Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2aa07d97-8874-3082-bd20-3dc2c28806cc.roa
File:                     2aa07d97-8874-3082-bd20-3dc2c28806cc.roa (raw, json)
Hash identifier:          M6gTf36/B1+oTTAbo5xkMa11WO4/2xfBpoOYzkefy9I=
Subject key identifier:   B8:2B:2C:E0:03:A8:69:96:EA:37:20:08:B9:CC:54:DE:05:0C:2F:0D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EB2B1A65167CCEA54C858DD00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2aa07d97-8874-3082-bd20-3dc2c28806cc.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     19905
IP address blocks:        72.255.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a6:51:67:cc:ea:54:c8:58:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=20fd9525-77e9-4c41-a265-19d4b2c753f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:ee:40:f1:c9:bd:93:df:a5:7e:42:0a:da:
                    53:d7:33:49:04:86:13:d3:79:30:01:9e:de:b9:2e:
                    93:3f:d9:8b:04:38:cf:c7:69:bc:68:e2:fa:60:a4:
                    54:37:58:67:16:f2:fe:05:1d:8a:6f:31:bd:30:92:
                    f3:0f:19:0b:2a:c7:83:44:c1:8a:2c:e8:03:18:3e:
                    e2:2f:20:bb:25:cb:41:28:6b:f3:7b:8b:76:27:40:
                    8d:a3:3f:d6:a8:45:69:ca:4d:e8:1b:e5:48:a2:1b:
                    d3:55:d3:fe:67:eb:33:96:e6:09:66:f0:32:a1:18:
                    4b:da:e3:d0:1b:90:78:81:53:b1:f8:79:05:88:ea:
                    2f:cb:25:db:93:ac:f4:8f:ca:4f:03:eb:b6:b8:ae:
                    7e:e7:ca:33:6f:08:bc:c5:c9:af:c4:54:2d:66:b4:
                    d2:3f:f9:86:85:2a:4b:a3:f2:1d:2d:cc:7b:13:d6:
                    6d:a5:d8:ca:c9:e0:76:20:6b:9c:b1:a4:8a:83:54:
                    8d:df:65:bf:73:90:c8:da:b7:37:53:74:e4:63:dc:
                    4f:c3:d8:9e:76:83:77:f1:e9:90:69:9e:82:58:0d:
                    a5:6e:5b:f6:c1:b6:b4:5c:03:72:e5:5f:be:77:e2:
                    86:a1:66:1b:20:1f:cf:0b:17:78:e5:23:62:ba:61:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2B:2C:E0:03:A8:69:96:EA:37:20:08:B9:CC:54:DE:05:0C:2F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2aa07d97-8874-3082-bd20-3dc2c28806cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:cc:6e:b6:e6:4e:10:55:59:f5:ea:1c:45:c6:68:ba:94:
         55:bc:60:b0:fc:13:fc:e3:d2:5a:07:e3:d2:1c:d1:7f:a0:d5:
         99:c6:f0:db:c8:b5:f0:76:c3:b7:6c:54:ac:49:24:d1:6e:52:
         fd:d8:f0:cf:74:11:32:22:9d:4e:8c:64:fe:bd:6f:b2:52:6a:
         3e:d6:49:71:d3:ae:22:6a:23:89:e4:75:54:d6:9b:d5:22:95:
         d3:b6:c0:23:45:a5:e8:c8:28:4b:57:be:a0:ed:d7:ca:2d:c6:
         88:9e:0f:62:87:8c:7f:ee:63:9c:fd:b3:d4:2c:3d:a4:57:fb:
         80:8c:22:8d:c1:1f:e2:e7:b2:ba:0d:1d:2a:b3:68:17:37:b9:
         04:75:42:81:ee:fa:74:04:ea:98:c4:96:56:d2:91:89:8d:17:
         bf:8e:99:02:7a:b3:6d:22:d3:c6:e6:f1:85:b6:54:2d:00:44:
         4e:7b:81:95:8c:d3:b1:84:05:93:b6:60:30:cc:32:28:db:82:
         1c:cd:6c:f7:03:29:fe:da:12:3a:f4:9c:9b:1d:67:0f:0d:26:
         82:d1:4b:a9:80:2e:5b:56:2d:bd:88:cd:36:e4:61:da:2e:79:
         19:84:ac:cd:4e:ca:0c:f3:af:4f:48:4c:0d:23:63:42:09:6b:
         af:48:70:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysaZRZ8zqVMhY3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
MjBmZDk1MjUtNzdlOS00YzQxLWEyNjUtMTlkNGIyYzc1M2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY3uQPHJvZPfpX5CCtpT1zNJBIYT03kwAZ7e
uS6TP9mLBDjPx2m8aOL6YKRUN1hnFvL+BR2KbzG9MJLzDxkLKseDRMGKLOgDGD7i
LyC7JctBKGvze4t2J0CNoz/WqEVpyk3oG+VIohvTVdP+Z+szluYJZvAyoRhL2uPQ
G5B4gVOx+HkFiOovyyXbk6z0j8pPA+u2uK5+58ozbwi8xcmvxFQtZrTSP/mGhSpL
o/IdLcx7E9ZtpdjKyeB2IGucsaSKg1SN32W/c5DI2rc3U3TkY9xPw9iedoN38emQ
aZ6CWA2lblv2wba0XANy5V++d+KGoWYbIB/PCxd45SNiumFbdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgrLOADqGmW6jcgCLnMVN4FDC8NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmFhMDdkOTctODg3NC0z
MDgyLWJkMjAtM2RjMmMyODgwNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSP9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ8KzG625k4QVVn16hxFxmi6lFW8YLD8E/zj0loH49Ic0X+g1ZnG8NvI
tfB2w7dsVKxJJNFuUv3Y8M90ETIinU6MZP69b7JSaj7WSXHTriJqI4nkdVTWm9Ui
ldO2wCNFpejIKEtXvqDt18otxoieD2KHjH/uY5z9s9QsPaRX+4CMIo3BH+LnsroN
HSqzaBc3uQR1QoHu+nQE6pjEllbSkYmNF7+OmQJ6s20i08bm8YW2VC0ARE57gZWM
07GEBZO2YDDMMijbghzNbPcDKf7aEjr0nJsdZw8NJoLRS6mALltWLb2IzTbkYdou
eRmErM1Oygzzr09ITA0jY0IJa69IcOc=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:46 2026 by rpki-client