Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dea5005f-945e-3903-a358-8defad0d39c3.roa
File:                     dea5005f-945e-3903-a358-8defad0d39c3.roa (raw, json)
Hash identifier:          QVh8wNopK9PKbCq0lkk2nAlS6hqAQi16yXdc5rpgVSA=
Subject key identifier:   1E:B6:6C:D8:1D:A4:1C:29:D8:FB:4D:11:F4:24:B4:21:85:58:E3:7C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E3E5F509BA6014A2035E9DBC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dea5005f-945e-3903-a358-8defad0d39c3.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        72.255.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:50:9b:a6:01:4a:20:35:e9:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=c15781d9-4b0f-4dde-97b2-f9257273da5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:ae:0e:ae:c7:22:c0:b4:e3:0d:89:57:a3:
                    30:c0:5a:7f:85:ee:b6:cf:60:6d:b3:e7:63:3e:67:
                    90:c7:eb:1d:67:c2:e5:cd:fa:5e:bb:0c:77:45:02:
                    ca:bc:2c:74:16:c8:e2:00:78:75:10:70:dc:a2:1e:
                    20:34:6f:63:49:5a:ae:c4:28:fe:85:fd:bc:ac:fe:
                    dd:07:ad:b2:41:c2:1c:63:95:2b:1e:1e:41:de:4b:
                    94:59:23:6b:5c:bd:da:0d:89:d2:15:93:c3:c5:d0:
                    c2:a5:a6:d6:31:54:3a:e4:e2:4b:79:f4:88:7a:d1:
                    ec:b4:f7:4d:21:40:c4:03:4f:12:ab:07:e9:b8:3b:
                    0e:f1:d8:42:ba:aa:f4:b3:4e:8e:04:6a:96:d2:a5:
                    82:27:5a:84:82:ed:39:96:2e:c7:1c:17:4a:ef:16:
                    41:14:ab:81:58:b0:ec:9a:78:88:78:e3:c7:ea:de:
                    63:85:3a:27:df:1c:ca:88:b5:83:aa:35:9e:0e:47:
                    3e:75:a2:ac:77:9b:62:b8:3d:f1:67:59:37:19:ca:
                    e6:d8:a4:1b:b6:ef:01:40:52:0e:a1:57:be:dc:be:
                    e8:a3:ed:b9:b9:a8:12:e8:11:d9:13:d6:a9:e4:d9:
                    bc:5a:dd:1e:58:29:55:ba:3e:39:84:83:99:3f:4f:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B6:6C:D8:1D:A4:1C:29:D8:FB:4D:11:F4:24:B4:21:85:58:E3:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dea5005f-945e-3903-a358-8defad0d39c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:71:43:3e:24:c9:d2:bf:33:7b:8a:5f:a8:83:93:00:37:76:
         e0:55:f1:bc:9c:45:9a:24:80:68:4a:e5:6e:97:43:8c:b2:0d:
         79:44:51:0f:a0:32:71:00:09:f0:b7:66:98:89:7c:2d:c2:b4:
         7d:45:1b:7c:b6:50:02:19:49:c6:7e:fe:69:b7:a6:35:17:04:
         52:e7:fd:7b:8e:45:9a:b4:1c:0c:5f:df:69:e6:fb:7f:2f:83:
         99:c3:2b:64:bf:00:91:b9:b8:cb:a5:54:02:96:7e:ff:15:6c:
         2d:17:21:ef:7a:cc:c4:89:dc:cf:56:65:77:f8:e0:18:45:94:
         da:6e:6a:4c:18:1b:e0:c8:ab:29:d5:c1:91:77:06:71:2a:dd:
         25:28:28:ef:86:4c:c8:f1:d7:48:43:5c:28:51:03:51:46:06:
         a9:9a:8a:6b:28:a2:8f:42:ef:57:dc:47:2e:18:95:0a:50:ea:
         21:03:c6:e0:33:89:1e:b4:c0:a2:28:0f:d6:de:6e:bf:ec:3f:
         43:79:d0:18:62:52:13:d5:57:12:92:0e:89:e6:b2:68:f5:0d:
         e9:f8:04:b2:4c:0d:b1:7c:99:9a:7e:f7:b1:df:52:cf:75:e5:
         4f:3f:39:f9:d8:c3:bd:58:de:09:a6:91:8a:aa:ba:2c:1d:f3:
         09:15:e4:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X1CbpgFKIDXp28AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
YzE1NzgxZDktNGIwZi00ZGRlLTk3YjItZjkyNTcyNzNkYTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv2uDq7HIsC04w2JV6MwwFp/he62z2Bts+dj
PmeQx+sdZ8Llzfpeuwx3RQLKvCx0FsjiAHh1EHDcoh4gNG9jSVquxCj+hf28rP7d
B62yQcIcY5UrHh5B3kuUWSNrXL3aDYnSFZPDxdDCpabWMVQ65OJLefSIetHstPdN
IUDEA08SqwfpuDsO8dhCuqr0s06OBGqW0qWCJ1qEgu05li7HHBdK7xZBFKuBWLDs
mniIeOPH6t5jhTon3xzKiLWDqjWeDkc+daKsd5tiuD3xZ1k3Gcrm2KQbtu8BQFIO
oVe+3L7oo+25uagS6BHZE9ap5Nm8Wt0eWClVuj45hIOZP09qFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB62bNgdpBwp2PtNEfQktCGFWON8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGVhNTAwNWYtOTQ1ZS0z
OTAzLWEzNTgtOGRlZmFkMGQzOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpxQz4kydK/M3uKX6iDkwA3duBV8bycRZokgGhK5W6XQ4yyDXlEUQ+g
MnEACfC3ZpiJfC3CtH1FG3y2UAIZScZ+/mm3pjUXBFLn/XuORZq0HAxf32nm+38v
g5nDK2S/AJG5uMulVAKWfv8VbC0XIe96zMSJ3M9WZXf44BhFlNpuakwYG+DIqynV
wZF3BnEq3SUoKO+GTMjx10hDXChRA1FGBqmaimsooo9C71fcRy4YlQpQ6iEDxuAz
iR60wKIoD9bebr/sP0N50BhiUhPVVxKSDonmsmj1Den4BLJMDbF8mZp+97HfUs91
5U8/OfnYw71Y3gmmkYqquiwd8wkV5Kw=
-----END CERTIFICATE-----
Generated at Wed Jun 24 03:19:58 2026 by rpki-client