Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/777e3fa4-d96f-3a7f-87b0-654d3a4a0a2a.roa
File:                     777e3fa4-d96f-3a7f-87b0-654d3a4a0a2a.roa (raw, json)
Hash identifier:          7W6iWR+ss07XxfY967J8zt7xW8qFhBm0JgGHcWr8CYU=
Subject key identifier:   46:51:CA:61:72:17:F9:44:A6:0F:AA:3B:07:C2:69:E6:E7:8F:51:9C
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584EDB2C9679FB3D7046F8F10880
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/777e3fa4-d96f-3a7f-87b0-654d3a4a0a2a.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     40934
IP address blocks:        72.1.64.0/24 maxlen: 24
                          176.23.128.0/24 maxlen: 24
                          176.23.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:96:79:fb:3d:70:46:f8:f1:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=a09480c6-91c8-4e1a-b542-c0ba11160f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:02:f7:98:08:2b:5b:6b:cf:5a:f9:36:89:
                    6a:5a:f7:d8:cc:1e:97:cb:db:a7:3d:4f:74:ed:f7:
                    48:a1:11:0f:46:03:be:05:0c:a9:8c:42:1d:c3:17:
                    6b:b3:bc:d8:a0:d8:87:f2:c4:ef:5f:ea:54:2a:96:
                    25:ea:67:dd:9a:ac:bb:f2:1e:fb:19:46:48:54:cf:
                    e3:c1:a1:f0:83:eb:91:08:14:7a:de:49:60:ae:8a:
                    26:52:e0:43:9d:34:6d:f3:ce:0c:90:10:81:04:97:
                    cd:5f:bc:6e:13:f7:b7:5b:27:be:87:e0:a2:4e:4d:
                    3e:8f:5b:69:d2:f7:9d:d0:c1:53:18:aa:87:61:44:
                    be:7e:8d:2b:90:cb:13:01:f1:cd:8a:8c:b1:3e:30:
                    96:00:ce:03:2a:7a:74:35:8e:a2:4c:72:72:8a:aa:
                    cd:f3:61:dd:4b:9b:7a:76:13:c7:25:1e:8b:20:b9:
                    1c:5d:82:d0:d9:1c:8c:cb:5f:00:da:a2:1f:13:9b:
                    2d:40:b3:03:16:25:82:dd:24:39:17:e1:11:89:c1:
                    c0:46:38:b5:8a:2a:ce:f9:b4:a9:f5:db:13:dd:6b:
                    30:5e:ca:0e:90:46:5c:5e:f1:5a:63:63:97:a1:59:
                    5f:3c:65:07:31:31:53:dd:d8:b2:48:5c:a8:a9:28:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:CA:61:72:17:F9:44:A6:0F:AA:3B:07:C2:69:E6:E7:8F:51:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/777e3fa4-d96f-3a7f-87b0-654d3a4a0a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.64.0/24
                  176.23.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:ac:cb:91:06:f7:9c:b1:48:7c:19:a2:9a:a9:9f:60:ec:
         bd:bd:a2:de:f3:33:7c:96:78:e1:4b:09:46:52:17:2f:ec:ce:
         f3:f3:66:41:bb:88:fc:2b:84:6e:ac:aa:78:08:c8:74:82:1b:
         bd:c6:b1:a5:67:5e:ab:3c:bd:ad:4f:6f:43:c6:7e:81:98:a6:
         bf:a3:2b:af:4c:60:16:29:d6:c2:a3:b1:d2:1a:c9:2f:26:81:
         b3:47:a8:57:5b:be:3a:53:4f:27:d6:52:5b:4a:5a:c3:ea:78:
         2a:c8:5f:a4:2c:15:a2:5c:6f:20:8b:b5:fa:53:ed:f8:23:14:
         6d:d0:dc:17:f5:1a:ce:71:2b:f4:da:ce:eb:97:14:ab:96:e0:
         88:90:6c:01:e5:b4:ef:75:3b:ad:8f:ef:48:c3:36:7b:50:78:
         e5:d3:5e:0e:83:01:2c:69:35:b0:f0:08:60:d2:bd:aa:49:e9:
         dd:79:55:cb:c5:79:01:91:35:74:65:7f:a4:1a:71:8f:62:70:
         8a:4a:f6:08:e0:4f:77:d5:8b:41:01:07:af:9b:6d:11:eb:ef:
         0a:79:8e:fa:46:59:e2:72:6f:36:2b:51:7a:79:82:81:3c:72:
         d3:52:62:e4:e2:67:e6:19:01:fc:60:e0:05:1f:a0:c5:cd:f3:
         c1:bc:4e:d6
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7bLJZ5+z1wRvjxCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk
YTA5NDgwYzYtOTFjOC00ZTFhLWI1NDItYzBiYTExMTYwZjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdUC95gIK1trz1r5NolqWvfYzB6Xy9unPU90
7fdIoREPRgO+BQypjEIdwxdrs7zYoNiH8sTvX+pUKpYl6mfdmqy78h77GUZIVM/j
waHwg+uRCBR63klgroomUuBDnTRt884MkBCBBJfNX7xuE/e3Wye+h+CiTk0+j1tp
0ved0MFTGKqHYUS+fo0rkMsTAfHNioyxPjCWAM4DKnp0NY6iTHJyiqrN82HdS5t6
dhPHJR6LILkcXYLQ2RyMy18A2qIfE5stQLMDFiWC3SQ5F+ERicHARji1iirO+bSp
9dsT3WswXsoOkEZcXvFaY2OXoVlfPGUHMTFT3diySFyoqShJZwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEZRymFyF/lEpg+qOwfCaebnj1GcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvNzc3ZTNmYTQtZDk2Zi0z
YTdmLTg3YjAtNjU0ZDNhNGEwYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASAFAAwQB
sBeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAD0IrMuRBvecsUh8GaKaqZ9g7L29ot7zM3yWeOFLCUZSFy/s
zvPzZkG7iPwrhG6sqngIyHSCG73GsaVnXqs8va1Pb0PGfoGYpr+jK69MYBYp1sKj
sdIayS8mgbNHqFdbvjpTTyfWUltKWsPqeCrIX6QsFaJcbyCLtfpT7fgjFG3Q3Bf1
Gs5xK/TazuuXFKuW4IiQbAHltO91O62P70jDNntQeOXTXg6DASxpNbDwCGDSvapJ
6d15VcvFeQGRNXRlf6QacY9icIpK9gjgT3fVi0EBB6+bbRHr7wp5jvpGWeJybzYr
UXp5goE8ctNSYuTiZ+YZAfxg4AUfoMXN88G8TtY=
-----END CERTIFICATE-----
Generated at Mon Sep 14 19:50:03 2026 by rpki-client