Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e48cbce1-bd7d-382c-acca-c8026663e5e3.roa
File:                     e48cbce1-bd7d-382c-acca-c8026663e5e3.roa (raw, json)
Hash identifier:          pc80tdXhevVZ31t8ITH55aCwOs0+QhizAoukDaxbhbQ=
Subject key identifier:   80:E7:A2:F4:65:E8:99:45:3F:5E:97:2F:7C:D5:C0:21:45:AF:14:4D
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F498A97034BC38A6B016EDE80
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e48cbce1-bd7d-382c-acca-c8026663e5e3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40934
IP address blocks:        72.1.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:97:03:4b:c3:8a:6b:01:6e:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=09c6914d-58ac-4362-8e55-94c9db06031a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:9f:59:83:f9:ff:a0:bb:71:76:bc:47:3a:
                    f8:60:7a:b6:af:03:1d:a7:36:b5:79:ed:27:fa:38:
                    d8:0b:f0:a6:27:14:ea:6b:2f:fd:20:a7:bf:d3:2a:
                    29:36:24:fc:61:f8:75:c8:c6:ba:ec:65:8d:2e:19:
                    70:f8:9d:e6:07:9c:c4:cd:72:33:59:d1:8d:aa:02:
                    f3:b2:e7:cd:7c:53:a0:c8:61:6d:db:5d:05:7f:90:
                    7e:54:b8:b3:09:2f:63:29:b0:88:c9:1f:7e:cb:89:
                    46:b0:2c:32:82:58:0a:80:3b:01:a0:e2:0d:ca:0c:
                    ee:95:bb:a4:cd:58:fd:6b:0a:08:e7:4f:2f:ec:d1:
                    c0:cd:f2:b8:99:3d:c1:22:73:6f:3b:29:ed:db:6b:
                    96:7d:1a:bd:41:9d:5d:15:fc:a4:e0:4e:1a:cb:36:
                    0a:fb:6b:c8:a8:90:8a:09:54:33:b6:97:b7:44:75:
                    e5:10:b8:bc:09:3c:68:e0:2e:92:f3:e4:9b:0e:cd:
                    70:bb:c3:13:9e:69:d4:78:03:da:d5:5f:3d:f9:1c:
                    f9:f5:5b:8f:5f:32:a0:da:4d:39:09:58:1a:50:db:
                    01:85:c9:32:19:83:5e:4a:61:a4:0c:71:0e:b3:49:
                    ed:69:09:b6:c3:db:b6:17:63:6b:ba:f8:81:3d:11:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E7:A2:F4:65:E8:99:45:3F:5E:97:2F:7C:D5:C0:21:45:AF:14:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e48cbce1-bd7d-382c-acca-c8026663e5e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:64:9a:4c:cc:07:83:a4:2c:f7:86:93:c8:b3:c2:7c:6f:
         f3:97:ab:99:49:73:49:d7:cf:e7:c6:1e:a7:59:fe:bd:c9:9d:
         17:82:c5:06:31:78:2d:36:2c:bf:c9:a5:16:c2:5a:69:62:5d:
         c9:fa:e9:48:f5:1d:15:7b:30:cf:60:02:ee:87:be:ac:aa:5f:
         df:d0:c1:7d:c0:c9:1e:73:59:ea:45:4a:eb:a8:0e:3e:2b:0a:
         99:0c:18:db:82:06:61:9a:8d:51:a8:6f:a6:18:c2:0c:c0:74:
         1b:16:de:56:24:ec:62:17:1c:d9:43:39:ef:23:01:b7:6e:c8:
         b8:3c:68:ce:01:aa:23:3e:02:cb:8f:cd:7d:7f:ff:98:64:f9:
         35:cb:f5:02:56:e7:e7:6d:95:92:43:0f:65:81:11:74:3b:24:
         cb:0a:4f:13:0e:57:26:14:8a:91:73:d8:a5:a8:9e:11:c7:02:
         ef:e1:b2:57:bd:6d:9c:eb:a4:2d:78:91:d8:aa:bf:e9:e6:d5:
         2f:f7:40:d0:25:9c:04:c8:55:0a:8d:39:be:3b:ea:90:33:01:
         de:71:d6:56:22:d5:08:ae:d7:9c:41:d3:c4:65:46:0c:e0:0c:
         21:f3:70:7e:df:5f:24:60:0e:69:4c:af:cf:c8:4d:be:b2:19:
         34:9a:be:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JipcDS8OKawFu3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDljNjkxNGQtNThhYy00MzYyLThlNTUtOTRjOWRiMDYwMzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCqfWYP5/6C7cXa8Rzr4YHq2rwMdpza1ee0n
+jjYC/CmJxTqay/9IKe/0yopNiT8Yfh1yMa67GWNLhlw+J3mB5zEzXIzWdGNqgLz
sufNfFOgyGFt210Ff5B+VLizCS9jKbCIyR9+y4lGsCwyglgKgDsBoOINygzulbuk
zVj9awoI508v7NHAzfK4mT3BInNvOynt22uWfRq9QZ1dFfyk4E4ayzYK+2vIqJCK
CVQztpe3RHXlELi8CTxo4C6S8+SbDs1wu8MTnmnUeAPa1V89+Rz59VuPXzKg2k05
CVgaUNsBhckyGYNeSmGkDHEOs0ntaQm2w9u2F2NruviBPREtswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDnovRl6JlFP16XL3zVwCFFrxRNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvZTQ4Y2JjZTEtYmQ3ZC0z
ODJjLWFjY2EtYzgwMjY2NjNlNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAFIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZ7ZJpMzAeDpCz3hpPIs8J8b/OXq5lJc0nXz+fGHqdZ/r3JnReCxQYx
eC02LL/JpRbCWmliXcn66Uj1HRV7MM9gAu6HvqyqX9/QwX3AyR5zWepFSuuoDj4r
CpkMGNuCBmGajVGob6YYwgzAdBsW3lYk7GIXHNlDOe8jAbduyLg8aM4BqiM+AsuP
zX1//5hk+TXL9QJW5+dtlZJDD2WBEXQ7JMsKTxMOVyYUipFz2KWonhHHAu/hsle9
bZzrpC14kdiqv+nm1S/3QNAlnATIVQqNOb476pAzAd5x1lYi1Qiu15xB08RlRgzg
DCHzcH7fXyRgDmlMr8/ITb6yGTSavs0=
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:37:24 2026 by rpki-client