Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa
File:                     4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa (raw, json)
Hash identifier:          ZqUwrXQiMHgK5bskOJ9VWRoWXNvRF61tWz6p0gQ4YXI=
Subject key identifier:   C5:00:82:97:03:46:20:C5:0E:36:46:45:85:DE:55:A9:D4:74:C0:0E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFB9FD8CEDEB99AC79DF20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        72.173.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:b9:fd:8c:ed:eb:99:ac:79:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=789132b5-4272-42db-8543-5bf26d33ecef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:05:67:bd:ac:35:b4:e0:44:94:34:3a:81:d9:
                    b9:03:9d:4c:4e:3d:3a:33:99:99:51:c8:a6:fd:43:
                    b4:85:e4:69:cc:97:d7:3e:fd:98:8d:cd:28:c7:2b:
                    33:a1:39:c6:c0:be:c9:03:e2:67:75:75:00:f8:e8:
                    e3:e9:af:a1:b8:5b:14:13:ea:82:e0:fd:4f:0b:50:
                    39:ca:19:d2:c6:24:b4:f5:1f:9b:0c:f5:fc:b3:3d:
                    ee:af:c2:c3:12:20:bc:ab:f4:a1:d7:7c:9b:e3:9e:
                    c4:80:32:26:2a:2d:57:d2:a5:ff:0e:67:b1:35:e7:
                    32:d9:7f:d3:87:3f:d5:0c:c0:75:bb:c2:ad:da:f3:
                    2f:ff:73:bd:67:20:62:27:f9:18:02:a6:02:e8:49:
                    3d:c1:71:7f:18:35:cb:48:db:ab:e0:53:18:68:29:
                    cc:7b:f8:52:20:48:9d:3d:91:ee:c3:85:a8:10:c6:
                    9b:d7:35:35:88:ea:d0:aa:51:5e:e9:e3:d4:8b:f9:
                    c3:be:64:38:b1:62:b1:fc:21:b5:6c:7d:33:80:76:
                    9b:70:5f:85:75:ee:d4:36:99:d1:4a:5d:19:94:31:
                    77:d5:d5:3f:d9:89:e9:a8:e7:f9:4e:bc:6a:de:75:
                    84:54:82:69:aa:08:b8:98:31:95:bb:e1:e9:95:47:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:00:82:97:03:46:20:C5:0E:36:46:45:85:DE:55:A9:D4:74:C0:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:03:28:47:69:03:00:81:04:37:e7:cd:88:95:b7:cc:b0:9e:
         bd:6d:67:2b:93:5b:d7:b9:e9:2c:51:6b:46:e7:d6:23:b3:b9:
         df:d7:cb:6f:50:2c:14:2e:6f:e4:a0:a3:0f:99:ef:bd:a1:84:
         d8:1f:d5:f4:9c:fd:6e:32:7c:32:dc:11:12:a2:8a:87:5f:c6:
         14:7a:4a:b7:a3:c3:6b:1a:66:a6:42:c0:cb:8c:23:d9:a4:66:
         bb:87:02:83:ff:90:be:1e:46:40:2d:6e:6e:e8:ee:31:5a:dc:
         62:f7:e0:e5:6f:7c:c8:71:e9:b9:98:d5:80:4c:a8:73:e1:ed:
         60:13:83:c5:03:dd:41:e1:00:45:4d:01:2f:46:6d:72:05:87:
         7d:74:14:5d:8b:59:7c:d6:ec:46:ac:ca:06:81:da:4e:14:b7:
         86:bb:3f:43:9a:42:0c:6f:10:c9:3c:9f:09:61:f6:52:a3:90:
         18:f1:f5:1c:ff:66:1c:90:5b:07:bb:d0:9b:d2:a2:be:67:70:
         3e:78:af:f5:61:ef:8d:4d:1a:bd:39:07:77:0a:76:5b:f9:43:
         76:f7:f2:1d:55:63:0e:20:47:47:a5:b1:0a:35:9a:e5:7e:a7:
         fe:a3:fa:0b:35:25:e1:9e:5e:22:41:05:93:da:7e:81:2a:07:
         2e:3e:ab:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37n9jO3rmax53yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
Nzg5MTMyYjUtNDI3Mi00MmRiLTg1NDMtNWJmMjZkMzNlY2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wVnvaw1tOBElDQ6gdm5A51MTj06M5mZUcim
/UO0heRpzJfXPv2Yjc0oxyszoTnGwL7JA+JndXUA+Ojj6a+huFsUE+qC4P1PC1A5
yhnSxiS09R+bDPX8sz3ur8LDEiC8q/Sh13yb457EgDImKi1X0qX/DmexNecy2X/T
hz/VDMB1u8Kt2vMv/3O9ZyBiJ/kYAqYC6Ek9wXF/GDXLSNur4FMYaCnMe/hSIEid
PZHuw4WoEMab1zU1iOrQqlFe6ePUi/nDvmQ4sWKx/CG1bH0zgHabcF+Fde7UNpnR
Sl0ZlDF31dU/2YnpqOf5Trxq3nWEVIJpqgi4mDGVu+HplUd4yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUAgpcDRiDFDjZGRYXeVanUdMAOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGMwYzY4NzgtZmM2MS0z
MjkyLTk5NTAtZWE1YTYyY2M2YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkDKEdpAwCBBDfnzYiVt8ywnr1tZyuTW9e56SxRa0bn1iOzud/Xy29Q
LBQub+Sgow+Z772hhNgf1fSc/W4yfDLcERKiiodfxhR6Srejw2saZqZCwMuMI9mk
ZruHAoP/kL4eRkAtbm7o7jFa3GL34OVvfMhx6bmY1YBMqHPh7WATg8UD3UHhAEVN
AS9GbXIFh310FF2LWXzW7EasygaB2k4Ut4a7P0OaQgxvEMk8nwlh9lKjkBjx9Rz/
ZhyQWwe70JvSor5ncD54r/Vh741NGr05B3cKdlv5Q3b38h1VYw4gR0elsQo1muV+
p/6j+gs1JeGeXiJBBZPafoEqBy4+q1k=
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:29 2026 by rpki-client