Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8270622c-2c3e-393b-a1e5-b7ac0936cb76.roa
File:                     8270622c-2c3e-393b-a1e5-b7ac0936cb76.roa (raw, json)
Hash identifier:          +0Nw8gJYL6vegeCNJ83COk02N6usS1g0dqo/DyuxWM0=
Subject key identifier:   B5:B7:A5:87:47:2D:CE:4D:E3:50:AB:A8:A0:43:BB:B3:96:0F:11:1D
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584B507DE2699396FD599700AF00
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8270622c-2c3e-393b-a1e5-b7ac0936cb76.roa
Signing time:             Thu 25 Sep 2025 18:26:01 +0000
ROA not before:           Thu 25 Sep 2025 18:26:01 +0000
ROA not after:            Wed 24 Dec 2025 19:26:01 +0000
asID:                     16509
IP address blocks:        72.1.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:50:7d:e2:69:93:96:fd:59:97:00:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep 25 18:26:01 2025 GMT
            Not After : Dec 24 19:26:01 2025 GMT
        Subject: CN=56bfb09e-01ee-4c4c-9d94-eee41506cc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:72:ae:3c:78:76:bb:8f:6d:d9:89:4c:41:
                    c8:c2:01:bb:db:9d:6b:cb:e0:84:cf:e4:0b:7c:d5:
                    6d:5d:c9:b9:61:1b:83:58:1f:7a:ef:b3:85:1f:4f:
                    48:42:dd:06:c4:38:f9:a3:89:a9:15:d2:dc:f5:6e:
                    2a:81:90:a7:6e:36:7b:f3:54:81:a9:91:02:bc:f4:
                    f7:38:14:ff:ba:47:ae:d8:1c:e4:77:5c:ad:3e:69:
                    d7:e5:73:25:6b:ec:54:28:c1:92:76:76:b8:1f:58:
                    61:e9:a8:6f:ca:4f:72:61:07:b7:7d:e6:f1:63:dd:
                    dc:8c:1e:90:56:f1:e2:8a:5a:41:52:8e:cd:4a:a9:
                    67:46:45:32:71:3a:7b:07:73:54:2e:bd:08:4f:64:
                    c8:5b:8c:6b:2c:84:4a:07:c0:c3:93:bf:9f:6b:65:
                    6f:c7:f8:6b:9a:9d:7b:ae:b8:96:fa:b3:55:aa:75:
                    e8:a1:78:03:0c:1b:2f:b0:bb:25:32:3c:ce:4e:61:
                    3a:10:bf:bc:76:a5:46:54:95:ce:3b:1e:cf:fe:8e:
                    05:6d:96:23:b5:7d:cd:62:f0:0c:8b:e4:9d:9a:cd:
                    63:c8:9c:9d:34:ff:46:02:92:3c:95:79:b5:46:04:
                    0a:06:14:31:02:be:c8:39:4d:a0:b3:55:63:a0:f6:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B7:A5:87:47:2D:CE:4D:E3:50:AB:A8:A0:43:BB:B3:96:0F:11:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8270622c-2c3e-393b-a1e5-b7ac0936cb76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:56:65:b0:56:63:17:75:16:a9:4b:37:64:11:75:b5:b6:1d:
         d1:c8:b3:36:08:9e:8b:9d:ba:f4:cd:fd:13:fa:6b:2b:72:86:
         09:0d:46:e1:3b:50:30:9a:06:6f:b7:69:72:7e:e0:76:c4:05:
         b8:6d:86:5d:33:e1:ce:e2:42:ef:a9:0c:26:f9:41:fc:03:9a:
         d9:8c:ae:55:19:05:49:43:5c:bd:8a:f9:1d:86:06:e8:bb:d8:
         3b:8c:0e:83:9b:51:a8:75:cf:cc:88:34:e5:7e:b9:1a:bc:f9:
         03:d8:92:b0:48:c8:8e:92:fa:8f:aa:77:1c:b2:ac:68:77:87:
         33:01:b8:c1:45:5e:a1:6a:84:e5:e4:10:db:5f:7e:32:0c:8a:
         16:cd:86:eb:67:82:c6:2f:d8:de:cb:f7:b3:9f:f8:15:05:12:
         de:97:4f:b5:4a:74:91:58:05:9e:f1:0a:86:34:54:0c:9f:c2:
         df:f5:d9:f7:d0:e9:3a:bf:89:86:2a:e8:cc:6e:0e:93:2a:45:
         63:9b:19:c9:7c:b3:f3:73:95:f5:b7:e2:b9:e0:d3:8c:50:c2:
         d3:f3:a8:e5:71:9f:a5:78:1f:b1:fc:80:2a:09:26:f8:ee:f1:
         41:cc:86:b9:0c:14:5b:f9:bd:39:32:9f:4e:47:b1:61:a9:05:
         e5:a9:07:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtQfeJpk5b9WZcArwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI1MDkyNTE4MjYwMVoXDTI1MTIyNDE5MjYwMVowLzEtMCsGA1UEAxMk
NTZiZmIwOWUtMDFlZS00YzRjLTlkOTQtZWVlNDE1MDZjYzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaRyrjx4druPbdmJTEHIwgG7251ry+CEz+QL
fNVtXcm5YRuDWB9677OFH09IQt0GxDj5o4mpFdLc9W4qgZCnbjZ781SBqZECvPT3
OBT/ukeu2Bzkd1ytPmnX5XMla+xUKMGSdna4H1hh6ahvyk9yYQe3febxY93cjB6Q
VvHiilpBUo7NSqlnRkUycTp7B3NULr0IT2TIW4xrLIRKB8DDk7+fa2Vvx/hrmp17
rriW+rNVqnXooXgDDBsvsLslMjzOTmE6EL+8dqVGVJXOOx7P/o4FbZYjtX3NYvAM
i+Sdms1jyJydNP9GApI8lXm1RgQKBhQxAr7IOU2gs1VjoPb6zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLW3pYdHLc5N41CrqKBDu7OWDxEdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvODI3MDYyMmMtMmMzZS0z
OTNiLWExZTUtYjdhYzA5MzZjYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAFIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBWZbBWYxd1FqlLN2QRdbW2HdHIszYInouduvTN/RP6aytyhgkNRuE7
UDCaBm+3aXJ+4HbEBbhthl0z4c7iQu+pDCb5QfwDmtmMrlUZBUlDXL2K+R2GBui7
2DuMDoObUah1z8yINOV+uRq8+QPYkrBIyI6S+o+qdxyyrGh3hzMBuMFFXqFqhOXk
ENtffjIMihbNhutngsYv2N7L97Of+BUFEt6XT7VKdJFYBZ7xCoY0VAyfwt/12ffQ
6Tq/iYYq6MxuDpMqRWObGcl8s/NzlfW34rng04xQwtPzqOVxn6V4H7H8gCoJJvju
8UHMhrkMFFv5vTkyn05HsWGpBeWpBxs=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:23:46 2025 by rpki-client