Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d87acf46-3521-3df1-97ec-2c4bfe65e4cb.roa
File:                     d87acf46-3521-3df1-97ec-2c4bfe65e4cb.roa (raw, json)
Hash identifier:          ZYapFRs7i4JDd587Po0IMkaY7FW1zGf3s5reg3RAsh0=
Subject key identifier:   C7:B0:27:A1:3D:E5:77:7D:89:E9:7F:5E:92:DC:1D:FB:02:32:8E:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE585DBE43B3EC7FF29C1940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d87acf46-3521-3df1-97ec-2c4bfe65e4cb.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        73.36.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:5d:be:43:b3:ec:7f:f2:9c:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=3200e68d-b74d-4ff0-9da7-c8be7873cd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:76:c8:14:1b:8d:8c:ef:cc:b8:cf:fb:7f:
                    7e:7d:b8:5f:9d:cb:6b:27:bf:0a:0b:f9:65:9a:77:
                    20:c6:8f:05:ed:a4:c3:2b:a0:48:33:c1:1e:e5:6b:
                    72:37:28:cc:b1:49:30:a8:99:8d:37:fe:e3:82:32:
                    0a:c5:41:b3:fd:20:c9:0b:e7:2e:5c:69:b2:16:92:
                    9a:d1:87:4a:dc:49:8c:97:af:d0:3f:e2:36:30:7a:
                    94:c2:99:48:5d:01:ef:1b:41:25:0b:4c:b5:20:c1:
                    bf:d9:8c:49:ad:eb:44:97:80:20:1b:a8:2c:e7:df:
                    55:db:96:88:d6:40:62:1d:bd:ba:f7:59:40:c0:b7:
                    a5:cc:2e:24:8c:c7:d8:e5:ae:92:4f:45:62:d4:04:
                    71:eb:20:2c:c0:b8:dc:6c:61:9a:30:1d:71:83:d5:
                    91:36:53:a7:23:a9:4f:7e:25:bc:01:14:f7:70:bf:
                    27:38:8c:34:9b:76:52:80:11:ef:30:7c:3d:37:87:
                    2f:dc:db:22:d8:3b:83:4f:37:ec:05:bd:4c:50:0d:
                    fe:1c:73:d2:d9:9b:d8:89:9b:eb:a9:d1:ca:d9:47:
                    67:0f:f4:2f:a1:6e:f5:6e:17:19:ef:af:84:73:c1:
                    49:6a:bc:3f:1a:66:e3:1a:f2:02:fb:bd:37:c0:64:
                    93:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:27:A1:3D:E5:77:7D:89:E9:7F:5E:92:DC:1D:FB:02:32:8E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d87acf46-3521-3df1-97ec-2c4bfe65e4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.36.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:12:fc:17:85:ec:96:a0:7b:38:9e:97:54:44:8b:a6:df:
         f0:34:e7:f0:a5:75:c8:75:09:bd:3b:81:e6:78:3c:2d:53:7b:
         f3:c2:46:27:0c:37:9e:0e:94:26:7b:28:dd:84:c7:0e:a6:e0:
         ed:7e:1b:27:b0:7a:d8:6e:e7:9d:0d:84:57:42:63:5c:28:5f:
         73:fd:3e:2d:d4:ca:ce:06:3d:4b:92:92:d7:eb:86:d5:d3:7d:
         c4:33:1a:cc:c4:d2:d5:b3:7b:c5:9d:41:2d:7b:ec:8f:50:ae:
         30:4b:7b:7e:2a:da:25:4b:c9:43:0d:47:58:fd:27:9e:41:7b:
         55:15:a3:4c:39:bb:ab:f7:da:a9:bd:18:43:68:5a:34:55:a7:
         27:04:0d:86:05:1c:2b:50:78:64:28:31:b1:b4:f4:66:1e:1f:
         4d:99:cc:c2:1d:b4:90:49:f4:2e:b0:ae:4e:ce:ed:19:76:fd:
         89:bc:3f:bb:1c:40:0e:46:24:e2:07:ad:3f:99:73:a3:09:84:
         29:52:3e:fe:c2:59:71:70:b2:5f:a5:76:e1:d5:34:ff:8c:64:
         09:63:d0:4e:b3:ee:35:94:b5:6a:25:4a:64:40:f0:d2:7a:49:
         8f:e1:56:e1:46:6f:28:69:b8:86:b5:88:ad:c4:a8:bc:dc:b0:
         67:16:d1:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWF2+Q7Psf/KcGUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MzIwMGU2OGQtYjc0ZC00ZmYwLTlkYTctYzhiZTc4NzNjZDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sl2yBQbjYzvzLjP+39+fbhfnctrJ78KC/ll
mncgxo8F7aTDK6BIM8Ee5WtyNyjMsUkwqJmNN/7jgjIKxUGz/SDJC+cuXGmyFpKa
0YdK3EmMl6/QP+I2MHqUwplIXQHvG0ElC0y1IMG/2YxJretEl4AgG6gs599V25aI
1kBiHb2691lAwLelzC4kjMfY5a6ST0Vi1ARx6yAswLjcbGGaMB1xg9WRNlOnI6lP
fiW8ART3cL8nOIw0m3ZSgBHvMHw9N4cv3Nsi2DuDTzfsBb1MUA3+HHPS2ZvYiZvr
qdHK2UdnD/QvoW71bhcZ76+Ec8FJarw/GmbjGvIC+703wGSTSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMewJ6E95Xd9iel/XpLcHfsCMo5LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDg3YWNmNDYtMzUyMS0z
ZGYxLTk3ZWMtMmM0YmZlNjVlNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSSSgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1xEvwXheyWoHs4npdURIum3/A05/Cldch1Cb07geZ4PC1Te/PCRicM
N54OlCZ7KN2Exw6m4O1+Gyewethu550NhFdCY1woX3P9Pi3Uys4GPUuSktfrhtXT
fcQzGszE0tWze8WdQS177I9QrjBLe34q2iVLyUMNR1j9J55Be1UVo0w5u6v32qm9
GENoWjRVpycEDYYFHCtQeGQoMbG09GYeH02ZzMIdtJBJ9C6wrk7O7Rl2/Ym8P7sc
QA5GJOIHrT+Zc6MJhClSPv7CWXFwsl+lduHVNP+MZAlj0E6z7jWUtWolSmRA8NJ6
SY/hVuFGbyhpuIa1iK3EqLzcsGcW0Vc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:16 2026 by rpki-client