Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa
File:                     0304701b-f7af-3dfb-8187-c57bac2f5c32.roa (raw, json)
Hash identifier:          XsbV+5ocn+EdKdO8jmVkFJTBM++zH9gwCIyRAgsjaGg=
Subject key identifier:   CB:C2:8D:3D:E7:8E:53:77:C8:87:81:DD:60:D2:ED:3D:F8:67:7D:47
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F1F3212F6A580BC7DDC40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        72.173.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:1f:32:12:f6:a5:80:bc:7d:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=34a41a10-5917-40d6-8fc6-53ff71b991ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:05:84:b8:d6:96:d8:05:47:40:60:dc:0e:49:
                    e8:c6:ff:4d:9c:07:d8:6b:8e:f6:a2:6c:55:d6:05:
                    1a:18:a3:ee:b1:f9:67:17:3c:3c:a8:f2:1b:9f:7e:
                    b6:02:d3:89:dc:97:30:ad:45:ad:06:69:01:51:de:
                    06:ee:80:b3:8f:c5:43:f3:a7:72:f3:54:5b:9a:05:
                    8f:07:df:8c:1e:3c:f1:31:20:ad:c1:b5:4e:af:1d:
                    6a:da:5b:79:a7:e2:32:03:5a:57:d2:79:e7:0a:38:
                    38:b4:79:6a:db:4b:a9:e7:d6:0b:a1:e1:d9:09:cd:
                    46:e5:66:42:b0:6e:a7:ef:2c:9c:0c:01:c5:d2:ee:
                    21:da:1b:3c:fc:f0:9e:4d:5c:17:88:84:f6:75:8d:
                    df:59:73:a7:4e:38:e8:37:a4:94:14:c4:2d:dd:ba:
                    c3:8b:e0:f6:e3:29:73:04:e5:ef:cc:b0:81:df:d4:
                    ab:5f:fa:bf:31:df:34:40:c0:f6:41:24:49:f5:f8:
                    19:30:4c:6b:dd:7f:db:b0:c6:c8:b5:c6:b7:3d:84:
                    d1:52:9c:80:53:94:fa:b9:40:85:09:c7:3d:ba:e8:
                    36:b9:5f:56:6f:d9:c3:fd:ae:b7:95:bf:4b:86:c4:
                    4f:aa:31:d3:8b:04:ec:3c:39:c4:9a:79:b0:c1:56:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C2:8D:3D:E7:8E:53:77:C8:87:81:DD:60:D2:ED:3D:F8:67:7D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:ae:41:6f:41:79:ec:2f:44:fe:bb:fe:56:67:d0:fc:28:cb:
         ae:d1:92:8a:80:a6:87:21:a6:94:dc:1e:cb:a7:07:67:f1:61:
         bc:4f:59:1a:0f:25:55:e2:d4:32:69:5d:11:5e:83:f0:48:10:
         13:bb:6b:94:b7:55:f2:0a:e9:1e:7f:81:6b:14:4a:e2:b9:03:
         88:d1:26:80:fb:9e:2d:9b:13:a0:48:21:ea:92:c1:98:31:18:
         e7:e4:49:ef:eb:73:04:10:1f:70:8e:57:76:57:1f:fd:a3:55:
         c1:e4:fd:ee:05:61:84:9c:fe:e4:db:bb:90:6a:aa:d1:51:6f:
         d8:2f:fb:d4:12:2c:4b:7a:be:a9:41:80:d9:ae:0b:c4:5d:b7:
         fb:4c:fb:8b:1c:36:2c:39:60:98:74:db:6c:6e:67:eb:9c:3b:
         05:ef:47:50:67:44:55:e8:cf:c7:1b:70:a4:b2:43:00:ef:6c:
         bf:09:a6:55:ea:29:29:35:a9:81:01:2e:82:a2:26:21:1a:68:
         c1:00:ef:4a:d9:bf:8a:7a:ba:0f:63:7e:6c:d8:64:81:bb:18:
         6b:9b:6a:17:bc:2f:4a:19:ff:29:3e:7b:d3:25:97:fb:cf:08:
         08:07:da:98:6b:59:8e:58:b9:ce:a7:f3:e4:da:e8:d3:f5:65:
         2e:cd:44:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnx8yEvalgLx93EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzRhNDFhMTAtNTkxNy00MGQ2LThmYzYtNTNmZjcxYjk5MWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QWEuNaW2AVHQGDcDknoxv9NnAfYa472omxV
1gUaGKPusflnFzw8qPIbn362AtOJ3JcwrUWtBmkBUd4G7oCzj8VD86dy81RbmgWP
B9+MHjzxMSCtwbVOrx1q2lt5p+IyA1pX0nnnCjg4tHlq20up59YLoeHZCc1G5WZC
sG6n7yycDAHF0u4h2hs8/PCeTVwXiIT2dY3fWXOnTjjoN6SUFMQt3brDi+D24ylz
BOXvzLCB39SrX/q/Md80QMD2QSRJ9fgZMExr3X/bsMbItca3PYTRUpyAU5T6uUCF
Ccc9uug2uV9Wb9nD/a63lb9LhsRPqjHTiwTsPDnEmnmwwVbRfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvCjT3njlN3yIeB3WDS7T34Z31HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDMwNDcwMWItZjdhZi0z
ZGZiLTgxODctYzU3YmFjMmY1YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALmuQW9BeewvRP67/lZn0Pwoy67RkoqApochppTcHsunB2fxYbxPWRoP
JVXi1DJpXRFeg/BIEBO7a5S3VfIK6R5/gWsUSuK5A4jRJoD7ni2bE6BIIeqSwZgx
GOfkSe/rcwQQH3COV3ZXH/2jVcHk/e4FYYSc/uTbu5BqqtFRb9gv+9QSLEt6vqlB
gNmuC8Rdt/tM+4scNiw5YJh022xuZ+ucOwXvR1BnRFXoz8cbcKSyQwDvbL8JplXq
KSk1qYEBLoKiJiEaaMEA70rZv4p6ug9jfmzYZIG7GGubahe8L0oZ/yk+e9Mll/vP
CAgH2phrWY5Yuc6n8+Ta6NP1ZS7NRCU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:41:04 2026 by rpki-client