Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b66c92fd-f586-39cf-ae8b-dbf69c8985b7.roa
File:                     b66c92fd-f586-39cf-ae8b-dbf69c8985b7.roa (raw, json)
Hash identifier:          8XqXfiigamRu+J1N8YlWxEaYbnWSBdpN339yOKrufQs=
Subject key identifier:   C2:42:F2:E4:42:0C:03:E8:31:E8:EE:C5:2F:80:6E:94:2F:BC:D3:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5BC6954D6FE371D39C6B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b66c92fd-f586-39cf-ae8b-dbf69c8985b7.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        71.201.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:c6:95:4d:6f:e3:71:d3:9c:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=441cab91-553b-4887-9830-50323227b091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:94:b8:43:fe:5e:68:2f:ab:e5:33:c1:7e:
                    2a:85:a6:48:12:e5:97:e8:ca:72:55:fb:4e:cb:f2:
                    31:c9:e1:c8:43:4a:1e:67:96:e6:92:64:61:57:f0:
                    e4:7a:56:f0:08:33:1d:5f:40:e5:6d:fe:e6:87:6c:
                    49:03:30:42:74:05:a4:4e:87:18:18:99:2e:f7:bf:
                    66:9d:84:78:a2:0f:b5:1d:ea:f1:c1:94:a2:e0:d6:
                    c4:e5:d9:c2:52:42:bc:31:e8:7d:bc:36:2b:21:a6:
                    ab:64:19:36:52:65:67:45:69:a9:dd:2b:79:07:24:
                    1d:93:a9:1b:a5:b4:d1:2e:d7:45:b1:ab:89:33:35:
                    9e:61:05:d7:aa:a2:34:5f:d0:f8:b7:4f:1c:d4:bb:
                    60:28:cc:bd:a6:b1:1a:a1:5c:22:ae:52:26:dd:cd:
                    87:01:cc:16:04:2f:27:0f:2b:f5:ce:20:63:b7:7f:
                    20:7a:8e:0e:94:2b:ba:42:de:dc:bb:e5:23:54:1b:
                    6d:3c:99:f4:17:aa:c2:d1:66:4e:df:24:b6:e1:6e:
                    c1:9b:95:b2:57:2b:05:16:77:01:8d:42:5c:66:bc:
                    b4:9e:d8:46:a8:e0:14:a0:79:12:41:27:46:0c:9c:
                    71:a1:26:cd:1e:95:4f:37:97:73:bb:86:6c:29:d5:
                    86:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:42:F2:E4:42:0C:03:E8:31:E8:EE:C5:2F:80:6E:94:2F:BC:D3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b66c92fd-f586-39cf-ae8b-dbf69c8985b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.201.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6c:8e:f5:1a:c5:70:cc:3b:18:5e:ae:ae:2c:07:ce:0c:b7:
         bb:1f:1d:da:c7:40:5e:4d:08:74:4a:c1:59:e6:3e:76:0d:51:
         75:9f:65:31:9e:63:36:86:95:ce:7c:d7:4b:86:e5:96:04:43:
         53:52:cd:83:ac:46:1f:51:d4:1c:d7:2f:94:0f:ce:d1:0b:53:
         7b:a5:46:b3:9e:e4:45:2b:23:a3:da:26:b3:57:e5:95:b5:c4:
         51:fc:eb:cc:2a:b3:c0:d5:09:55:9d:a5:41:1f:65:59:7c:32:
         ea:60:ad:45:45:4f:ec:0f:7c:c7:65:c1:fc:e3:27:5b:8a:17:
         03:32:5f:88:26:a5:ef:38:19:0a:4a:29:9b:da:49:1f:80:48:
         ab:73:36:3a:d7:16:60:5d:61:92:30:fe:b3:d6:38:6a:d2:7a:
         68:db:12:9a:00:a4:f1:c9:a6:4a:c5:df:02:b5:34:bb:5b:41:
         d7:c4:24:40:5d:14:60:44:2a:ae:17:6e:53:00:1d:c7:ad:16:
         ed:3b:cb:23:5f:38:a5:3b:dd:2f:d7:bd:11:5b:e8:f4:e6:36:
         70:41:56:7f:2e:6d:a2:1f:a3:f1:97:52:19:30:10:13:18:cc:
         e1:35:5a:f6:1b:05:70:04:2a:79:a1:25:47:2b:c7:3c:45:7a:
         d9:39:82:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8aVTW/jcdOca4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NDQxY2FiOTEtNTUzYi00ODg3LTk4MzAtNTAzMjMyMjdiMDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXiUuEP+Xmgvq+UzwX4qhaZIEuWX6MpyVftO
y/IxyeHIQ0oeZ5bmkmRhV/DkelbwCDMdX0Dlbf7mh2xJAzBCdAWkTocYGJku979m
nYR4og+1HerxwZSi4NbE5dnCUkK8Meh9vDYrIaarZBk2UmVnRWmp3St5ByQdk6kb
pbTRLtdFsauJMzWeYQXXqqI0X9D4t08c1LtgKMy9prEaoVwirlIm3c2HAcwWBC8n
Dyv1ziBjt38geo4OlCu6Qt7cu+UjVBttPJn0F6rC0WZO3yS24W7Bm5WyVysFFncB
jUJcZry0nthGqOAUoHkSQSdGDJxxoSbNHpVPN5dzu4ZsKdWGqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJC8uRCDAPoMejuxS+AbpQvvNPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY2YzkyZmQtZjU4Ni0z
OWNmLWFlOGItZGJmNjljODk4NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8mwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRsjvUaxXDMOxherq4sB84Mt7sfHdrHQF5NCHRKwVnmPnYNUXWfZTGe
YzaGlc5810uG5ZYEQ1NSzYOsRh9R1BzXL5QPztELU3ulRrOe5EUrI6PaJrNX5ZW1
xFH868wqs8DVCVWdpUEfZVl8MupgrUVFT+wPfMdlwfzjJ1uKFwMyX4gmpe84GQpK
KZvaSR+ASKtzNjrXFmBdYZIw/rPWOGrSemjbEpoApPHJpkrF3wK1NLtbQdfEJEBd
FGBEKq4XblMAHcetFu07yyNfOKU73S/XvRFb6PTmNnBBVn8ubaIfo/GXUhkwEBMY
zOE1WvYbBXAEKnmhJUcrxzxFetk5gi4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:05 2026 by rpki-client