Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8f85ea3-423a-35f6-a9f0-3f6fc8e5b422.roa
File:                     d8f85ea3-423a-35f6-a9f0-3f6fc8e5b422.roa (raw, json)
Hash identifier:          Y8VAITb8G6kOEfJL9VXi1hFRt9D8y6Jcy3mqUPPUuJw=
Subject key identifier:   58:CD:39:1A:25:42:22:BC:B1:BA:C0:48:EC:54:16:38:41:76:9D:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5A0ADF0B3E5A1A727C8D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8f85ea3-423a-35f6-a9f0-3f6fc8e5b422.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.195.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:0a:df:0b:3e:5a:1a:72:7c:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=5f980b75-1daa-4990-9611-10086a1af2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:db:90:39:44:34:86:6a:0c:64:1d:e3:1e:
                    27:bb:7a:5c:02:24:b5:51:46:90:a5:bb:9c:0d:d5:
                    56:16:e0:ac:cf:80:e9:ac:ad:d5:92:e5:66:8c:64:
                    30:89:98:dd:78:a4:d8:8d:0d:04:d8:1c:4b:f9:f6:
                    ee:88:f2:bb:4d:74:a0:2f:b8:5b:fa:8b:4a:27:1b:
                    a1:a9:0a:74:fc:d0:23:49:e1:81:aa:85:88:b8:5f:
                    01:b4:95:3b:da:a9:d4:7a:b6:45:fd:4f:4a:89:f9:
                    be:32:2b:b4:cc:9a:81:f5:ba:db:78:a7:da:6f:84:
                    2c:98:95:da:41:15:2f:20:97:3e:2b:30:31:75:b3:
                    76:78:09:84:05:d7:32:1e:ba:d9:1b:2e:23:e8:28:
                    76:46:7f:77:9c:15:a9:10:39:32:95:f3:fc:c7:09:
                    d2:8e:8f:42:a1:16:89:f5:47:af:99:ae:fe:a4:9d:
                    0a:c8:19:8e:ef:c4:0c:aa:09:5d:fd:b6:25:33:88:
                    fe:a3:c7:88:e0:f2:98:ae:af:7d:aa:16:5f:1c:e2:
                    d0:e4:da:6a:b8:10:48:ce:28:b2:4a:db:f8:c8:a6:
                    3a:01:ce:5d:be:18:28:83:71:bf:00:47:c0:93:05:
                    eb:7f:b7:6f:fe:3e:a7:08:dd:7a:4e:0b:6c:17:af:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CD:39:1A:25:42:22:BC:B1:BA:C0:48:EC:54:16:38:41:76:9D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8f85ea3-423a-35f6-a9f0-3f6fc8e5b422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.195.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:3e:c6:50:bb:94:7b:75:97:d4:87:16:30:22:44:9d:75:
         6c:01:ff:16:6a:06:8c:60:c2:76:ca:de:83:b8:89:85:80:43:
         9c:44:3e:ab:94:6d:00:5e:4b:e1:8e:9d:cf:ff:ba:4c:f8:68:
         04:88:82:ca:ee:ab:66:aa:a3:a0:fb:02:59:26:ce:e0:07:fd:
         c7:08:3f:64:4d:07:e4:ba:c2:94:4c:11:87:e4:3a:20:23:28:
         6e:c0:27:e0:3f:56:82:44:d9:f0:19:81:e1:ae:91:09:54:f6:
         fa:b0:f0:51:ee:44:84:f3:14:dc:51:4b:a3:db:1b:aa:35:b1:
         f8:a1:08:46:34:3f:2c:b9:a5:47:5e:fe:41:cf:22:97:6b:f0:
         a0:c7:0d:54:fb:c1:6f:97:b7:1f:81:7f:61:c8:21:f6:2a:53:
         24:13:df:c4:ba:ec:21:1f:99:66:fc:5a:55:d7:3e:b2:84:e0:
         62:46:5a:38:a2:9b:2c:59:95:a0:7d:0c:dd:20:a9:21:a7:dd:
         33:9b:b0:82:64:44:2e:52:fb:22:54:88:34:59:69:92:fb:67:
         71:16:d5:50:ed:38:69:43:21:78:01:c2:a3:10:64:25:9c:c3:
         3a:b0:29:f8:99:e5:b7:6d:7e:b4:4d:c3:94:db:96:70:93:a8:
         49:1e:19:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWgrfCz5aGnJ8jQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NWY5ODBiNzUtMWRhYS00OTkwLTk2MTEtMTAwODZhMWFmMmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ/bkDlENIZqDGQd4x4nu3pcAiS1UUaQpbuc
DdVWFuCsz4DprK3VkuVmjGQwiZjdeKTYjQ0E2BxL+fbuiPK7TXSgL7hb+otKJxuh
qQp0/NAjSeGBqoWIuF8BtJU72qnUerZF/U9Kifm+Miu0zJqB9brbeKfab4QsmJXa
QRUvIJc+KzAxdbN2eAmEBdcyHrrZGy4j6Ch2Rn93nBWpEDkylfP8xwnSjo9CoRaJ
9Uevma7+pJ0KyBmO78QMqgld/bYlM4j+o8eI4PKYrq99qhZfHOLQ5NpquBBIziiy
Stv4yKY6Ac5dvhgog3G/AEfAkwXrf7dv/j6nCN16TgtsF69qIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjNORolQiK8sbrASOxUFjhBdp2VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhmODVlYTMtNDIzYS0z
NWY2LWE5ZjAtM2Y2ZmM4ZTViNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScNeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5+PsZQu5R7dZfUhxYwIkSddWwB/xZqBoxgwnbK3oO4iYWAQ5xEPquU
bQBeS+GOnc//ukz4aASIgsruq2aqo6D7AlkmzuAH/ccIP2RNB+S6wpRMEYfkOiAj
KG7AJ+A/VoJE2fAZgeGukQlU9vqw8FHuRITzFNxRS6PbG6o1sfihCEY0Pyy5pUde
/kHPIpdr8KDHDVT7wW+Xtx+Bf2HIIfYqUyQT38S67CEfmWb8WlXXPrKE4GJGWjii
myxZlaB9DN0gqSGn3TObsIJkRC5S+yJUiDRZaZL7Z3EW1VDtOGlDIXgBwqMQZCWc
wzqwKfiZ5bdtfrRNw5TblnCTqEkeGVI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:03 2026 by rpki-client