Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb19f103-042c-3ab0-b9de-e307511a1e4b.roa
File:                     cb19f103-042c-3ab0-b9de-e307511a1e4b.roa (raw, json)
Hash identifier:          e2V2iqNMZjSZyygSyQRtMOFAybC4A0IRw8sCCcapwrQ=
Subject key identifier:   3B:48:95:62:E4:8A:9B:C3:ED:09:CD:A4:E0:A3:FF:89:A0:2C:42:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7C51302C9AA879B341000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb19f103-042c-3ab0-b9de-e307511a1e4b.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        73.43.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:c5:13:02:c9:aa:87:9b:34:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=de1eee2c-3089-4677-a811-d940408dcd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:d9:cd:0b:37:9d:4d:ce:26:4b:83:2f:b5:
                    98:12:dd:21:30:aa:3a:6f:52:5d:58:65:41:b0:72:
                    e1:94:63:1a:68:e8:7e:7e:76:f3:5f:eb:13:69:fc:
                    96:98:04:3f:25:cc:f0:69:54:38:a4:de:fc:74:08:
                    32:8e:81:68:58:27:5c:cd:aa:a2:5f:bd:1d:ed:24:
                    bd:4c:43:7a:66:7d:c7:0b:cb:81:5f:2c:b8:cb:03:
                    09:09:37:bd:c0:10:12:49:f0:36:dd:2e:72:02:66:
                    97:6f:00:42:4d:da:66:e1:30:f0:cd:62:06:14:8d:
                    71:0d:63:eb:7c:b9:5a:a5:7b:80:e3:b5:86:21:91:
                    58:6a:fc:34:4f:c4:90:e7:85:ee:13:88:af:dd:f0:
                    56:7a:f4:83:db:62:db:a8:a2:17:0b:32:71:2d:42:
                    1c:da:fc:70:0b:1a:49:72:9b:df:70:09:b6:8b:9e:
                    9c:cd:f8:aa:6c:b0:28:61:c0:61:21:ef:4b:f8:fa:
                    5f:12:7e:b3:d6:65:67:2b:23:85:8f:7d:b1:18:3b:
                    a8:4b:e0:8d:f7:7a:92:98:ac:9e:80:80:13:b2:17:
                    aa:15:e7:6b:4a:d9:2c:08:96:d7:40:b5:03:7f:86:
                    34:9f:2f:86:c9:82:23:3b:12:2b:a1:8a:55:a9:df:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:48:95:62:E4:8A:9B:C3:ED:09:CD:A4:E0:A3:FF:89:A0:2C:42:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb19f103-042c-3ab0-b9de-e307511a1e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.43.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:33:bd:6a:12:a2:3f:f0:f7:97:dd:9c:ee:42:13:20:c0:
         b2:de:98:6c:a2:29:52:31:3d:57:a3:d1:0b:f1:d1:b0:69:e6:
         ce:00:a9:7f:61:57:c2:00:22:a2:07:24:8e:92:fe:7f:24:10:
         d6:e3:f6:c7:df:43:ea:d2:bb:8f:2a:71:9a:2d:30:a8:cb:e2:
         53:1c:05:13:3d:0f:f4:ec:af:90:b4:01:75:36:3d:74:b1:31:
         11:e4:9a:78:88:0b:e1:9d:6e:fa:16:43:37:ad:0a:a1:a3:6c:
         dd:e6:73:bb:09:73:0e:3b:00:77:fd:30:2f:73:fb:92:74:b1:
         a5:70:38:f3:bc:37:b9:47:73:ba:a5:91:af:e6:50:4b:7e:0a:
         11:81:f8:03:20:70:fe:47:30:27:18:5a:09:1c:f7:d2:bc:34:
         8f:66:b8:be:35:0e:fb:63:be:96:f9:bc:e5:05:7d:e6:1b:29:
         08:87:4e:fb:c5:f5:8c:19:f1:fd:66:ee:63:52:58:3f:5f:87:
         83:7b:38:2b:25:aa:ca:eb:01:1d:20:fd:54:32:aa:6d:2c:f5:
         03:33:07:bb:72:8a:bb:5f:f9:ad:1f:11:6a:26:a0:8e:f1:44:
         b9:53:1a:35:7f:56:fb:00:a7:22:0d:d9:01:98:0c:c3:4a:7f:
         95:9e:e5:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp8UTAsmqh5s0EAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
ZGUxZWVlMmMtMzA4OS00Njc3LWE4MTEtZDk0MDQwOGRjZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpbZzQs3nU3OJkuDL7WYEt0hMKo6b1JdWGVB
sHLhlGMaaOh+fnbzX+sTafyWmAQ/JczwaVQ4pN78dAgyjoFoWCdczaqiX70d7SS9
TEN6Zn3HC8uBXyy4ywMJCTe9wBASSfA23S5yAmaXbwBCTdpm4TDwzWIGFI1xDWPr
fLlapXuA47WGIZFYavw0T8SQ54XuE4iv3fBWevSD22LbqKIXCzJxLUIc2vxwCxpJ
cpvfcAm2i56czfiqbLAoYcBhIe9L+PpfEn6z1mVnKyOFj32xGDuoS+CN93qSmKye
gIATsheqFedrStksCJbXQLUDf4Y0ny+GyYIjOxIroYpVqd/kIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtIlWLkipvD7QnNpOCj/4mgLEJQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2IxOWYxMDMtMDQyYy0z
YWIwLWI5ZGUtZTMwNzUxMWExZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSuMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDIM71qEqI/8PeX3ZzuQhMgwLLemGyiKVIxPVej0Qvx0bBp5s4AqX9h
V8IAIqIHJI6S/n8kENbj9sffQ+rSu48qcZotMKjL4lMcBRM9D/Tsr5C0AXU2PXSx
MRHkmniIC+GdbvoWQzetCqGjbN3mc7sJcw47AHf9MC9z+5J0saVwOPO8N7lHc7ql
ka/mUEt+ChGB+AMgcP5HMCcYWgkc99K8NI9muL41Dvtjvpb5vOUFfeYbKQiHTvvF
9YwZ8f1m7mNSWD9fh4N7OCslqsrrAR0g/VQyqm0s9QMzB7tyirtf+a0fEWomoI7x
RLlTGjV/VvsApyIN2QGYDMNKf5We5c0=
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:49:02 2026 by rpki-client