Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9c98b98-b828-33a8-a277-c8cd55c3e1d7.roa
File:                     a9c98b98-b828-33a8-a277-c8cd55c3e1d7.roa (raw, json)
Hash identifier:          87MeZ4E2xFwFPJa3DMdxBJDq6f1WMkdzsmKCjM/EqJM=
Subject key identifier:   0A:7F:AE:9B:4F:F9:A9:1B:85:9E:13:DA:2C:8E:A6:09:C1:07:C6:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB9C825FAB3C62C501F100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9c98b98-b828-33a8-a277-c8cd55c3e1d7.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        73.157.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:9c:82:5f:ab:3c:62:c5:01:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=048cbd13-f6fc-4b08-b855-525262a916f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:72:d2:32:3d:61:eb:b7:e9:4b:a9:7d:da:0e:
                    9b:92:24:31:ab:a2:da:f2:6d:83:82:03:a1:86:a8:
                    ed:e0:55:74:43:e2:69:ed:ec:7a:76:7b:90:9b:ec:
                    80:9b:1a:79:0b:28:44:09:ab:1a:1b:37:df:e3:e9:
                    73:54:be:fa:1c:9f:cb:84:cb:d7:ff:12:2c:74:0b:
                    91:10:54:20:f5:31:b3:7a:5c:39:36:84:0c:34:96:
                    ef:67:21:c5:be:fb:07:d7:a5:22:19:c6:eb:be:5c:
                    21:0c:30:41:c0:02:67:1a:d3:e4:3a:64:84:c6:3f:
                    3b:6a:13:c2:ef:16:51:cb:c9:08:d2:97:0a:63:54:
                    01:cc:65:bd:d9:80:35:d0:c4:8d:ec:6e:24:7e:72:
                    ec:8d:ee:d8:42:00:14:bc:30:ef:c9:02:e0:18:b8:
                    77:56:ea:08:7c:fe:93:89:bf:2e:ea:ff:67:09:3c:
                    68:0a:f2:c2:91:d1:72:58:47:3a:f8:0f:7a:14:60:
                    71:1e:4d:c5:d8:00:ca:98:05:12:67:ff:e3:c2:3f:
                    f4:29:20:98:ce:37:29:f1:f6:f1:9f:be:a0:fe:87:
                    1a:f6:1c:89:1c:77:f8:0a:a1:be:9b:c4:50:28:42:
                    ff:34:c8:42:60:e2:6f:a1:c0:81:fe:fa:e4:be:1a:
                    88:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7F:AE:9B:4F:F9:A9:1B:85:9E:13:DA:2C:8E:A6:09:C1:07:C6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9c98b98-b828-33a8-a277-c8cd55c3e1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.157.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:20:ba:34:60:18:9c:a3:d1:3e:c4:2b:db:64:b1:62:76:3b:
         b9:ca:d9:c8:b3:99:07:e9:a7:f8:bf:94:13:b3:c4:73:63:d5:
         05:bf:93:e5:f1:61:5e:21:ba:19:7c:ce:9c:e9:d7:2e:42:19:
         e7:b3:f0:97:4a:2b:3d:36:33:2a:2e:53:db:14:79:51:ec:b5:
         93:cd:e6:1e:e0:bb:cd:bb:44:0c:f6:40:e2:71:bb:3a:22:72:
         ff:c4:4e:9f:b7:b2:d0:de:de:2c:74:32:90:ba:ec:31:3e:0e:
         15:70:78:15:c6:e5:0f:11:de:99:40:59:a1:2d:fc:cc:c8:b7:
         20:c5:55:ce:02:4b:2c:ba:d4:16:98:be:0b:4b:83:cc:dd:e7:
         77:3e:64:ce:ff:a3:86:0f:6d:66:03:26:ee:cb:fb:ed:85:e4:
         ed:1e:af:6b:0e:19:36:ec:9c:a8:b6:4d:fe:1c:c2:88:dd:81:
         77:6f:f6:75:ab:2a:1e:d8:ab:bb:25:01:88:f3:53:98:71:19:
         c9:d3:9b:90:05:7d:98:a8:ca:96:0e:bb:38:b4:23:a4:05:79:
         10:4a:08:14:6c:3b:d4:7e:41:c2:94:af:76:e9:aa:bf:2f:d6:
         4e:f1:6c:11:25:7d:84:07:87:60:4b:7f:f1:4d:f1:fe:91:76:
         db:86:99:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu5yCX6s8YsUB8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MDQ4Y2JkMTMtZjZmYy00YjA4LWI4NTUtNTI1MjYyYTkxNmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnLSMj1h67fpS6l92g6bkiQxq6La8m2DggOh
hqjt4FV0Q+Jp7ex6dnuQm+yAmxp5CyhECasaGzff4+lzVL76HJ/LhMvX/xIsdAuR
EFQg9TGzelw5NoQMNJbvZyHFvvsH16UiGcbrvlwhDDBBwAJnGtPkOmSExj87ahPC
7xZRy8kI0pcKY1QBzGW92YA10MSN7G4kfnLsje7YQgAUvDDvyQLgGLh3VuoIfP6T
ib8u6v9nCTxoCvLCkdFyWEc6+A96FGBxHk3F2ADKmAUSZ//jwj/0KSCYzjcp8fbx
n76g/oca9hyJHHf4CqG+m8RQKEL/NMhCYOJvocCB/vrkvhqIFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAp/rptP+akbhZ4T2iyOpgnBB8b1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTljOThiOTgtYjgyOC0z
M2E4LWEyNzctYzhjZDU1YzNlMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ34MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0gujRgGJyj0T7EK9tksWJ2O7nK2cizmQfpp/i/lBOzxHNj1QW/k+Xx
YV4huhl8zpzp1y5CGeez8JdKKz02MyouU9sUeVHstZPN5h7gu827RAz2QOJxuzoi
cv/ETp+3stDe3ix0MpC67DE+DhVweBXG5Q8R3plAWaEt/MzItyDFVc4CSyy61BaY
vgtLg8zd53c+ZM7/o4YPbWYDJu7L++2F5O0er2sOGTbsnKi2Tf4cwojdgXdv9nWr
Kh7Yq7slAYjzU5hxGcnTm5AFfZioypYOuzi0I6QFeRBKCBRsO9R+QcKUr3bpqr8v
1k7xbBElfYQHh2BLf/FN8f6RdtuGmRY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:43 2026 by rpki-client