Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d941ee0-9f27-314d-849a-e513c9f5f75a.roa
File:                     9d941ee0-9f27-314d-849a-e513c9f5f75a.roa (raw, json)
Hash identifier:          JJC3JcyR+hyQJMNfPdctfyyxUXgfNpKnx2V8Arox3sA=
Subject key identifier:   1B:BD:37:8C:62:08:87:2E:20:02:09:2D:5F:C8:2E:F3:78:A1:B5:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5AD711D7692C95946CE510
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d941ee0-9f27-314d-849a-e513c9f5f75a.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33287
IP address blocks:        71.225.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:d7:11:d7:69:2c:95:94:6c:e5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=e73d75fe-3985-48af-8d3a-4f628c6a853f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:d5:09:55:3d:18:34:ff:0e:b7:39:ce:0e:
                    56:b5:ae:a3:42:30:10:72:a3:14:1a:59:2c:e2:93:
                    bf:06:ad:bd:71:c8:9e:63:e7:41:9c:02:c8:98:89:
                    6e:1f:63:a3:4d:20:8b:3a:00:9b:9d:71:f7:e1:be:
                    d2:49:1d:fe:b3:53:01:9f:69:0a:bf:21:4b:34:f6:
                    f0:bc:ca:d9:7f:69:09:01:90:5d:65:d1:7f:ad:a3:
                    66:89:11:de:cc:03:0c:f8:af:59:32:b8:df:13:99:
                    c4:70:a1:ca:51:04:23:8c:41:46:15:1a:c0:d4:80:
                    cc:c0:b2:e3:59:fb:50:a0:c7:df:e7:98:a7:5c:3d:
                    3f:a3:57:a1:a4:33:7a:51:90:0f:e9:9c:3b:04:f0:
                    c0:37:2b:2e:90:f4:ad:9d:d9:1d:4c:e3:26:bf:de:
                    7c:cc:88:0d:8e:b9:fd:5e:84:e2:4f:d7:7e:87:bd:
                    fc:47:3d:71:1c:d4:58:0c:f1:24:5f:65:67:53:da:
                    bd:24:f4:ab:5d:d8:03:d3:a6:52:70:5b:b8:4c:2c:
                    57:57:93:c0:9a:b0:4c:17:5f:c3:17:14:be:c1:0a:
                    8c:6b:86:d7:ec:90:96:75:4c:68:b6:84:f2:05:a7:
                    d5:a0:56:28:9a:82:84:3e:d1:81:90:10:b5:33:dd:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BD:37:8C:62:08:87:2E:20:02:09:2D:5F:C8:2E:F3:78:A1:B5:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d941ee0-9f27-314d-849a-e513c9f5f75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5e:52:07:b9:ab:ff:63:4e:d8:54:4a:8e:64:3b:b5:03:7d:
         56:3c:6b:9b:92:bf:58:8f:4d:da:af:5c:5b:2e:0a:dd:c0:09:
         de:7d:58:bf:9d:e9:c9:95:94:e6:02:2f:22:ba:bd:69:ff:02:
         7d:e1:a7:59:12:94:78:56:fe:1c:03:86:b5:29:1c:87:98:6a:
         51:ad:73:f7:c3:4e:de:36:f3:d3:79:0c:c5:b9:1b:61:b4:07:
         76:84:cb:a6:e3:ec:53:fc:78:64:a6:11:c1:6c:aa:7f:48:20:
         9f:82:41:47:1c:5c:90:d5:bb:1c:86:8d:42:3a:c4:cc:65:29:
         a7:c6:68:41:42:87:6c:61:3d:81:3d:ef:ba:7a:d4:36:ec:31:
         45:8f:90:bd:8c:8a:ad:8a:60:6e:6c:48:2f:8c:fc:da:80:c7:
         2a:7c:cc:13:d9:4e:b2:be:ef:fd:c5:68:b1:80:d4:07:bd:93:
         56:17:a0:e2:2d:bc:24:63:97:1e:05:3b:49:05:45:71:f1:c9:
         c2:0f:19:2e:8e:90:92:4a:e4:c6:9f:8b:78:6a:a1:ff:ae:d9:
         03:51:5b:7b:85:98:59:51:76:19:1f:6f:73:3b:1b:d2:9e:24:
         c2:b2:b7:77:91:ae:35:50:97:e9:7f:f7:8d:ba:02:46:76:1d:
         8d:f1:f0:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWtcR12kslZRs5RAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTczZDc1ZmUtMzk4NS00OGFmLThkM2EtNGY2MjhjNmE4NTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitjVCVU9GDT/Drc5zg5Wta6jQjAQcqMUGlks
4pO/Bq29ccieY+dBnALImIluH2OjTSCLOgCbnXH34b7SSR3+s1MBn2kKvyFLNPbw
vMrZf2kJAZBdZdF/raNmiRHezAMM+K9ZMrjfE5nEcKHKUQQjjEFGFRrA1IDMwLLj
WftQoMff55inXD0/o1ehpDN6UZAP6Zw7BPDANysukPStndkdTOMmv958zIgNjrn9
XoTiT9d+h738Rz1xHNRYDPEkX2VnU9q9JPSrXdgD06ZScFu4TCxXV5PAmrBMF1/D
FxS+wQqMa4bX7JCWdUxotoTyBafVoFYomoKEPtGBkBC1M90K8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBu9N4xiCIcuIAIJLV/ILvN4obVLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQ5NDFlZTAtOWYyNy0z
MTRkLTg0OWEtZTUxM2M5ZjVmNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+HIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBeUge5q/9jTthUSo5kO7UDfVY8a5uSv1iPTdqvXFsuCt3ACd59WL+d
6cmVlOYCLyK6vWn/An3hp1kSlHhW/hwDhrUpHIeYalGtc/fDTt4289N5DMW5G2G0
B3aEy6bj7FP8eGSmEcFsqn9IIJ+CQUccXJDVuxyGjUI6xMxlKafGaEFCh2xhPYE9
77p61DbsMUWPkL2Miq2KYG5sSC+M/NqAxyp8zBPZTrK+7/3FaLGA1Ae9k1YXoOIt
vCRjlx4FO0kFRXHxycIPGS6OkJJK5Mafi3hqof+u2QNRW3uFmFlRdhkfb3M7G9Ke
JMKyt3eRrjVQl+l/9426AkZ2HY3x8BQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:38 2026 by rpki-client