Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a83a185f-81f7-3604-a213-2589c84c84cd.roa
File:                     a83a185f-81f7-3604-a213-2589c84c84cd.roa (raw, json)
Hash identifier:          nR0KbWpqsyNhvYdqxJt8ZT+xP540j8a+rsFFH0cDlzM=
Subject key identifier:   13:CF:42:46:DA:00:53:05:BF:63:D2:A0:D7:7D:06:35:60:07:6F:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC4E35DB4FE73B0E5B8600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a83a185f-81f7-3604-a213-2589c84c84cd.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        68.56.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:4e:35:db:4f:e7:3b:0e:5b:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=5c681ebb-ed3c-4f26-8cc6-9480cdcd8a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:ca:4c:ba:27:b0:67:5f:c1:26:84:6c:28:
                    5d:d2:30:de:12:3a:56:d1:c1:56:04:9e:cf:c5:ba:
                    86:73:39:c9:58:71:06:21:29:45:fc:42:5d:33:4f:
                    93:80:ab:24:38:3a:1f:ee:6e:3f:23:85:06:59:d9:
                    47:6c:0c:88:40:7a:3e:38:87:b1:1e:48:ce:f2:64:
                    76:40:ca:cc:5a:0d:c7:10:0a:b1:44:21:2d:70:5d:
                    06:fb:56:c0:eb:1d:fe:09:27:24:1e:aa:ab:99:7a:
                    c8:0e:85:10:fb:f2:6b:86:77:d2:e6:7b:b7:93:8b:
                    5c:6f:9d:32:15:6c:14:76:a4:0e:f8:b9:ab:b4:e0:
                    c4:de:ba:2d:9b:36:60:ce:c3:8d:b7:43:30:5b:c2:
                    f7:cc:50:f4:98:6b:18:dd:62:d9:07:a9:30:87:21:
                    1a:82:39:7c:9c:bf:44:3f:aa:c8:02:41:fc:83:33:
                    6d:8b:1b:2f:09:32:e8:75:1a:a2:d4:fd:fe:b7:dd:
                    24:e2:96:8a:fe:80:3d:25:a5:82:f0:b8:41:f1:b9:
                    f7:c1:39:20:bd:08:53:dc:23:ff:95:96:4f:6b:3d:
                    15:26:39:26:59:24:3e:ea:bd:45:53:88:80:0f:55:
                    23:e2:32:4a:b8:b4:ee:7b:25:75:e9:1d:f0:51:46:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:42:46:DA:00:53:05:BF:63:D2:A0:D7:7D:06:35:60:07:6F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a83a185f-81f7-3604-a213-2589c84c84cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.56.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:67:27:15:93:14:58:ba:f7:05:02:94:1f:59:ec:ce:41:
         ae:a9:6d:3e:e5:46:7c:81:17:7a:9e:12:7b:1f:b8:9d:54:5b:
         05:0b:ca:78:67:17:f3:c2:cf:52:a2:f7:7f:fe:b5:2b:9f:b7:
         02:c8:43:02:cc:e0:76:e3:a0:96:71:e9:87:74:43:7a:36:9e:
         f6:09:00:34:8f:d1:cd:14:95:ed:c6:4d:e3:c2:7b:92:5b:43:
         02:7d:46:98:5e:b2:4c:ed:f1:d8:9d:9e:14:2a:70:31:7e:ba:
         4e:b5:cb:e1:75:f5:d7:c8:7d:7b:5e:7c:09:ed:ad:bb:b5:46:
         0a:2c:16:8d:2a:60:51:e5:a2:06:ab:81:2c:5b:bf:22:da:bd:
         38:b1:51:77:8b:13:67:5b:d5:96:df:26:09:6f:67:f8:8a:c4:
         76:7e:15:ea:73:55:9d:03:0e:92:34:f4:e3:dd:88:d0:e4:14:
         7b:3f:0f:b3:3a:2a:7d:c1:cd:96:f0:28:6a:4e:ea:6e:e4:50:
         ab:27:c0:d5:98:26:8a:9c:07:f1:cf:91:66:d3:8f:f7:9f:30:
         27:dd:cf:e1:34:9b:d2:75:9f:92:b1:b4:e5:99:45:ad:04:26:
         b5:bd:8a:11:96:0d:54:d7:21:20:88:18:4e:87:d8:3b:28:73:
         ac:02:4f:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvE4120/nOw5bhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
NWM2ODFlYmItZWQzYy00ZjI2LThjYzYtOTQ4MGNkY2Q4YTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2fKTLonsGdfwSaEbChd0jDeEjpW0cFWBJ7P
xbqGcznJWHEGISlF/EJdM0+TgKskODof7m4/I4UGWdlHbAyIQHo+OIexHkjO8mR2
QMrMWg3HEAqxRCEtcF0G+1bA6x3+CSckHqqrmXrIDoUQ+/JrhnfS5nu3k4tcb50y
FWwUdqQO+LmrtODE3rotmzZgzsONt0MwW8L3zFD0mGsY3WLZB6kwhyEagjl8nL9E
P6rIAkH8gzNtixsvCTLodRqi1P3+t90k4paK/oA9JaWC8LhB8bn3wTkgvQhT3CP/
lZZPaz0VJjkmWSQ+6r1FU4iAD1Uj4jJKuLTueyV16R3wUUYFlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPPQkbaAFMFv2PSoNd9BjVgB29tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTgzYTE4NWYtODFmNy0z
NjA0LWEyMTMtMjU4OWM4NGM4NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDiWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKH5ZycVkxRYuvcFApQfWezOQa6pbT7lRnyBF3qeEnsfuJ1UWwULynhn
F/PCz1Ki93/+tSuftwLIQwLM4HbjoJZx6Yd0Q3o2nvYJADSP0c0Ule3GTePCe5Jb
QwJ9Rpheskzt8didnhQqcDF+uk61y+F19dfIfXtefAntrbu1RgosFo0qYFHlogar
gSxbvyLavTixUXeLE2db1ZbfJglvZ/iKxHZ+FepzVZ0DDpI09OPdiNDkFHs/D7M6
Kn3BzZbwKGpO6m7kUKsnwNWYJoqcB/HPkWbTj/efMCfdz+E0m9J1n5KxtOWZRa0E
JrW9ihGWDVTXISCIGE6H2Dsoc6wCT5s=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:10 2026 by rpki-client