9f:62:69:3d:7d:3f:14:1f:1d:d3:19:f0:
                    a2:1e:83:bc:e7:70:29:f0:64:4e:55:6c:b9:9d:dc:
                    f5:e4:aa:a1:98:a9:7a:99:0f:ab:00:2f:0c:f3:d2:
                    1b:7a:0f:7c:e8:43:f2:05:bf:93:5b:f2:02:d7:bd:
                    29:85:6f:b3:8f:95:ec:7f:ae:57:87:10:cc:de:07:
                    93:cd:83:98:e6:53:e2:aa:45:08:fb:12:17:28:01:
                    50:2b:cd:3c:2c:58:90:68:23:a7:51:ba:91:91:b9:
                    c2:16:36:c0:fb:75:4f:68:02:24:7b:44:ae:b1:04:
                    ba:88:90:43:3c:5e:8d:a6:ca:c2:45:b6:10:da:9e:
                    27:8e:a3:b4:ed:ba:ce:f0:9b:ba:80:54:c8:c0:c3:
                    91:21:fb:0f:09:0c:c1:fd:41:5b:8b:26:63:e2:67:
                    b8:ef:63:3a:01:31:f7:a6:5d:f4:a2:41:32:af:d7:
                    5f:52:e0:50:ab:9e:50:03:b5:57:84:59:00:79:0b:
                    dc:c5:38:fa:04:47:b1:e8:d5:45:a2:b4:7e:4c:e6:
                    05:ec:c4:98:1d:d9:99:9d:93:b2:3a:2e:1b:21:33:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0C:A5:F6:86:31:ED:13:50:D5:91:34:A2:DC:64:76:0B:14:82:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dba9360-3686-37b3-9673-1433bad51c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.187.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cc:d0:37:af:7a:2a:b1:ac:06:b6:c8:6d:19:44:63:f4:ff:
         c6:b5:ab:a0:7e:0c:d6:25:09:30:33:55:8e:67:e8:be:4c:ed:
         7f:5f:56:d9:53:a9:7e:42:89:83:68:a0:4a:08:86:14:0e:1f:
         48:73:6a:39:e7:ee:8e:8a:01:f0:24:ae:a2:6d:f4:ca:e5:e3:
         16:62:29:a4:a2:1d:19:ec:20:76:e2:f5:97:3d:46:3f:82:c2:
         c6:de:03:78:60:8e:3c:3c:6b:61:5f:27:37:ba:30:d8:c1:b5:
         58:18:cc:a5:12:12:3f:79:9b:c3:ba:93:2a:a3:8a:02:00:c2:
         b3:d7:8e:75:76:93:a1:6c:5d:46:f6:6e:92:1f:41:dc:61:ea:
         b6:fa:cc:9b:49:fd:fb:37:11:37:13:19:81:d3:2f:3d:4d:6d:
         27:c1:2d:cc:65:ef:44:50:9f:93:8c:c7:73:d4:8b:ce:f3:04:
         09:a2:e1:37:84:5e:4c:14:11:c4:25:6d:38:db:7f:94:13:d4:
         df:55:67:92:ba:44:f0:68:57:85:90:23:e2:e6:1d:92:16:7c:
         09:21:cf:7c:1d:31:95:de:78:71:36:88:d9:9c:b8:f9:7b:0d:
         1b:e0:97:2d:c3:07:ed:93:be:e2:08:fa:f2:6a:52:41:da:aa:
         ca:06:ff:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ni6pivMkuHs2WZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTA3OTk2MmUtMDAxYS00YTUxLWJhNmYtZTQyNjg3YTA5YzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSwnzNd2rhQ/8HLAKD3GvjGbBY006jOQSSJm
u2OU3MSfYmk9fT8UHx3TGfCiHoO853Ap8GROVWy5ndz15KqhmKl6mQ+rAC8M89Ib
eg986EPyBb+TW/IC170phW+zj5Xsf65XhxDM3geTzYOY5lPiqkUI+xIXKAFQK808
LFiQaCOnUbqRkbnCFjbA+3VPaAIke0SusQS6iJBDPF6NpsrCRbYQ2p4njqO07brO
8Ju6gFTIwMORIfsPCQzB/UFbiyZj4me472M6ATH3pl30okEyr9dfUuBQq55QA7VX
hFkAeQvcxTj6BEex6NVForR+TOYF7MSYHdmZnZOyOi4bITNegwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNEMpfaGMe0TUNWRNKLcZHYLFIKfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRiYTkzNjAtMzY4Ni0z
N2IzLTk2NzMtMTQzM2JhZDUxYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ7tmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXM0DeveiqxrAa2yG0ZRGP0/8a1q6B+DNYlCTAzVY5n6L5M7X9fVtlT
qX5CiYNooEoIhhQOH0hzajnn7o6KAfAkrqJt9Mrl4xZiKaSiHRnsIHbi9Zc9Rj+C
wsbeA3hgjjw8a2FfJze6MNjBtVgYzKUSEj95m8O6kyqjigIAwrPXjnV2k6FsXUb2
bpIfQdxh6rb6zJtJ/fs3ETcTGYHTLz1NbSfBLcxl70RQn5OMx3PUi87zBAmi4TeE
XkwUEcQlbTjbf5QT1N9VZ5K6RPBoV4WQI+LmHZIWfAkhz3wdMZXeeHE2iNmcuPl7
DRvgly3DB+2TvuII+vJqUkHaqsoG/w8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:59:28 2026 by rpki-client