Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d67e2679-8bba-33e7-b5c3-b6ec164c0671.roa
File:                     d67e2679-8bba-33e7-b5c3-b6ec164c0671.roa (raw, json)
Hash identifier:          d60oFlq+6xLajZWHBjv91lKE2eENBb1hi7Iq5nhj0A0=
Subject key identifier:   1C:36:30:9B:63:3A:D7:E0:10:F3:F7:61:F2:5C:32:23:9A:48:13:46
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584FA85E5001BC950A55E42B1780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d67e2679-8bba-33e7-b5c3-b6ec164c0671.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     36522
IP address blocks:        207.164.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:50:01:bc:95:0a:55:e4:2b:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=d5186f46-e8f2-48a3-a054-31a307b3305d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:d4:34:f2:5f:5a:4a:16:f5:56:84:7d:0e:
                    bd:2a:9c:03:77:54:84:79:47:64:e2:20:fb:34:65:
                    f4:14:c3:c2:77:fb:52:be:22:73:d1:29:94:90:9b:
                    a2:24:c3:a1:3f:9d:ef:c3:13:1d:3c:4b:c9:4f:a5:
                    84:b5:21:50:9d:fd:21:01:fa:2d:48:bf:e7:24:6e:
                    e1:47:e0:78:80:74:c0:a1:6f:ce:31:6c:9a:db:da:
                    13:ef:28:58:3f:4f:78:19:24:e2:03:e7:41:ad:13:
                    fb:9a:aa:2b:62:8b:fe:bb:8b:c9:c2:2b:47:79:ed:
                    36:52:53:0d:3d:7a:dd:54:ce:dd:36:e3:d8:4e:6a:
                    1f:f6:8f:9b:b9:2a:fe:21:05:37:6b:c7:af:8b:ac:
                    c1:99:11:43:6c:b2:a5:fe:96:66:74:62:02:72:d6:
                    75:f4:7c:f8:46:7f:c0:18:25:cc:47:8a:05:1b:eb:
                    d9:79:d1:fb:9c:72:6c:8d:10:e8:93:b6:43:cc:d4:
                    0c:c1:c3:0c:92:f9:b8:2d:2b:45:a6:ef:27:45:a0:
                    e1:8d:e8:ac:9b:8e:a2:bc:24:16:e8:89:2d:f9:fa:
                    dc:5a:54:47:87:1a:38:cc:1d:88:b5:37:53:a7:6b:
                    e0:77:86:9b:05:28:db:08:3a:24:1b:97:d4:b9:b6:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:36:30:9B:63:3A:D7:E0:10:F3:F7:61:F2:5C:32:23:9A:48:13:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d67e2679-8bba-33e7-b5c3-b6ec164c0671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:2d:ae:33:2b:69:89:bb:dc:ff:d0:b5:2f:d0:82:10:e6:
         fc:a2:de:3d:df:be:0c:ef:dc:1a:49:73:d4:52:db:67:10:60:
         fb:10:ab:54:78:5f:01:ab:b5:9b:52:17:b3:11:3f:be:de:f2:
         ea:d2:19:38:0c:9b:7e:e4:4d:2a:76:68:ad:71:88:2a:36:7c:
         1b:6c:05:72:17:ff:de:a2:8b:aa:c5:33:37:77:f2:a8:73:7d:
         d1:0f:11:a0:49:12:ab:a9:67:38:4b:42:2f:c0:1b:f7:19:2f:
         e8:31:eb:32:e2:1e:f0:fa:20:31:53:78:b4:19:06:76:4c:0c:
         44:32:3f:41:3f:18:c4:bc:29:7d:e8:5d:96:7f:59:95:54:cf:
         45:26:47:dc:0b:9e:66:75:19:22:c5:8b:be:cf:40:59:f7:8f:
         a7:ef:0b:e3:b5:ee:dd:01:3d:ef:9f:a9:93:46:82:22:9d:d4:
         3d:74:83:05:d8:73:83:79:b2:28:90:a6:8f:d7:03:95:1d:ad:
         30:81:1f:a2:87:f2:b5:6d:35:fe:17:7a:a3:de:47:4c:a1:f7:
         85:8b:29:49:5a:03:b7:68:02:17:3a:3b:69:e0:82:a7:f1:59:
         35:bd:b5:e2:0f:c9:47:89:99:66:7b:f6:31:ad:3b:57:e0:fa:
         d6:35:dc:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXlABvJUKVeQrF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZDUxODZmNDYtZThmMi00OGEzLWEwNTQtMzFhMzA3YjMzMDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP/UNPJfWkoW9VaEfQ69KpwDd1SEeUdk4iD7
NGX0FMPCd/tSviJz0SmUkJuiJMOhP53vwxMdPEvJT6WEtSFQnf0hAfotSL/nJG7h
R+B4gHTAoW/OMWya29oT7yhYP094GSTiA+dBrRP7mqorYov+u4vJwitHee02UlMN
PXrdVM7dNuPYTmof9o+buSr+IQU3a8evi6zBmRFDbLKl/pZmdGICctZ19Hz4Rn/A
GCXMR4oFG+vZedH7nHJsjRDok7ZDzNQMwcMMkvm4LStFpu8nRaDhjeism46ivCQW
6Ikt+frcWlRHhxo4zB2ItTdTp2vgd4abBSjbCDokG5fUubb4uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBw2MJtjOtfgEPP3YfJcMiOaSBNGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDY3ZTI2NzktOGJiYS0z
M2U3LWI1YzMtYjZlYzE2NGMwNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6RJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFK0La4zK2mJu9z/0LUv0IIQ5vyi3j3fvgzv3BpJc9RS22cQYPsQq1R4
XwGrtZtSF7MRP77e8urSGTgMm37kTSp2aK1xiCo2fBtsBXIX/96ii6rFMzd38qhz
fdEPEaBJEqupZzhLQi/AG/cZL+gx6zLiHvD6IDFTeLQZBnZMDEQyP0E/GMS8KX3o
XZZ/WZVUz0UmR9wLnmZ1GSLFi77PQFn3j6fvC+O17t0BPe+fqZNGgiKd1D10gwXY
c4N5siiQpo/XA5UdrTCBH6KH8rVtNf4XeqPeR0yh94WLKUlaA7doAhc6O2nggqfx
WTW9teIPyUeJmWZ79jGtO1fg+tY13KU=
-----END CERTIFICATE-----
Generated at Sat Oct 31 01:13:53 2026 by rpki-client