Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0ae96e0-211c-33b9-a383-bcfab2f90484.roa
File:                     e0ae96e0-211c-33b9-a383-bcfab2f90484.roa (raw, json)
Hash identifier:          DcvaCaflpcFHzLiveJIL+0FlFiBXjLwB/1JcgHCxHZU=
Subject key identifier:   09:7A:5F:4C:1E:EA:5D:1D:ED:43:18:22:6A:7E:CE:1A:CA:00:03:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA6BB2259E865631754300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0ae96e0-211c-33b9-a383-bcfab2f90484.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        73.25.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:6b:b2:25:9e:86:56:31:75:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=946d7837-8958-4ede-8c99-2aa492f38438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:a5:31:2f:e7:26:ab:bb:85:6b:e9:e6:a7:
                    6e:04:c8:55:5c:fb:c0:07:51:66:ea:38:8c:39:66:
                    6b:10:ff:f4:c6:7a:0a:3e:cd:45:e8:d0:5b:98:b5:
                    eb:9e:fb:68:9f:b9:e2:b9:90:6d:51:0d:42:07:6e:
                    59:7d:07:61:f8:6f:ee:9d:ec:4e:a6:91:45:90:9c:
                    0e:3c:e2:6c:fd:5b:e2:b5:fc:ca:de:1c:33:e6:f4:
                    bd:f6:01:e0:f6:cb:c7:e4:07:be:4a:93:b5:05:86:
                    88:77:da:ba:b6:2e:ee:4f:df:de:7b:8a:73:00:3d:
                    0e:6f:92:44:78:3e:1e:7e:f6:76:67:13:50:e8:0e:
                    7e:87:ea:e7:90:87:db:48:b2:dc:a3:9c:39:76:eb:
                    73:ea:54:18:8a:af:a4:4a:a2:52:d8:30:0c:ee:a3:
                    8f:42:93:23:df:12:23:ac:9f:86:3f:f8:b5:4c:8a:
                    e9:8a:b1:03:9f:a9:e5:2a:35:bb:4e:b7:be:49:2f:
                    3c:47:06:aa:a4:52:aa:02:e6:1a:bd:ed:44:48:3d:
                    80:57:b0:09:b6:59:57:5f:6c:ae:16:d3:3a:33:8f:
                    2a:9e:28:9f:37:87:6b:d5:55:5e:69:16:1c:a0:6e:
                    8b:42:ed:97:da:f0:87:06:03:35:c8:21:87:5e:40:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7A:5F:4C:1E:EA:5D:1D:ED:43:18:22:6A:7E:CE:1A:CA:00:03:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0ae96e0-211c-33b9-a383-bcfab2f90484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.25.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:07:1f:3e:9e:e0:4a:ee:52:64:e9:2a:a8:8f:cc:7c:7b:c3:
         4d:bb:85:33:36:3b:a5:e8:80:ea:30:36:bc:58:ba:e6:13:16:
         51:bb:b0:38:ab:aa:5b:71:82:89:61:84:34:12:ea:81:f7:4b:
         b0:20:34:c4:bd:b5:79:50:0a:67:dc:6c:04:33:5f:4e:18:fc:
         1a:de:5d:65:7c:bb:1e:41:79:ce:8c:68:90:af:b8:09:88:36:
         33:28:65:5e:89:ff:23:08:a0:9d:76:6a:7f:d3:b3:38:64:48:
         fc:73:ee:5a:ce:9e:8c:e5:88:fd:0e:4e:8e:c0:dc:d0:51:39:
         cb:ff:fa:bd:fc:67:1b:47:54:9b:5d:18:77:8d:6a:d6:43:05:
         25:6e:62:cb:fa:22:9e:4e:16:ee:f7:ad:f8:4f:4c:a6:8d:96:
         e3:51:e4:84:9b:76:b1:1d:2a:f6:d7:c9:57:c4:4e:ce:e5:76:
         4b:a2:d1:ab:4e:57:32:df:20:98:c9:3b:0b:8c:0b:72:0f:b3:
         dc:25:c2:97:4f:ff:24:cc:04:aa:c1:a7:99:8f:7a:f7:18:5c:
         47:4d:21:27:9a:91:66:8e:d4:f1:38:dd:29:83:5b:a8:15:88:
         bd:69:72:8e:5b:47:5a:af:14:f0:d0:a9:32:2e:93:00:94:f4:
         0d:66:63:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VumuyJZ6GVjF1QwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
OTQ2ZDc4MzctODk1OC00ZWRlLThjOTktMmFhNDkyZjM4NDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ2lMS/nJqu7hWvp5qduBMhVXPvAB1Fm6jiM
OWZrEP/0xnoKPs1F6NBbmLXrnvton7niuZBtUQ1CB25ZfQdh+G/unexOppFFkJwO
POJs/VvitfzK3hwz5vS99gHg9svH5Ae+SpO1BYaId9q6ti7uT9/ee4pzAD0Ob5JE
eD4efvZ2ZxNQ6A5+h+rnkIfbSLLco5w5dutz6lQYiq+kSqJS2DAM7qOPQpMj3xIj
rJ+GP/i1TIrpirEDn6nlKjW7Tre+SS88RwaqpFKqAuYave1ESD2AV7AJtllXX2yu
FtM6M48qniifN4dr1VVeaRYcoG6LQu2X2vCHBgM1yCGHXkAg/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAl6X0we6l0d7UMYImp+zhrKAAMZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTBhZTk2ZTAtMjExYy0z
M2I5LWEzODMtYmNmYWIyZjkwNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRkUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgHHz6e4EruUmTpKqiPzHx7w027hTM2O6XogOowNrxYuuYTFlG7sDir
qltxgolhhDQS6oH3S7AgNMS9tXlQCmfcbAQzX04Y/BreXWV8ux5Bec6MaJCvuAmI
NjMoZV6J/yMIoJ12an/TszhkSPxz7lrOnozliP0OTo7A3NBROcv/+r38ZxtHVJtd
GHeNatZDBSVuYsv6Ip5OFu73rfhPTKaNluNR5ISbdrEdKvbXyVfETs7ldkui0atO
VzLfIJjJOwuMC3IPs9wlwpdP/yTMBKrBp5mPevcYXEdNISeakWaO1PE43SmDW6gV
iL1pco5bR1qvFPDQqTIukwCU9A1mYxo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:33:35 2026 by rpki-client