Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7a7be4-facf-3ef1-bb9c-064f43f39bf8.roa
File:                     cb7a7be4-facf-3ef1-bb9c-064f43f39bf8.roa (raw, json)
Hash identifier:          kGnNKqq+5LurjWu5VU8aVwvxMke+ovIEjWgZQSk23Ng=
Subject key identifier:   E5:D1:97:56:6E:E9:2E:95:C3:33:96:F7:8A:C1:86:76:C2:34:6E:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBD6782F6E44B087E13140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7a7be4-facf-3ef1-bb9c-064f43f39bf8.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        73.100.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:d6:78:2f:6e:44:b0:87:e1:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=218d80d1-372e-40f5-99cc-477ea6194e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:38:5f:db:19:4a:50:75:ef:b2:95:04:c5:
                    02:f7:2d:15:c5:4e:e5:20:33:a3:a5:7a:43:31:04:
                    b7:69:25:82:c8:f9:08:e1:7b:bb:8a:af:23:5f:1f:
                    51:2b:68:85:f6:d0:c1:ac:85:04:be:0a:d5:e3:b4:
                    53:81:ab:6a:7b:a4:04:8c:e9:8c:ff:80:31:c7:44:
                    97:b0:e6:fb:e2:c4:26:9c:b7:43:ee:d0:0c:2e:93:
                    06:31:92:53:32:78:58:30:3c:fe:5c:29:24:b1:3f:
                    21:f7:43:5b:70:cf:db:ce:9c:11:1a:d6:89:a7:ea:
                    96:eb:6e:ab:5b:71:9e:57:4e:21:c3:79:40:82:45:
                    80:e1:f8:35:e9:4b:12:7d:25:48:83:fe:cb:6e:02:
                    fc:73:ac:ce:fb:91:87:47:68:b1:e1:75:33:18:94:
                    d3:20:81:16:68:d0:ff:6e:eb:78:99:9d:47:09:17:
                    89:b8:f2:2b:fa:58:7c:f7:37:40:19:25:ef:a2:dd:
                    9c:23:f1:53:3b:88:d4:1d:dc:ac:34:c3:7a:76:70:
                    92:73:05:05:dd:29:a3:f9:ca:dd:14:35:48:48:a8:
                    17:64:7d:50:02:00:e1:0e:d0:42:be:3d:44:a4:5c:
                    db:04:85:de:b9:0d:52:08:9c:78:6e:28:be:11:bd:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D1:97:56:6E:E9:2E:95:C3:33:96:F7:8A:C1:86:76:C2:34:6E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7a7be4-facf-3ef1-bb9c-064f43f39bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.100.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1f:e3:e2:20:94:93:dd:2c:43:00:fb:d0:34:ac:8d:2e:38:
         e6:6a:ed:3f:e3:1c:37:be:c7:f9:43:e3:05:47:60:e8:a3:52:
         4f:f1:de:b2:b5:b0:68:3e:91:ac:46:a9:ee:ab:08:d6:a1:6b:
         f8:29:7d:df:88:d4:dc:61:7b:ca:8e:38:1a:58:b0:06:9a:41:
         ee:fa:95:e8:04:e2:2c:fb:8b:33:73:97:45:76:e3:5e:74:61:
         17:03:43:5c:73:5b:ab:bf:70:61:40:0f:bd:73:d3:14:4e:eb:
         f8:c9:fb:9a:ab:e4:f9:47:6b:d9:8a:69:6e:58:bb:f0:3e:7b:
         5f:39:64:9d:4a:93:b5:4b:94:22:41:76:90:8c:19:b1:ac:69:
         ca:31:2c:50:be:11:aa:b1:6c:23:b2:32:2e:36:14:5e:ed:c3:
         a2:06:72:98:06:44:1f:7d:ba:b4:89:ea:93:6f:c2:31:d2:89:
         87:f7:4d:99:b1:b4:85:05:1b:8a:e0:da:a4:b4:0d:dd:d1:53:
         01:73:cd:c3:eb:6c:05:c2:bd:7b:6f:5c:f2:c0:2b:77:62:bb:
         49:f2:2a:03:3d:11:5d:c3:34:7e:af:fb:67:1a:1a:59:e0:30:
         bf:32:bd:5d:99:3a:19:d1:ad:c9:b1:6d:8d:28:10:a4:18:c2:
         ee:ae:2d:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu9Z4L25EsIfhMUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MjE4ZDgwZDEtMzcyZS00MGY1LTk5Y2MtNDc3ZWE2MTk0ZTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rY4X9sZSlB177KVBMUC9y0VxU7lIDOjpXpD
MQS3aSWCyPkI4Xu7iq8jXx9RK2iF9tDBrIUEvgrV47RTgatqe6QEjOmM/4Axx0SX
sOb74sQmnLdD7tAMLpMGMZJTMnhYMDz+XCkksT8h90NbcM/bzpwRGtaJp+qW626r
W3GeV04hw3lAgkWA4fg16UsSfSVIg/7LbgL8c6zO+5GHR2ix4XUzGJTTIIEWaND/
but4mZ1HCReJuPIr+lh89zdAGSXvot2cI/FTO4jUHdysNMN6dnCScwUF3Smj+crd
FDVISKgXZH1QAgDhDtBCvj1EpFzbBIXeuQ1SCJx4bii+Eb0bUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXRl1Zu6S6VwzOW94rBhnbCNG5VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I3YTdiZTQtZmFjZi0z
ZWYxLWJiOWMtMDY0ZjQzZjM5YmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWRsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMf4+IglJPdLEMA+9A0rI0uOOZq7T/jHDe+x/lD4wVHYOijUk/x3rK1
sGg+kaxGqe6rCNaha/gpfd+I1Nxhe8qOOBpYsAaaQe76legE4iz7izNzl0V24150
YRcDQ1xzW6u/cGFAD71z0xRO6/jJ+5qr5PlHa9mKaW5Yu/A+e185ZJ1Kk7VLlCJB
dpCMGbGsacoxLFC+EaqxbCOyMi42FF7tw6IGcpgGRB99urSJ6pNvwjHSiYf3TZmx
tIUFG4rg2qS0Dd3RUwFzzcPrbAXCvXtvXPLAK3diu0nyKgM9EV3DNH6v+2caGlng
ML8yvV2ZOhnRrcmxbY0oEKQYwu6uLeM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:26 2026 by rpki-client