Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dab207c7-5a65-3e39-af0d-606afe23c873.roa
File:                     dab207c7-5a65-3e39-af0d-606afe23c873.roa (raw, json)
Hash identifier:          zVaBW8KG4YiadvAwpElCRsPNlJobCak6bCnATD0NfN0=
Subject key identifier:   74:FD:DD:D0:9F:B2:6B:39:0F:A2:D4:41:4C:EC:82:B8:1D:1F:46:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EB7EBBBBCEB130A4EC500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dab207c7-5a65-3e39-af0d-606afe23c873.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        73.226.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:b7:eb:bb:bc:eb:13:0a:4e:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=b4628bba-93a2-4030-bb25-361e533a7c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:c6:25:79:11:75:77:4d:df:b3:54:b1:68:
                    06:4c:31:79:19:fe:f8:ae:c3:1a:a4:32:b4:15:40:
                    1a:8b:ee:31:19:62:99:da:ee:99:af:45:84:b2:05:
                    9f:d9:49:47:8f:fd:00:0c:61:c5:30:3f:e8:a4:7f:
                    3b:2e:76:df:f9:b0:e1:19:6b:51:60:3e:ef:c8:dc:
                    e0:30:03:b2:e3:38:74:75:8d:17:5b:58:ee:cc:2d:
                    5e:e1:62:90:da:db:1f:cd:e3:d4:40:cb:e6:97:76:
                    b8:ee:ea:88:89:45:53:e3:ce:a1:13:bf:12:3f:07:
                    5c:00:ee:f7:2c:90:db:df:63:a8:fa:e1:ac:49:bb:
                    f4:d4:c7:1d:51:9c:43:98:b8:8a:b1:2f:c2:6e:72:
                    a6:ff:5d:cd:f5:62:49:64:ad:a9:2b:ae:7c:22:27:
                    65:7b:a9:d1:70:2a:d6:6a:6d:51:f6:28:54:7f:db:
                    28:ec:79:c3:e6:e0:c7:fc:8a:06:ba:8e:6d:20:c3:
                    f8:11:84:2a:d2:b5:a7:51:30:83:22:e4:b0:cd:9f:
                    1b:61:d1:27:30:35:00:d0:66:31:09:54:1c:cf:79:
                    b0:65:ea:35:99:c0:83:22:9d:d4:8f:4e:7f:b3:3e:
                    8b:7f:6e:68:76:0f:2b:cf:f9:4a:25:38:86:9d:6a:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FD:DD:D0:9F:B2:6B:39:0F:A2:D4:41:4C:EC:82:B8:1D:1F:46:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dab207c7-5a65-3e39-af0d-606afe23c873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.226.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:be:a2:89:5b:a4:74:b3:3f:45:b3:af:1d:f8:19:9b:8f:81:
         97:cc:ed:ff:ca:12:9f:69:94:78:bc:f3:fe:eb:2d:a7:d6:d1:
         ad:05:a1:03:f3:77:1c:a5:fd:e1:39:9d:79:f4:9c:26:7a:ee:
         4f:a2:42:68:fc:08:e8:33:75:12:f8:81:aa:2e:f0:ed:c3:67:
         74:33:4f:df:4f:f2:71:ca:b9:19:45:0f:59:1e:81:dc:21:b8:
         4e:aa:01:22:aa:c7:80:47:cb:5b:25:8a:7e:49:7e:6a:2c:8c:
         52:4d:76:66:99:1d:04:16:bd:dc:64:bb:e1:28:4a:51:d1:19:
         70:54:99:0e:8c:32:5c:f3:af:ac:d9:c2:68:de:45:7a:40:15:
         bb:29:0f:28:7c:31:d2:13:0d:27:59:71:f1:41:bb:08:cc:4e:
         5f:ad:dd:be:14:9b:ac:18:fe:9c:2d:69:f9:cb:7e:94:91:18:
         c1:a2:98:59:21:d7:f6:39:bf:2e:b7:4b:70:a4:86:dd:0a:e2:
         b8:13:84:0b:4f:cb:d3:cd:f3:ea:73:65:7d:40:5d:5c:88:03:
         90:5a:91:37:34:8e:7e:98:ac:6d:e1:0e:98:ef:1f:7c:69:cf:
         7f:ad:55:b1:47:21:56:27:25:88:a2:99:64:5f:b9:56:51:d7:
         6e:88:b9:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnrfru7zrEwpOxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjQ2MjhiYmEtOTNhMi00MDMwLWJiMjUtMzYxZTUzM2E3YzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2XGJXkRdXdN37NUsWgGTDF5Gf74rsMapDK0
FUAai+4xGWKZ2u6Zr0WEsgWf2UlHj/0ADGHFMD/opH87Lnbf+bDhGWtRYD7vyNzg
MAOy4zh0dY0XW1juzC1e4WKQ2tsfzePUQMvml3a47uqIiUVT486hE78SPwdcAO73
LJDb32Oo+uGsSbv01McdUZxDmLiKsS/CbnKm/13N9WJJZK2pK658Iidle6nRcCrW
am1R9ihUf9so7HnD5uDH/IoGuo5tIMP4EYQq0rWnUTCDIuSwzZ8bYdEnMDUA0GYx
CVQcz3mwZeo1mcCDIp3Uj05/sz6Lf25odg8rz/lKJTiGnWoG9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHT93dCfsms5D6LUQUzsgrgdH0ZNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFiMjA3YzctNWE2NS0z
ZTM5LWFmMGQtNjA2YWZlMjNjODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeLiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEm+oolbpHSzP0Wzrx34GZuPgZfM7f/KEp9plHi88/7rLafW0a0FoQPz
dxyl/eE5nXn0nCZ67k+iQmj8COgzdRL4gaou8O3DZ3QzT99P8nHKuRlFD1kegdwh
uE6qASKqx4BHy1slin5JfmosjFJNdmaZHQQWvdxku+EoSlHRGXBUmQ6MMlzzr6zZ
wmjeRXpAFbspDyh8MdITDSdZcfFBuwjMTl+t3b4Um6wY/pwtafnLfpSRGMGimFkh
1/Y5vy63S3Ckht0K4rgThAtPy9PN8+pzZX1AXVyIA5BakTc0jn6YrG3hDpjvH3xp
z3+tVbFHIVYnJYiimWRfuVZR126IuTY=
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:19:29 2026 by rpki-client