Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b410bc8c-80d6-365e-a423-3fdebcb07c2e.roa
File:                     b410bc8c-80d6-365e-a423-3fdebcb07c2e.roa (raw, json)
Hash identifier:          eT0Gof88UrOcfxZvTAeuIWaQ370iDGHbIgdgBnuvL/M=
Subject key identifier:   17:9F:2E:2A:8F:D1:64:1F:95:49:C6:42:A4:86:BC:31:76:D7:E0:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8629C3D57FED2BFF0A52840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b410bc8c-80d6-365e-a423-3fdebcb07c2e.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        174.174.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:9c:3d:57:fe:d2:bf:f0:a5:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=5381cdbf-127e-4664-8c6c-225efb6a5f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:8e:fd:0a:83:c5:41:a3:ca:7f:fd:62:a2:
                    17:13:e4:64:d5:9b:ea:fa:93:56:69:22:8f:23:4c:
                    8d:a3:17:59:fd:f7:a9:69:4f:d9:0d:b9:68:30:64:
                    a5:f4:2a:e3:25:08:09:6a:da:dd:7a:bf:91:a5:2d:
                    f0:f2:d2:ee:bf:50:7a:01:4c:74:1f:2b:39:2d:e7:
                    c2:e9:7b:27:df:92:c9:49:af:e4:fa:fc:79:84:b5:
                    c8:cf:ac:03:a3:33:71:ee:a6:cf:9c:86:53:45:f7:
                    55:58:6b:d5:13:e8:7b:15:3b:33:bc:6b:3a:a2:1e:
                    83:e4:d4:5c:06:41:a2:9e:f0:48:40:98:2e:2b:19:
                    7d:d8:9c:66:c7:7a:df:95:bb:fe:61:7a:d6:d3:09:
                    8e:08:c1:d6:7c:ee:2c:f2:a8:11:64:f1:5d:72:f5:
                    cb:c3:ce:d9:02:48:4c:77:b1:8d:2a:d7:66:e7:fa:
                    11:2d:ad:e0:7f:69:22:45:a5:52:eb:88:e4:d0:12:
                    a8:c4:d3:4e:45:e2:3b:f0:8c:b2:a0:e9:18:4c:71:
                    fe:6d:1c:cd:91:50:da:61:04:8e:15:87:05:32:ac:
                    1d:7c:76:a0:4f:b4:93:2e:65:3c:36:2e:7a:a5:7f:
                    76:76:91:75:2b:39:61:63:ee:52:e8:5e:6c:8a:c1:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9F:2E:2A:8F:D1:64:1F:95:49:C6:42:A4:86:BC:31:76:D7:E0:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b410bc8c-80d6-365e-a423-3fdebcb07c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.174.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c1:cd:87:1d:ef:f5:f9:1d:e8:dd:37:8d:b9:65:80:ea:fe:
         c9:c1:12:99:4a:3d:ca:c5:91:41:de:1d:db:55:90:de:75:63:
         4d:5c:1e:9f:32:76:ba:d1:ec:6d:b4:3e:9e:23:70:3f:8a:e9:
         88:ad:5c:3a:be:bf:be:76:fd:9a:70:b3:f5:f6:99:5f:c3:27:
         e0:34:8f:e0:7c:99:05:ed:e1:9f:66:d7:8d:53:76:29:ed:1c:
         6c:09:d6:74:de:55:b4:86:5c:cc:8a:99:b1:fd:ee:60:f6:1f:
         4a:c6:22:b1:92:6b:20:48:a3:a6:39:f5:86:7d:7f:7e:94:dd:
         d8:f2:ed:c3:ce:62:bd:a1:1e:34:2d:ef:5f:05:a8:a4:0c:f8:
         26:87:13:47:16:a0:6e:63:60:6e:a3:40:7f:07:3d:c9:b9:71:
         27:f3:f8:50:73:91:db:c9:68:58:ce:3e:52:d3:54:77:49:e9:
         6e:84:8f:1e:3b:fc:d0:23:d9:14:bc:88:25:e8:2a:c6:63:8b:
         3d:f1:dc:a1:e7:80:22:13:5e:9c:b4:e2:59:2d:10:1b:9e:5e:
         2e:7c:96:d8:c2:5d:17:e2:f6:a8:2e:5f:fd:36:b7:67:5e:1a:
         4c:fd:4b:89:2b:8c:37:80:61:ef:c1:34:4c:0e:ed:07:5d:00:
         d0:64:3a:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYpw9V/7Sv/ClKEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
NTM4MWNkYmYtMTI3ZS00NjY0LThjNmMtMjI1ZWZiNmE1ZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ6O/QqDxUGjyn/9YqIXE+Rk1Zvq+pNWaSKP
I0yNoxdZ/fepaU/ZDbloMGSl9CrjJQgJatrder+RpS3w8tLuv1B6AUx0Hys5LefC
6Xsn35LJSa/k+vx5hLXIz6wDozNx7qbPnIZTRfdVWGvVE+h7FTszvGs6oh6D5NRc
BkGinvBIQJguKxl92Jxmx3rflbv+YXrW0wmOCMHWfO4s8qgRZPFdcvXLw87ZAkhM
d7GNKtdm5/oRLa3gf2kiRaVS64jk0BKoxNNOReI78IyyoOkYTHH+bRzNkVDaYQSO
FYcFMqwdfHagT7STLmU8Ni56pX92dpF1KzlhY+5S6F5sisFK3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBefLiqP0WQflUnGQqSGvDF21+DrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjQxMGJjOGMtODBkNi0z
NjVlLWE0MjMtM2ZkZWJjYjA3YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrq7YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLBzYcd7/X5HejdN425ZYDq/snBEplKPcrFkUHeHdtVkN51Y01cHp8y
drrR7G20Pp4jcD+K6YitXDq+v752/Zpws/X2mV/DJ+A0j+B8mQXt4Z9m141Tdint
HGwJ1nTeVbSGXMyKmbH97mD2H0rGIrGSayBIo6Y59YZ9f36U3djy7cPOYr2hHjQt
718FqKQM+CaHE0cWoG5jYG6jQH8HPcm5cSfz+FBzkdvJaFjOPlLTVHdJ6W6Ejx47
/NAj2RS8iCXoKsZjiz3x3KHngCITXpy04lktEBueXi58ltjCXRfi9qguX/02t2de
Gkz9S4krjDeAYe/BNEwO7QddANBkOpc=
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:27:51 2026 by rpki-client