Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac254d8d-76d5-3f47-b6b0-3d797877c5a8.roa
File:                     ac254d8d-76d5-3f47-b6b0-3d797877c5a8.roa (raw, json)
Hash identifier:          noE1is1b6a+flI5JQzjsnbd6KrXgsCSYwY27I+7xaQg=
Subject key identifier:   7C:F8:4A:E3:DF:3C:27:61:47:18:54:02:36:0A:FC:40:0F:A6:C7:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E3D25493E4D7BBE092C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac254d8d-76d5-3f47-b6b0-3d797877c5a8.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        73.158.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:3d:25:49:3e:4d:7b:be:09:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=19a9f541-a482-42db-98fd-461b329845ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:8a:81:6d:f5:20:79:8a:cc:dd:8e:98:65:
                    bc:b5:51:f5:6e:31:84:f6:50:6c:64:c9:7e:e3:05:
                    b4:83:32:f1:30:6a:1a:08:5e:c5:51:96:08:b7:0e:
                    f9:9b:d0:bc:f8:e9:56:d3:3f:5a:57:fd:d3:20:94:
                    dc:72:f3:43:d5:6e:3f:06:d3:f0:4a:ea:43:ed:d9:
                    33:f3:60:86:6c:e9:82:3c:b0:e1:af:47:4b:35:d7:
                    e7:ca:73:f7:34:42:4a:fa:99:2a:ce:e2:c4:f3:2c:
                    0c:5f:fe:e0:d6:46:b1:b6:17:f6:ad:03:76:1c:02:
                    ad:2b:01:56:ff:f3:45:fb:33:84:42:aa:28:3c:4a:
                    c0:f2:07:95:0e:f8:e0:a9:ea:64:06:08:d6:5a:01:
                    72:de:b4:d5:05:e5:44:43:e4:42:15:32:0d:5e:d2:
                    84:d3:f8:b2:64:7f:6a:d3:da:2d:77:25:e1:46:b9:
                    d5:13:80:54:18:27:a9:d6:e1:ef:64:ce:4a:6f:14:
                    35:07:c8:0a:17:c3:cd:92:fe:b2:77:49:6f:1b:02:
                    b8:29:e2:d0:d1:e1:cc:2b:5e:0e:93:16:04:f5:70:
                    d9:88:7d:12:36:7d:84:2e:79:07:a2:48:03:78:be:
                    ec:90:72:db:88:cc:6f:b0:9e:cf:9f:32:84:d0:17:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F8:4A:E3:DF:3C:27:61:47:18:54:02:36:0A:FC:40:0F:A6:C7:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac254d8d-76d5-3f47-b6b0-3d797877c5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.158.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:21:8a:d2:98:7d:21:bb:ac:50:b4:d3:b1:8d:e3:2a:a3:
         b0:3c:e2:a2:7d:cc:87:ed:b0:ec:80:2b:a4:31:b1:96:33:f7:
         2e:9d:07:a9:32:21:20:b1:36:af:1b:2c:cc:61:47:24:54:5b:
         ae:42:43:a2:be:79:c6:f8:a0:e0:e5:d8:90:fb:e1:4b:ee:d6:
         23:68:8c:fe:8b:ef:a9:74:a3:8a:e9:ed:6c:9d:43:1f:a1:a3:
         be:43:9b:7e:bc:fe:e0:74:8a:8e:94:4a:5b:17:37:7f:ea:8c:
         c5:23:87:e4:5a:27:43:f5:9e:de:38:a2:c4:17:9f:45:70:f8:
         a0:04:a3:fe:b9:96:a0:1c:7f:e5:72:65:2a:de:ff:2d:c6:00:
         9e:0b:58:47:9f:97:4f:11:07:56:17:36:b5:18:db:84:27:60:
         ac:0f:95:02:71:32:41:62:cb:68:df:83:a9:61:4e:53:bd:35:
         f0:e8:52:b0:5a:ae:72:5c:a7:f7:f9:ec:c2:c8:fb:6c:3e:6c:
         4b:0c:4b:e0:96:19:d0:ca:81:4a:64:df:64:5d:08:16:05:a2:
         41:6a:f5:37:1d:78:36:ec:c8:33:65:8b:84:42:96:97:32:72:
         f6:71:c8:42:7f:12:7d:4c:e0:9b:24:b3:05:a2:59:0d:9e:d3:
         b3:1a:9b:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnj0lST5Ne74JLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTlhOWY1NDEtYTQ4Mi00MmRiLTk4ZmQtNDYxYjMyOTg0NWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2caKgW31IHmKzN2OmGW8tVH1bjGE9lBsZMl+
4wW0gzLxMGoaCF7FUZYItw75m9C8+OlW0z9aV/3TIJTccvND1W4/BtPwSupD7dkz
82CGbOmCPLDhr0dLNdfnynP3NEJK+pkqzuLE8ywMX/7g1kaxthf2rQN2HAKtKwFW
//NF+zOEQqooPErA8geVDvjgqepkBgjWWgFy3rTVBeVEQ+RCFTINXtKE0/iyZH9q
09otdyXhRrnVE4BUGCep1uHvZM5KbxQ1B8gKF8PNkv6yd0lvGwK4KeLQ0eHMK14O
kxYE9XDZiH0SNn2ELnkHokgDeL7skHLbiMxvsJ7PnzKE0BcQXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHz4SuPfPCdhRxhUAjYK/EAPpsfSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWMyNTRkOGQtNzZkNS0z
ZjQ3LWI2YjAtM2Q3OTc4NzdjNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ6KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxJIYrSmH0hu6xQtNOxjeMqo7A84qJ9zIftsOyAK6QxsZYz9y6dB6ky
ISCxNq8bLMxhRyRUW65CQ6K+ecb4oODl2JD74Uvu1iNojP6L76l0o4rp7WydQx+h
o75Dm368/uB0io6USlsXN3/qjMUjh+RaJ0P1nt44osQXn0Vw+KAEo/65lqAcf+Vy
ZSre/y3GAJ4LWEefl08RB1YXNrUY24QnYKwPlQJxMkFiy2jfg6lhTlO9NfDoUrBa
rnJcp/f57MLI+2w+bEsMS+CWGdDKgUpk32RdCBYFokFq9TcdeDbsyDNli4RClpcy
cvZxyEJ/En1M4JskswWiWQ2e07Mam5A=
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:18:58 2026 by rpki-client