Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f26c0cf-4378-36e1-aee3-81efd1406807.roa
File:                     8f26c0cf-4378-36e1-aee3-81efd1406807.roa (raw, json)
Hash identifier:          onMkkJ3ULRG9DGvgESvSgpc9o0bEltc1dQapjS9ssiM=
Subject key identifier:   24:B1:4F:3B:8F:BC:D3:A0:5F:66:B3:63:DD:D6:C5:A9:2D:1E:49:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA796F97E4C17203133409B20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f26c0cf-4378-36e1-aee3-81efd1406807.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33491
IP address blocks:        68.58.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:f9:7e:4c:17:20:31:33:40:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2260f2cb-113c-42cd-81e0-4b3e784398d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:1c:44:df:7f:d2:a3:e9:f0:24:58:79:66:
                    f2:11:fc:5e:7d:87:f5:7c:90:2e:6f:d7:4f:fb:22:
                    e9:6a:c6:8d:e9:ca:51:25:4f:13:77:21:ae:58:98:
                    54:8d:b9:2c:9a:da:79:37:78:ae:26:e1:4d:cd:4f:
                    e0:d3:49:fc:5a:a3:16:8e:67:fd:f1:bb:f8:f0:92:
                    20:26:7f:f3:60:89:6c:c4:e2:fb:4d:a1:70:3f:ee:
                    ef:ff:d1:2a:1b:73:c4:fb:4b:a6:fa:e5:2e:bf:d0:
                    45:71:00:45:8f:c3:bc:45:b8:0e:45:eb:db:8b:26:
                    b8:ef:8b:b6:76:3d:50:a9:19:e3:84:e5:34:66:2c:
                    18:18:ea:63:4e:1a:97:d4:da:12:ea:a8:bd:e7:53:
                    a6:66:c6:5b:ef:82:97:c3:82:ce:82:d0:bf:21:5a:
                    76:13:74:49:c1:c9:01:af:85:fe:64:27:d5:43:a6:
                    0d:84:88:da:ae:83:03:b8:e7:87:8b:80:e1:5c:00:
                    81:5f:6f:64:89:59:b7:75:ea:7f:b2:39:00:d8:26:
                    95:10:44:ac:39:83:1f:d2:57:e0:d5:8b:4c:ba:fb:
                    00:ec:a9:7b:f3:e0:a4:7e:2a:92:c1:a2:79:94:15:
                    bc:30:2f:d5:1c:5d:73:51:e3:f2:92:83:b6:83:17:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B1:4F:3B:8F:BC:D3:A0:5F:66:B3:63:DD:D6:C5:A9:2D:1E:49:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f26c0cf-4378-36e1-aee3-81efd1406807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:75:a1:a6:b0:d9:a1:83:39:0e:df:85:df:8e:42:ef:52:ee:
         36:71:c1:43:0f:c6:01:f5:6c:95:99:aa:91:3f:d2:0f:aa:a6:
         3a:29:48:be:58:a0:f4:ca:48:55:77:d9:7a:0d:49:b5:4c:64:
         72:d4:9c:2c:ff:56:3c:a2:61:35:dc:7e:f9:91:57:f9:2e:80:
         58:8b:6e:9f:aa:77:c5:2c:62:43:6b:2b:fe:7b:a6:7c:91:82:
         4f:fb:0b:8a:88:2d:e6:b0:d2:1c:47:51:f3:38:b9:75:c2:a5:
         d8:4c:69:65:37:b3:d6:3f:dc:47:4c:a7:7b:05:3b:8f:0a:f6:
         5c:1d:64:96:70:85:d5:aa:37:f2:77:37:d2:10:9b:1a:fb:ab:
         5d:6a:8d:dc:22:b7:b7:fa:29:4f:5d:49:b3:d2:04:4f:1a:6a:
         97:94:6c:13:77:b0:c7:44:06:7f:5b:ff:bb:6c:14:b1:f1:de:
         5b:6b:25:9a:ae:0d:fc:94:91:34:5c:c5:6a:d5:cd:02:1e:f8:
         cf:3b:72:0e:f8:6d:4d:a3:b0:bc:0d:b7:db:bf:59:08:91:da:
         59:a1:20:9f:5e:1b:f1:f6:a3:aa:a4:99:49:87:d4:76:79:26:
         f2:7f:16:ae:21:d0:23:68:a0:e2:7b:1d:7e:ee:59:35:9a:7a:
         df:10:b1:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlvl+TBcgMTNAmyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjI2MGYyY2ItMTEzYy00MmNkLTgxZTAtNGIzZTc4NDM5OGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu4cRN9/0qPp8CRYeWbyEfxefYf1fJAub9dP
+yLpasaN6cpRJU8TdyGuWJhUjbksmtp5N3iuJuFNzU/g00n8WqMWjmf98bv48JIg
Jn/zYIlsxOL7TaFwP+7v/9EqG3PE+0um+uUuv9BFcQBFj8O8RbgORevbiya474u2
dj1QqRnjhOU0ZiwYGOpjThqX1NoS6qi951OmZsZb74KXw4LOgtC/IVp2E3RJwckB
r4X+ZCfVQ6YNhIjaroMDuOeHi4DhXACBX29kiVm3dep/sjkA2CaVEESsOYMf0lfg
1YtMuvsA7Kl78+CkfiqSwaJ5lBW8MC/VHF1zUePykoO2gxeedQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSxTzuPvNOgX2azY93WxaktHknGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYyNmMwY2YtNDM3OC0z
NmUxLWFlZTMtODFlZmQxNDA2ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDoSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJ1oaaw2aGDOQ7fhd+OQu9S7jZxwUMPxgH1bJWZqpE/0g+qpjopSL5Y
oPTKSFV32XoNSbVMZHLUnCz/VjyiYTXcfvmRV/kugFiLbp+qd8UsYkNrK/57pnyR
gk/7C4qILeaw0hxHUfM4uXXCpdhMaWU3s9Y/3EdMp3sFO48K9lwdZJZwhdWqN/J3
N9IQmxr7q11qjdwit7f6KU9dSbPSBE8aapeUbBN3sMdEBn9b/7tsFLHx3ltrJZqu
DfyUkTRcxWrVzQIe+M87cg74bU2jsLwNt9u/WQiR2lmhIJ9eG/H2o6qkmUmH1HZ5
JvJ/Fq4h0CNooOJ7HX7uWTWaet8QsZk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:06 2026 by rpki-client