Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e42183e8-1e17-3043-9ec3-3f3f697b4738.roa
File:                     e42183e8-1e17-3043-9ec3-3f3f697b4738.roa (raw, json)
Hash identifier:          RspZgD/Hxf+xLJOf8/kd+tKrWtdZe/BWxAGYZoyacOU=
Subject key identifier:   0C:A8:C0:75:AC:2A:CB:16:0E:41:95:5D:24:86:CE:45:A3:E5:B7:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5BCB5F89B0897722AADC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e42183e8-1e17-3043-9ec3-3f3f697b4738.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        71.228.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:cb:5f:89:b0:89:77:22:aa:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=0b66aa39-44be-4104-a623-bba9c12d484b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:02:9f:57:df:ae:87:da:64:a8:5e:ba:2c:bc:
                    48:d3:0e:7d:1d:8b:e9:13:aa:9e:7e:e3:3f:b7:3f:
                    46:ab:8e:0d:0b:a1:07:aa:6f:80:2e:c4:45:7c:19:
                    81:dd:d0:b5:4a:df:09:4a:c6:2f:48:78:b3:ec:c2:
                    01:5c:11:f7:14:b8:00:75:f3:49:cd:f4:00:f8:02:
                    95:c6:61:af:c7:81:05:62:4d:50:10:16:81:89:59:
                    6a:24:f8:e0:1c:0b:39:f2:bf:ab:98:dc:0d:cf:82:
                    d5:34:2a:fc:bd:42:4d:55:e6:22:65:3f:3e:ff:b6:
                    5c:26:48:1d:3c:eb:d1:26:a2:fb:79:15:c7:07:49:
                    90:74:6c:b3:4a:6d:93:bd:52:68:f2:3a:73:ee:c7:
                    ae:d1:54:a4:18:ec:e7:c3:41:87:12:49:a6:f0:d7:
                    b3:10:26:8c:bd:17:e4:bd:66:23:16:d3:a6:af:00:
                    47:b7:a8:81:bf:3f:b5:21:5f:9a:e5:f9:cc:61:e5:
                    91:8b:63:32:fb:4f:c3:1a:5e:26:59:6b:34:62:ef:
                    c1:3b:0d:71:63:d8:46:e3:4b:2a:32:6e:a1:58:bd:
                    8e:95:1f:1f:87:dd:87:16:df:a4:60:62:28:65:d5:
                    15:21:5e:84:ca:a4:f5:45:66:3b:87:1c:d1:e9:48:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A8:C0:75:AC:2A:CB:16:0E:41:95:5D:24:86:CE:45:A3:E5:B7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e42183e8-1e17-3043-9ec3-3f3f697b4738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7d:2d:ed:ac:ba:f8:18:06:a2:0a:61:96:d7:e4:61:f3:8d:
         83:ed:52:13:5a:41:17:25:5d:21:db:85:3d:5c:35:b9:86:70:
         1a:1d:79:46:e0:c2:8a:be:c7:0e:84:6e:ca:82:22:a0:10:ae:
         6c:8e:dc:68:fd:7b:e8:a2:11:da:37:75:f7:4e:4f:62:cc:d9:
         21:d3:44:ff:6b:11:42:49:37:2d:2d:b9:6d:1f:cd:9d:a5:f9:
         dd:5d:d2:00:21:e8:64:93:6b:ab:90:4c:1c:3b:50:01:16:e1:
         90:c3:a6:e6:a8:ea:e9:ae:eb:d1:38:c5:d0:ab:63:b3:f9:83:
         36:ac:5b:20:f9:a0:73:c3:d1:c5:68:ed:d9:8b:9a:40:92:c4:
         dc:8c:3c:d5:f7:86:be:23:35:72:c2:4f:24:b4:9e:b7:26:81:
         e8:c8:d5:1a:bd:1a:ae:73:09:1d:72:ac:34:3a:2e:0e:b8:de:
         88:7d:75:d4:2c:f0:97:e3:b6:3d:51:53:18:4b:f6:28:f0:9a:
         1b:7f:af:c3:d9:1b:73:1b:94:d2:eb:96:14:eb:ff:34:9c:42:
         28:a5:fb:82:2f:ad:61:e1:07:f1:f9:39:e8:66:8f:0f:2c:59:
         81:8f:70:02:d3:38:90:86:54:f8:d2:7b:8f:20:2a:31:08:e4:
         6f:e3:64:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8tfibCJdyKq3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MGI2NmFhMzktNDRiZS00MTA0LWE2MjMtYmJhOWMxMmQ0ODRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAKfV9+uh9pkqF66LLxI0w59HYvpE6qefuM/
tz9Gq44NC6EHqm+ALsRFfBmB3dC1St8JSsYvSHiz7MIBXBH3FLgAdfNJzfQA+AKV
xmGvx4EFYk1QEBaBiVlqJPjgHAs58r+rmNwNz4LVNCr8vUJNVeYiZT8+/7ZcJkgd
POvRJqL7eRXHB0mQdGyzSm2TvVJo8jpz7seu0VSkGOznw0GHEkmm8NezECaMvRfk
vWYjFtOmrwBHt6iBvz+1IV+a5fnMYeWRi2My+0/DGl4mWWs0Yu/BOw1xY9hG40sq
Mm6hWL2OlR8fh92HFt+kYGIoZdUVIV6EyqT1RWY7hxzR6UjWuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyowHWsKssWDkGVXSSGzkWj5beDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTQyMTgzZTgtMWUxNy0z
MDQzLTllYzMtM2YzZjY5N2I0NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+QUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHh9Le2suvgYBqIKYZbX5GHzjYPtUhNaQRclXSHbhT1cNbmGcBodeUbg
woq+xw6EbsqCIqAQrmyO3Gj9e+iiEdo3dfdOT2LM2SHTRP9rEUJJNy0tuW0fzZ2l
+d1d0gAh6GSTa6uQTBw7UAEW4ZDDpuao6umu69E4xdCrY7P5gzasWyD5oHPD0cVo
7dmLmkCSxNyMPNX3hr4jNXLCTyS0nrcmgejI1Rq9Gq5zCR1yrDQ6Lg643oh9ddQs
8Jfjtj1RUxhL9ijwmht/r8PZG3MblNLrlhTr/zScQiil+4IvrWHhB/H5Oehmjw8s
WYGPcALTOJCGVPjSe48gKjEI5G/jZMU=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:43:21 2026 by rpki-client