Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1a08639-c70a-3288-979b-a79d6ebaa641.roa
File:                     b1a08639-c70a-3288-979b-a79d6ebaa641.roa (raw, json)
Hash identifier:          TA4GxrYZACG+oIEJRRXzAygvMTXlMwUHhIJYw/zcbiw=
Subject key identifier:   EF:9C:EE:B1:D9:17:6A:F4:7E:42:28:68:84:22:F4:9B:76:ED:01:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE862652324B9C5FBDAAD810
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1a08639-c70a-3288-979b-a79d6ebaa641.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33489
IP address blocks:        73.131.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:26:52:32:4b:9c:5f:bd:aa:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=f2a1c3cd-b38a-4752-88f7-bf27a18be121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:22:57:46:d8:19:31:d5:c5:2a:96:4d:db:
                    97:eb:7e:e2:c5:20:24:9f:9e:63:e6:2f:7b:bf:d2:
                    84:80:53:2b:00:73:e2:c1:51:ed:98:a6:72:73:fe:
                    3a:94:29:2b:86:42:0e:54:c4:11:c9:cd:a4:d4:d3:
                    a9:b7:89:d8:27:db:93:c3:f6:71:db:06:d0:1f:1f:
                    7e:3b:50:53:29:25:99:90:4f:87:ce:7f:36:7f:96:
                    d1:ef:86:b1:b4:19:c5:d7:2e:a0:8f:b7:99:47:1c:
                    d8:65:6b:18:0e:ee:4b:83:ee:2b:fe:ca:24:81:0e:
                    c4:47:a6:45:c9:91:f9:ad:70:e2:98:82:96:b2:94:
                    15:44:9e:02:2b:56:10:cb:8c:1a:2c:67:d2:63:05:
                    89:34:9c:4e:cd:67:38:e5:df:db:3c:b6:40:2b:5f:
                    16:2d:1e:75:67:3a:da:63:c1:bb:40:59:58:c6:9e:
                    d8:48:a5:57:6e:d7:3e:65:b5:bd:85:37:7a:57:99:
                    2c:67:5c:20:b1:db:ab:70:2d:9e:d1:38:c9:a5:57:
                    00:ff:a4:aa:4e:84:ab:03:3a:90:b6:bf:85:cc:9d:
                    d5:e2:ba:06:bd:0c:ba:c3:78:f5:ad:d6:82:6e:17:
                    49:84:1c:60:21:03:72:3e:b2:a5:1c:8c:00:35:da:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9C:EE:B1:D9:17:6A:F4:7E:42:28:68:84:22:F4:9B:76:ED:01:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1a08639-c70a-3288-979b-a79d6ebaa641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.131.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:52:78:31:5d:8f:fe:42:7e:84:91:64:90:9f:7f:19:3d:54:
         69:48:b9:42:e7:61:e5:8c:f8:23:e0:c0:4d:49:d0:26:87:fa:
         82:12:db:fd:e1:8f:83:53:b5:c5:32:d2:cf:63:53:f4:6d:6d:
         b0:1d:9f:4a:da:9f:62:5c:10:41:ef:43:82:b6:6c:4e:17:3a:
         78:1e:a0:0c:53:2a:bb:8f:8f:fc:ed:99:68:f0:15:91:68:8f:
         b8:b8:fc:36:08:52:d9:42:cd:ec:8c:a4:30:23:a4:67:35:47:
         11:cf:5d:de:84:e6:86:7e:f8:01:c8:ee:3a:8f:b3:ed:d3:f2:
         16:e3:29:24:47:b2:cb:c1:f7:9b:9d:13:bf:1f:df:56:3d:31:
         0c:b1:f8:a9:43:c3:ac:a9:ba:34:37:97:56:48:ee:5e:b8:25:
         59:58:c1:8f:58:1f:c1:57:91:98:06:a2:61:6d:04:21:28:1b:
         f3:74:bc:53:21:ac:83:4d:55:63:c6:50:c0:df:78:a3:d6:50:
         a8:d7:33:23:39:04:3b:10:cf:ca:0a:9f:d5:06:8d:35:c2:f3:
         5a:11:45:65:8c:05:67:20:18:19:52:bf:3b:d7:83:76:22:a4:
         ff:26:c8:99:95:52:f5:51:17:03:e8:3e:6d:0e:08:65:3b:0a:
         4e:6a:de:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehiZSMkucX72q2BAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
ZjJhMWMzY2QtYjM4YS00NzUyLTg4ZjctYmYyN2ExOGJlMTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtUiV0bYGTHVxSqWTduX637ixSAkn55j5i97
v9KEgFMrAHPiwVHtmKZyc/46lCkrhkIOVMQRyc2k1NOpt4nYJ9uTw/Zx2wbQHx9+
O1BTKSWZkE+Hzn82f5bR74axtBnF1y6gj7eZRxzYZWsYDu5Lg+4r/sokgQ7ER6ZF
yZH5rXDimIKWspQVRJ4CK1YQy4waLGfSYwWJNJxOzWc45d/bPLZAK18WLR51Zzra
Y8G7QFlYxp7YSKVXbtc+ZbW9hTd6V5ksZ1wgsdurcC2e0TjJpVcA/6SqToSrAzqQ
tr+FzJ3V4roGvQy6w3j1rdaCbhdJhBxgIQNyPrKlHIwANdpQRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+c7rHZF2r0fkIoaIQi9Jt27QFfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjFhMDg2MzktYzcwYS0z
Mjg4LTk3OWItYTc5ZDZlYmFhNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSYOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9SeDFdj/5CfoSRZJCffxk9VGlIuULnYeWM+CPgwE1J0CaH+oIS2/3h
j4NTtcUy0s9jU/RtbbAdn0ran2JcEEHvQ4K2bE4XOngeoAxTKruPj/ztmWjwFZFo
j7i4/DYIUtlCzeyMpDAjpGc1RxHPXd6E5oZ++AHI7jqPs+3T8hbjKSRHssvB95ud
E78f31Y9MQyx+KlDw6ypujQ3l1ZI7l64JVlYwY9YH8FXkZgGomFtBCEoG/N0vFMh
rINNVWPGUMDfeKPWUKjXMyM5BDsQz8oKn9UGjTXC81oRRWWMBWcgGBlSvzvXg3Yi
pP8myJmVUvVRFwPoPm0OCGU7Ck5q3tA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:08:01 2026 by rpki-client