Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94dac688-bd11-30c7-b4dd-4c66cda4947c.roa
File:                     94dac688-bd11-30c7-b4dd-4c66cda4947c.roa (raw, json)
Hash identifier:          y2qakMqYAgMWLGQL2iMZdopeiqyLhpeGnxj2hy81mQM=
Subject key identifier:   34:A7:ED:1A:CC:DE:B1:A8:F9:17:87:3D:BF:71:2E:F9:EF:6C:48:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE85DBA1C18F0E78DBF7C720
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94dac688-bd11-30c7-b4dd-4c66cda4947c.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        69.180.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:db:a1:c1:8f:0e:78:db:f7:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=f635fbe9-ed38-4e28-a26c-320e2466cc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:e8:cf:ee:38:e3:05:4d:b9:f4:35:c6:42:
                    2f:9a:eb:bc:d4:44:6f:d0:46:8c:b9:cf:6e:aa:92:
                    d4:c8:9d:67:0b:09:fe:fb:ac:6b:8f:f7:f0:da:7d:
                    6b:df:27:a4:f1:9d:ca:03:14:9b:c2:6b:a4:66:38:
                    71:b7:89:4f:ff:2c:3b:2d:66:8c:94:37:3d:cd:9f:
                    72:a7:ed:09:3c:b6:9d:7e:66:fb:00:28:9a:00:ef:
                    c6:c8:c4:c3:4f:90:eb:3b:7a:f3:30:18:a4:06:ad:
                    32:5c:a7:21:2d:fe:c5:99:8c:b3:98:cc:d8:06:8e:
                    97:f3:e1:b0:5b:b3:41:15:60:fb:af:e7:44:6f:4d:
                    dc:6a:1b:31:c9:65:8b:0a:c6:84:3c:5e:69:b8:9d:
                    b1:7d:ea:62:66:88:58:3d:ee:85:0f:2b:e9:ff:61:
                    0a:d3:dc:45:8f:14:66:9f:3a:94:f1:d5:13:19:be:
                    35:66:45:92:21:76:9e:99:0f:c8:8f:9e:f7:c4:7f:
                    c4:fc:c2:8b:36:6e:ce:be:32:ec:d7:7d:24:b5:ca:
                    6c:5d:9f:dd:02:4e:40:93:38:31:4d:cc:59:e4:e3:
                    ec:2b:2c:f4:c4:dc:23:a8:6d:b6:4a:f4:a7:23:82:
                    2c:bf:13:2d:4b:95:ce:4e:65:29:f4:57:f8:36:65:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A7:ED:1A:CC:DE:B1:A8:F9:17:87:3D:BF:71:2E:F9:EF:6C:48:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94dac688-bd11-30c7-b4dd-4c66cda4947c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.180.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:a7:71:d1:0a:64:08:86:40:37:4d:85:f5:7f:cc:64:83:88:
         eb:7b:62:2f:88:ae:af:f8:ba:e1:14:45:ea:8a:d3:ad:b6:a1:
         73:e1:43:5b:ae:50:83:45:91:3e:91:27:d7:43:a7:36:b5:d7:
         85:76:b9:e6:19:f8:63:75:2b:e1:c6:cd:25:e5:1c:60:a5:91:
         20:1c:ab:2c:92:0f:7d:39:02:df:df:ce:3b:42:2a:ac:db:9f:
         e7:1c:00:71:d8:39:35:3c:68:3a:58:94:36:33:5f:01:23:fc:
         1b:2a:f1:d3:fc:66:92:e7:aa:b8:2d:a8:a0:9e:d0:6d:57:d7:
         35:f6:76:d4:a1:3b:16:f6:44:54:b3:ef:53:2c:5f:f5:d9:9e:
         fd:19:94:9c:51:67:b5:bc:0e:bf:f8:a7:9a:8e:a0:72:c5:27:
         f6:48:80:cb:b1:3f:9a:e3:fe:41:84:68:eb:d0:b8:9a:30:93:
         7c:31:10:34:df:d8:7d:b9:38:3f:f4:c4:f0:01:0a:45:b2:56:
         78:92:28:a5:79:31:f9:34:84:79:db:10:0e:10:17:fb:be:b7:
         e0:e7:92:54:5e:92:1e:2a:32:40:0a:fe:0e:96:4a:28:e6:2e:
         92:72:2b:5d:be:d3:f0:75:9a:62:b9:64:7e:0e:fe:76:e7:83:
         3e:33:ec:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehduhwY8OeNv3xyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
ZjYzNWZiZTktZWQzOC00ZTI4LWEyNmMtMzIwZTI0NjZjYzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDDoz+444wVNufQ1xkIvmuu81ERv0EaMuc9u
qpLUyJ1nCwn++6xrj/fw2n1r3yek8Z3KAxSbwmukZjhxt4lP/yw7LWaMlDc9zZ9y
p+0JPLadfmb7ACiaAO/GyMTDT5DrO3rzMBikBq0yXKchLf7FmYyzmMzYBo6X8+Gw
W7NBFWD7r+dEb03cahsxyWWLCsaEPF5puJ2xfepiZohYPe6FDyvp/2EK09xFjxRm
nzqU8dUTGb41ZkWSIXaemQ/Ij573xH/E/MKLNm7OvjLs130ktcpsXZ/dAk5Akzgx
TcxZ5OPsKyz0xNwjqG22SvSnI4IsvxMtS5XOTmUp9Ff4NmVIiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSn7RrM3rGo+ReHPb9xLvnvbEjUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTRkYWM2ODgtYmQxMS0z
MGM3LWI0ZGQtNGM2NmNkYTQ5NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRbTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALOncdEKZAiGQDdNhfV/zGSDiOt7Yi+Irq/4uuEUReqK0622oXPhQ1uu
UINFkT6RJ9dDpza114V2ueYZ+GN1K+HGzSXlHGClkSAcqyySD305At/fzjtCKqzb
n+ccAHHYOTU8aDpYlDYzXwEj/Bsq8dP8ZpLnqrgtqKCe0G1X1zX2dtShOxb2RFSz
71MsX/XZnv0ZlJxRZ7W8Dr/4p5qOoHLFJ/ZIgMuxP5rj/kGEaOvQuJowk3wxEDTf
2H25OD/0xPABCkWyVniSKKV5Mfk0hHnbEA4QF/u+t+DnklRekh4qMkAK/g6WSijm
LpJyK12+0/B1mmK5ZH4O/nbngz4z7LU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:04:07 2026 by rpki-client