Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ca0e0fbd-3ff3-36b4-80ac-a4c77aabbeb8.roa
File:                     ca0e0fbd-3ff3-36b4-80ac-a4c77aabbeb8.roa (raw, json)
Hash identifier:          eamHRd7+XQzV8Xw5qE31oBzqIy/+YximcsJpl5vHyZY=
Subject key identifier:   19:64:00:A4:5B:9F:2B:C6:30:68:BD:FE:0D:11:4A:40:66:2A:C8:FF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE0C1FDD3F93B40445B488BE0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ca0e0fbd-3ff3-36b4-80ac-a4c77aabbeb8.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        72.255.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:fd:d3:f9:3b:40:44:5b:48:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=4d244647-a27c-41f3-8f5e-709acc254a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:c2:10:40:f4:d2:3c:66:87:41:5b:a8:31:
                    58:1a:5b:41:e3:bc:d4:34:39:65:fa:c7:80:4e:80:
                    ad:03:ca:4a:a8:d4:31:2e:f8:3e:58:be:36:97:6d:
                    4f:73:89:87:f9:89:46:dc:60:cb:dd:12:d9:4d:cc:
                    67:8b:5a:be:30:63:8e:26:84:3c:1d:75:6a:8a:01:
                    e7:60:d2:a9:30:24:08:f1:74:31:64:29:4f:fa:cf:
                    90:79:f1:22:80:3f:cf:7b:4d:aa:2c:e3:0d:55:8c:
                    3d:21:09:7b:33:15:a4:57:92:3d:bd:e3:e1:49:02:
                    fa:44:be:fc:40:ca:f5:69:8c:58:bf:29:01:51:24:
                    23:20:72:73:b0:08:88:8f:d5:82:7e:9d:32:4e:92:
                    40:50:98:fe:c9:ef:14:d7:fa:4e:1a:19:53:26:bf:
                    6b:ea:4d:44:00:54:13:8f:18:63:8b:30:46:09:6d:
                    0a:b6:77:07:ef:9a:ef:3a:af:27:ad:e6:a2:48:d8:
                    3b:78:6c:6a:1b:54:c1:73:90:56:90:c8:98:a4:0d:
                    e5:6d:c7:e2:e8:58:b1:7b:e2:32:09:a8:73:17:b7:
                    42:85:61:ea:6a:55:6c:07:d8:9b:09:94:cc:ad:ed:
                    0f:68:86:8a:3f:38:18:fe:c3:a2:87:fb:d1:b8:6f:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:00:A4:5B:9F:2B:C6:30:68:BD:FE:0D:11:4A:40:66:2A:C8:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ca0e0fbd-3ff3-36b4-80ac-a4c77aabbeb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:81:3a:1a:05:1d:d5:c4:48:b0:ab:8d:c6:3a:1d:11:ee:ab:
         c3:b6:0a:41:3b:b3:84:13:d6:24:f8:63:df:4b:44:b1:c1:c6:
         38:2f:15:3b:f4:a7:2e:af:c1:03:8d:cd:f7:88:0f:80:70:91:
         cd:6e:ad:32:a6:62:2f:ee:bb:b1:2f:5e:43:eb:ce:fc:b8:b9:
         98:65:66:7e:78:90:af:b0:61:42:2c:0f:b1:d2:f6:ab:d9:cd:
         0d:37:4f:5d:2f:24:fb:02:1a:a6:76:a4:2e:4c:28:6d:55:24:
         94:f5:d4:23:d3:cb:7d:67:10:96:a1:0c:84:99:14:48:f2:77:
         80:46:82:6f:a5:d2:36:ea:56:50:78:d3:0a:55:66:84:17:ef:
         16:c3:fa:b3:fe:3c:6c:21:70:32:b7:f5:ce:2b:2e:0d:5a:59:
         08:be:45:7f:ba:9e:ee:e3:66:fb:ae:0c:89:4d:97:74:f6:5b:
         dd:7d:e9:ba:f6:e6:c8:66:71:6c:dd:19:bc:a8:9e:5a:58:4f:
         fe:e4:05:26:3a:aa:24:b4:06:1f:d3:dc:99:aa:d7:4f:5b:76:
         58:39:98:ae:87:da:71:2e:c2:94:00:e4:80:86:3e:73:4b:fb:
         6b:51:aa:a6:0d:71:18:07:a9:ef:5a:23:8f:56:45:6c:cd:5e:
         a5:bb:38:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwf3T+TtARFtIi+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
NGQyNDQ2NDctYTI3Yy00MWYzLThmNWUtNzA5YWNjMjU0YTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FvCEED00jxmh0FbqDFYGltB47zUNDll+seA
ToCtA8pKqNQxLvg+WL42l21Pc4mH+YlG3GDL3RLZTcxni1q+MGOOJoQ8HXVqigHn
YNKpMCQI8XQxZClP+s+QefEigD/Pe02qLOMNVYw9IQl7MxWkV5I9vePhSQL6RL78
QMr1aYxYvykBUSQjIHJzsAiIj9WCfp0yTpJAUJj+ye8U1/pOGhlTJr9r6k1EAFQT
jxhjizBGCW0KtncH75rvOq8nreaiSNg7eGxqG1TBc5BWkMiYpA3lbcfi6Fixe+Iy
CahzF7dChWHqalVsB9ibCZTMre0PaIaKPzgY/sOih/vRuG+FGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBlkAKRbnyvGMGi9/g0RSkBmKsj/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2EwZTBmYmQtM2ZmMy0z
NmI0LTgwYWMtYTRjNzdhYWJiZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJeBOhoFHdXESLCrjcY6HRHuq8O2CkE7s4QT1iT4Y99LRLHBxjgvFTv0
py6vwQONzfeID4Bwkc1urTKmYi/uu7EvXkPrzvy4uZhlZn54kK+wYUIsD7HS9qvZ
zQ03T10vJPsCGqZ2pC5MKG1VJJT11CPTy31nEJahDISZFEjyd4BGgm+l0jbqVlB4
0wpVZoQX7xbD+rP+PGwhcDK39c4rLg1aWQi+RX+6nu7jZvuuDIlNl3T2W9196br2
5shmcWzdGbyonlpYT/7kBSY6qiS0Bh/T3Jmq109bdlg5mK6H2nEuwpQA5ICGPnNL
+2tRqqYNcRgHqe9aI49WRWzNXqW7OGY=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:17 2026 by rpki-client