Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bac0efe9-01c3-3c1a-8cc0-7a53f75acc81.roa
File:                     bac0efe9-01c3-3c1a-8cc0-7a53f75acc81.roa (raw, json)
Hash identifier:          n5sTbYPS/Q2goM2O7ySkhWxM5KXIfOxwQxZVwJBis0o=
Subject key identifier:   45:F8:47:76:2A:95:75:39:B6:6E:86:C9:5C:D8:0A:92:5C:CB:C7:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5C5FBCC0B551C4C7EB6980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bac0efe9-01c3-3c1a-8cc0-7a53f75acc81.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.50.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5c:5f:bc:c0:b5:51:c4:c7:eb:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=398a7d0c-696b-4ce2-8ea5-2e9224260d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:73:9b:86:f5:5b:23:b5:f5:95:50:c2:25:
                    65:04:9a:c4:4c:8a:b1:dc:e7:78:ff:8a:1a:37:bb:
                    a2:23:bd:0b:c8:d7:a1:64:be:d8:ea:f6:ee:67:e3:
                    1e:c3:bf:4a:fc:99:6a:e7:92:d7:16:b1:0a:ff:3f:
                    dd:21:c5:6e:07:7e:b6:b9:5a:90:f7:9c:5a:90:66:
                    ce:7d:33:5a:63:72:a7:72:3b:f5:40:6a:bf:1a:03:
                    51:6d:48:51:43:f3:9b:cb:30:e2:44:6f:e1:ad:18:
                    04:53:1e:42:d6:9b:da:5e:45:f2:48:ee:8c:d0:e2:
                    52:0e:a9:71:10:4e:5f:20:71:3f:a2:c2:1a:80:f9:
                    d1:ba:e3:7b:85:e7:a7:39:ab:10:3c:67:14:1f:d3:
                    97:1f:07:e0:42:b3:40:d1:b3:c7:dc:d2:a1:8f:c0:
                    9f:cb:83:c7:9c:97:8c:be:0c:35:2a:d4:33:eb:a2:
                    ed:33:bd:67:d4:79:59:e3:8c:64:5e:63:66:0b:15:
                    fb:81:6b:0d:e3:cb:e0:5b:2c:fd:1a:9a:4d:f4:4d:
                    ed:5e:29:d4:ef:50:9c:1d:ac:09:b0:72:da:6a:cd:
                    97:18:33:17:d9:7a:5d:3a:41:37:39:9c:29:d8:df:
                    9d:3c:8b:22:9c:c1:0b:c1:cb:c8:b5:b5:ec:c3:36:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F8:47:76:2A:95:75:39:B6:6E:86:C9:5C:D8:0A:92:5C:CB:C7:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bac0efe9-01c3-3c1a-8cc0-7a53f75acc81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.50.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6c:dc:89:83:36:95:a4:a3:22:f5:0d:b8:5b:29:b9:6a:49:
         f0:ed:ad:21:86:f1:46:d8:03:52:48:e4:0c:b7:6a:6e:63:a8:
         21:0d:dc:e7:fe:8f:e4:85:7a:7d:c8:a8:35:75:3a:14:e4:48:
         fe:64:4d:d5:14:9a:7b:d9:93:84:66:b7:c9:11:c4:8f:cd:dc:
         13:8d:ec:86:06:53:61:78:64:e6:2c:19:73:6a:01:3a:01:c7:
         83:0e:74:23:e7:59:bd:3a:5a:8a:b9:1e:52:d0:d0:8a:37:5e:
         0f:e7:19:8e:6f:6c:8b:a7:4b:c3:20:ba:57:50:10:fb:2f:4f:
         fc:e0:48:7d:2d:7d:0e:20:80:9a:ba:0d:6e:62:03:27:db:c5:
         ef:f7:0e:24:69:54:16:b8:13:bc:9f:32:8d:89:e0:0a:98:cb:
         87:7b:c9:bf:0a:b2:00:0c:f8:7e:85:8c:d8:9f:26:9f:08:e2:
         0e:4a:1b:e8:a1:67:91:20:0a:ca:2b:06:5e:59:55:b1:c8:b1:
         cb:96:37:f3:63:37:eb:26:49:2e:3a:50:22:d4:02:7a:59:75:
         ef:d6:51:20:19:e4:cf:96:d8:05:b2:c5:b9:e9:f8:2d:dc:76:
         b7:5d:0d:30:ec:9b:e0:5c:6c:c6:aa:36:2d:47:e9:12:7e:7c:
         c0:9c:e8:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXF+8wLVRxMfraYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
Mzk4YTdkMGMtNjk2Yi00Y2UyLThlYTUtMmU5MjI0MjYwZDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaxzm4b1WyO19ZVQwiVlBJrETIqx3Od4/4oa
N7uiI70LyNehZL7Y6vbuZ+Mew79K/Jlq55LXFrEK/z/dIcVuB362uVqQ95xakGbO
fTNaY3Kncjv1QGq/GgNRbUhRQ/ObyzDiRG/hrRgEUx5C1pvaXkXySO6M0OJSDqlx
EE5fIHE/osIagPnRuuN7heenOasQPGcUH9OXHwfgQrNA0bPH3NKhj8Cfy4PHnJeM
vgw1KtQz66LtM71n1HlZ44xkXmNmCxX7gWsN48vgWyz9GppN9E3tXinU71CcHawJ
sHLaas2XGDMX2XpdOkE3OZwp2N+dPIsinMELwcvItbXswzbRdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEX4R3YqlXU5tm6GyVzYCpJcy8epMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFjMGVmZTktMDFjMy0z
YzFhLThjYzAtN2E1M2Y3NWFjYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSTLaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHts3ImDNpWkoyL1DbhbKblqSfDtrSGG8UbYA1JI5Ay3am5jqCEN3Of+
j+SFen3IqDV1OhTkSP5kTdUUmnvZk4Rmt8kRxI/N3BON7IYGU2F4ZOYsGXNqAToB
x4MOdCPnWb06Woq5HlLQ0Io3Xg/nGY5vbIunS8MguldQEPsvT/zgSH0tfQ4ggJq6
DW5iAyfbxe/3DiRpVBa4E7yfMo2J4AqYy4d7yb8KsgAM+H6FjNifJp8I4g5KG+ih
Z5EgCsorBl5ZVbHIscuWN/NjN+smSS46UCLUAnpZde/WUSAZ5M+W2AWyxbnp+C3c
drddDTDsm+BcbMaqNi1H6RJ+fMCc6HM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:03:54 2026 by rpki-client