Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72c4f467-a1a0-308b-90f0-835b978cc107.roa
File:                     72c4f467-a1a0-308b-90f0-835b978cc107.roa (raw, json)
Hash identifier:          PgspuGRBYRJ0jGpAfoL0hyJMAX4K7vfI7ufCAeL19RM=
Subject key identifier:   4A:EB:78:60:DE:A7:4D:AF:E5:80:82:FF:77:17:54:90:28:C1:5C:1B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF3576E04028CDCD5710FB200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72c4f467-a1a0-308b-90f0-835b978cc107.roa
Signing time:             Mon 25 May 2026 11:59:10 +0000
ROA not before:           Mon 25 May 2026 11:59:10 +0000
ROA not after:            Sun 23 Aug 2026 11:59:10 +0000
asID:                     19905
IP address blocks:        173.19.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:57:6e:04:02:8c:dc:d5:71:0f:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 25 11:59:10 2026 GMT
            Not After : Aug 23 11:59:10 2026 GMT
        Subject: CN=863cdbd5-bbde-4ce7-a3cf-23222fd85ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:8a:59:43:32:f9:b6:7b:12:5f:8f:4d:1c:
                    3f:5b:1e:d9:60:83:93:c8:a0:b9:4c:be:d7:bf:3d:
                    58:05:7e:1a:76:12:e2:2d:fd:6e:7a:a7:63:5d:c0:
                    cd:ea:8b:73:8c:c8:8d:21:44:e3:5c:83:4b:94:a8:
                    98:d7:f9:9e:03:86:a9:d5:e8:40:b0:7a:7c:06:1b:
                    11:50:87:46:a9:32:6b:2c:05:e4:14:c0:29:c1:11:
                    c7:ab:08:19:72:ca:b9:ff:45:68:62:65:b4:52:69:
                    36:62:15:44:2b:4c:28:23:4e:2e:38:b3:e4:16:a4:
                    89:01:20:67:b8:9b:66:80:73:c7:9e:d2:e1:e2:39:
                    26:64:f5:49:c1:ac:96:5e:2e:6c:59:90:d8:91:bf:
                    c8:8d:82:7e:1a:a9:33:97:0c:90:62:48:05:26:79:
                    0c:e7:b8:0f:a2:80:46:be:e3:77:a8:6a:68:8f:0b:
                    98:22:8d:fa:4c:e5:8d:78:87:a8:5c:8b:24:ae:aa:
                    f1:f7:fa:76:29:66:0b:7b:43:2d:19:3a:c9:67:1a:
                    02:3c:b0:a6:90:29:2a:fa:a7:35:6a:c0:38:df:17:
                    d3:37:e3:7e:77:85:68:9a:20:37:e7:48:84:b6:e7:
                    0e:3e:d3:ff:6b:77:8e:2a:25:76:27:eb:05:b4:2a:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EB:78:60:DE:A7:4D:AF:E5:80:82:FF:77:17:54:90:28:C1:5C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72c4f467-a1a0-308b-90f0-835b978cc107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:55:76:fa:9b:d5:23:9a:51:5b:84:71:b5:c7:14:96:70:51:
         50:d7:6f:1d:8b:ec:d1:46:ca:96:39:13:2b:81:36:b2:98:f5:
         cd:c1:1b:6d:90:b2:1c:84:2e:1c:39:d2:d9:1a:ff:a2:fc:4b:
         7f:60:7c:6c:5e:a9:9d:83:1f:09:68:59:6a:82:9c:7a:11:ef:
         0f:64:07:3b:3c:19:1a:1e:91:fc:ca:02:26:6a:14:88:b7:65:
         44:93:33:70:d6:ca:2f:52:84:8e:d7:7e:01:4d:7f:91:93:ba:
         d1:4f:8c:24:16:fe:b5:fc:4a:77:c2:ac:a2:ad:9a:9c:8a:5a:
         34:e1:11:49:a5:06:5d:c3:ed:df:4a:d4:6d:09:e7:72:17:bd:
         c1:96:65:45:75:77:89:f5:d4:46:e0:da:6a:ca:01:d2:43:da:
         11:70:bc:be:1c:36:a8:c1:95:c7:87:c6:52:89:01:41:2b:bc:
         39:5f:0f:00:ab:21:67:64:36:5b:3a:ee:41:a0:56:b1:d1:48:
         49:1b:22:fd:72:44:66:ab:26:d1:2a:3f:97:8e:42:3d:ec:54:
         14:0c:0a:e3:fa:a4:23:7f:03:41:ab:15:f5:1e:01:4c:5f:39:
         27:74:56:22:86:17:bd:00:ac:f6:af:84:89:7b:80:b0:ef:d8:
         27:69:cd:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zV24EAozc1XEPsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUyNTExNTkxMFoXDTI2MDgyMzExNTkxMFowLzEtMCsGA1UEAxMk
ODYzY2RiZDUtYmJkZS00Y2U3LWEzY2YtMjMyMjJmZDg1Y2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR2KWUMy+bZ7El+PTRw/Wx7ZYIOTyKC5TL7X
vz1YBX4adhLiLf1ueqdjXcDN6otzjMiNIUTjXINLlKiY1/meA4ap1ehAsHp8BhsR
UIdGqTJrLAXkFMApwRHHqwgZcsq5/0VoYmW0Umk2YhVEK0woI04uOLPkFqSJASBn
uJtmgHPHntLh4jkmZPVJwayWXi5sWZDYkb/IjYJ+GqkzlwyQYkgFJnkM57gPooBG
vuN3qGpojwuYIo36TOWNeIeoXIskrqrx9/p2KWYLe0MtGTrJZxoCPLCmkCkq+qc1
asA43xfTN+N+d4VomiA350iEtucOPtP/a3eOKiV2J+sFtCpGrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErreGDep02v5YCC/3cXVJAowVwbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzJjNGY0NjctYTFhMC0z
MDhiLTkwZjAtODM1Yjk3OGNjMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRPwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdVdvqb1SOaUVuEcbXHFJZwUVDXbx2L7NFGypY5EyuBNrKY9c3BG22Q
shyELhw50tka/6L8S39gfGxeqZ2DHwloWWqCnHoR7w9kBzs8GRoekfzKAiZqFIi3
ZUSTM3DWyi9ShI7XfgFNf5GTutFPjCQW/rX8SnfCrKKtmpyKWjThEUmlBl3D7d9K
1G0J53IXvcGWZUV1d4n11Ebg2mrKAdJD2hFwvL4cNqjBlceHxlKJAUErvDlfDwCr
IWdkNls67kGgVrHRSEkbIv1yRGarJtEqP5eOQj3sVBQMCuP6pCN/A0GrFfUeAUxf
OSd0ViKGF70ArPavhIl7gLDv2CdpzdY=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:19:54 2026 by rpki-client