Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcb6b845-a2c5-3ea7-814d-dc188729996e.roa
File:                     dcb6b845-a2c5-3ea7-814d-dc188729996e.roa (raw, json)
Hash identifier:          sYMeLLmBnR/xzN+q+yH7o6m9KwX7z650qfHSLAhvST4=
Subject key identifier:   D2:6E:01:7B:4F:09:FB:B8:F2:B8:E0:DC:50:F8:AC:91:19:19:5D:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE576DD4ED7B802EF489B7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcb6b845-a2c5-3ea7-814d-dc188729996e.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        73.10.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:6d:d4:ed:7b:80:2e:f4:89:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=e9abfb7f-7edf-4af6-8da1-6d54007328b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fb:95:dd:fc:aa:ff:67:05:71:d9:39:90:3d:
                    a4:f7:bf:f1:52:f0:b3:ac:7b:a0:51:40:ad:e7:8d:
                    4f:12:37:bd:1e:14:0e:72:d4:bc:80:da:34:bb:c1:
                    ad:14:fa:2e:c9:a6:fd:49:45:f8:e3:ac:d3:20:1e:
                    86:18:d7:b5:24:b4:1b:ad:27:f2:36:c7:02:48:a6:
                    35:e9:42:db:05:9c:1a:6c:1d:89:3c:14:3d:64:9e:
                    df:2a:de:1c:57:8c:85:a7:23:4d:b0:00:f8:b9:c9:
                    98:70:ec:87:99:7d:e2:4d:82:9e:2b:b5:a6:ba:6e:
                    f9:3d:e6:f1:4f:08:a4:bc:4f:fb:f3:21:96:68:15:
                    9d:ba:c0:1a:b9:6d:c1:0d:3f:24:64:6c:a7:9a:18:
                    27:b4:a5:c3:c9:65:a1:87:1a:ed:fa:0f:31:83:37:
                    5b:6d:6c:e0:24:13:5c:e7:3d:15:fb:54:5a:b6:c6:
                    d0:91:89:be:45:9f:5f:79:8e:c1:46:7a:b3:91:9c:
                    f9:ef:6b:91:75:48:00:71:e1:ef:2e:89:31:b0:af:
                    fc:6c:9c:41:04:a3:98:64:09:34:bf:94:87:d1:61:
                    e2:44:c8:f7:c6:26:04:eb:b0:79:b1:f7:2b:69:58:
                    7f:63:fb:41:91:86:e9:59:f4:89:7e:33:1f:15:69:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6E:01:7B:4F:09:FB:B8:F2:B8:E0:DC:50:F8:AC:91:19:19:5D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcb6b845-a2c5-3ea7-814d-dc188729996e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.10.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:fb:ac:e3:72:34:12:1d:1f:de:ac:30:b7:ad:67:36:ea:b1:
         a0:c5:53:de:ba:7a:c4:e6:ba:ac:be:b2:d7:50:44:0c:36:ca:
         d5:88:69:8a:e3:d6:38:fe:8d:85:ad:40:46:e2:88:7f:5f:c1:
         4e:1f:65:bb:2e:c4:0d:76:ae:8f:22:a7:52:12:fd:71:18:0f:
         a6:67:6e:d7:b2:01:e5:63:ed:9e:e9:41:90:b8:a3:e8:55:54:
         d2:ab:1b:ae:c1:f2:45:51:5a:f8:06:d2:5f:57:c1:3f:bf:63:
         52:af:9e:a0:a9:a7:70:65:dc:9c:ce:f8:7a:5b:3e:58:11:ea:
         74:fa:68:9f:c2:f1:2a:f7:ac:a7:e3:07:6b:84:4a:8e:63:ef:
         18:8b:b7:9d:75:7a:50:08:9c:de:6e:06:5e:72:29:b5:71:c1:
         1c:eb:ac:e9:4e:9a:6f:7e:3b:d8:18:ea:fc:8c:92:41:e7:5d:
         57:27:8e:bc:29:bb:00:2b:92:37:15:54:56:37:01:d5:8b:e0:
         fd:78:20:ec:73:0e:96:c1:bf:2d:54:ff:25:04:df:00:30:47:
         47:2f:14:9d:29:ea:d3:0d:b8:81:77:2d:c1:c4:7a:79:87:de:
         10:27:e1:7d:89:b4:26:b6:28:26:ca:fc:ca:85:7d:d0:bd:f4:
         10:9e:43:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV23U7XuALvSJt8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTlhYmZiN2YtN2VkZi00YWY2LThkYTEtNmQ1NDAwNzMyOGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vuV3fyq/2cFcdk5kD2k97/xUvCzrHugUUCt
541PEje9HhQOctS8gNo0u8GtFPouyab9SUX446zTIB6GGNe1JLQbrSfyNscCSKY1
6ULbBZwabB2JPBQ9ZJ7fKt4cV4yFpyNNsAD4ucmYcOyHmX3iTYKeK7Wmum75Pebx
TwikvE/78yGWaBWdusAauW3BDT8kZGynmhgntKXDyWWhhxrt+g8xgzdbbWzgJBNc
5z0V+1RatsbQkYm+RZ9feY7BRnqzkZz572uRdUgAceHvLokxsK/8bJxBBKOYZAk0
v5SH0WHiRMj3xiYE67B5sfcraVh/Y/tBkYbpWfSJfjMfFWlgOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJuAXtPCfu48rjg3FD4rJEZGV15MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGNiNmI4NDUtYTJjNS0z
ZWE3LTgxNGQtZGMxODg3Mjk5OTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQpYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL/7rONyNBIdH96sMLetZzbqsaDFU966esTmuqy+stdQRAw2ytWIaYrj
1jj+jYWtQEbiiH9fwU4fZbsuxA12ro8ip1IS/XEYD6ZnbteyAeVj7Z7pQZC4o+hV
VNKrG67B8kVRWvgG0l9XwT+/Y1KvnqCpp3Bl3JzO+HpbPlgR6nT6aJ/C8Sr3rKfj
B2uESo5j7xiLt511elAInN5uBl5yKbVxwRzrrOlOmm9+O9gY6vyMkkHnXVcnjrwp
uwArkjcVVFY3AdWL4P14IOxzDpbBvy1U/yUE3wAwR0cvFJ0p6tMNuIF3LcHEenmH
3hAn4X2JtCa2KCbK/MqFfdC99BCeQ5U=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:17 2026 by rpki-client