Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31d23cad-4716-3dbd-9ad7-26b0bfda5def.roa
File:                     31d23cad-4716-3dbd-9ad7-26b0bfda5def.roa (raw, json)
Hash identifier:          L9lgvowzLU8zu16ohtSdoOEsGoR7LLuq0swSErr+fJo=
Subject key identifier:   CD:EA:23:0C:5E:30:24:CD:FD:76:E7:50:8A:45:EA:FE:35:79:77:FC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F5A331F226225DF62AF52D380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31d23cad-4716-3dbd-9ad7-26b0bfda5def.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        72.199.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:1f:22:62:25:df:62:af:52:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=af45e2a4-18a7-4c7d-9146-f3265cb5b598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:86:60:7a:c0:9a:1e:25:86:75:ee:8b:fc:
                    7c:8d:2e:4d:d8:0e:9c:23:2e:ae:0b:9a:51:70:11:
                    11:5d:de:fa:f5:6e:cc:df:54:13:ee:8c:a7:6e:fe:
                    71:96:46:84:64:bc:3b:06:5e:25:3c:a0:e9:55:a1:
                    1d:ef:92:e1:a8:e5:27:4f:42:70:7f:be:d8:f1:8e:
                    a6:72:25:68:ea:39:fc:7f:4e:9b:ae:4b:b9:a1:e5:
                    61:e8:71:72:cb:8e:df:e5:a6:c8:16:b0:49:40:9b:
                    72:95:4c:7a:dd:89:ff:99:1b:48:c6:45:87:c5:de:
                    f8:43:ed:65:5b:f2:7d:ad:90:f0:3d:03:11:d0:1d:
                    8d:fc:c7:a2:2e:9f:38:98:6f:1c:bf:25:b3:44:ba:
                    a3:23:0a:1e:93:58:fb:70:d8:b9:35:90:31:93:56:
                    92:f8:3b:e1:93:21:bc:1c:22:5d:44:aa:86:98:e7:
                    3c:e9:05:64:87:0f:69:66:65:df:1c:b3:ab:a9:4e:
                    f7:94:56:3e:1b:fd:5b:77:ff:be:94:09:c3:d1:2b:
                    0c:0b:08:de:68:c3:de:aa:8b:2b:dc:dd:d8:c1:1d:
                    34:1e:8b:59:81:59:25:16:65:e8:83:cb:55:17:f7:
                    c5:f3:1a:31:91:cf:8a:04:31:ce:9d:83:9c:18:d5:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EA:23:0C:5E:30:24:CD:FD:76:E7:50:8A:45:EA:FE:35:79:77:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31d23cad-4716-3dbd-9ad7-26b0bfda5def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:6d:38:6a:d9:2a:20:ff:d4:eb:3f:a5:c6:51:2d:e0:52:12:
         29:d6:59:68:ae:ba:e2:a3:2b:5c:6d:a3:07:c1:a0:be:d2:29:
         c6:79:f8:08:cc:79:6a:06:78:b4:82:e1:ab:7a:99:41:46:bf:
         fd:4c:07:b0:e5:84:94:cd:61:59:ae:36:b8:ef:02:52:2d:05:
         d9:66:86:e0:9a:02:d0:f1:f7:3e:d7:d7:be:d3:cb:b8:e0:a6:
         56:cd:62:3d:ab:b0:4a:24:71:5f:e9:18:90:b9:b1:97:ea:83:
         99:c8:7c:76:b4:7c:52:ca:7f:09:ea:5a:6f:74:c2:35:40:31:
         ed:6f:bd:22:41:ca:06:cf:67:9a:ff:98:64:a7:be:91:7d:6a:
         6a:bb:22:5d:50:6b:4a:38:5b:9d:a6:33:15:61:ac:5f:fd:9d:
         95:8e:d3:a0:f2:11:4e:ac:b8:b7:53:eb:a6:bc:47:f0:da:1c:
         ca:89:05:c6:90:9e:48:27:f6:9f:79:23:94:7e:1e:96:01:76:
         c5:d8:03:7f:d6:0e:f7:ad:48:57:37:1f:01:b9:7b:12:c2:59:
         e1:64:7b:63:a1:79:68:4c:c3:d5:e1:1a:f0:12:2d:9c:4f:45:
         26:ee:47:4f:3f:c1:b1:d2:b0:11:a2:6e:64:5e:0f:28:31:35:
         34:e9:a4:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMx8iYiXfYq9S04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
YWY0NWUyYTQtMThhNy00YzdkLTkxNDYtZjMyNjVjYjViNTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncKGYHrAmh4lhnXui/x8jS5N2A6cIy6uC5pR
cBERXd769W7M31QT7oynbv5xlkaEZLw7Bl4lPKDpVaEd75LhqOUnT0Jwf77Y8Y6m
ciVo6jn8f06brku5oeVh6HFyy47f5abIFrBJQJtylUx63Yn/mRtIxkWHxd74Q+1l
W/J9rZDwPQMR0B2N/MeiLp84mG8cvyWzRLqjIwoek1j7cNi5NZAxk1aS+DvhkyG8
HCJdRKqGmOc86QVkhw9pZmXfHLOrqU73lFY+G/1bd/++lAnD0SsMCwjeaMPeqosr
3N3YwR00HotZgVklFmXog8tVF/fF8xoxkc+KBDHOnYOcGNULQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3qIwxeMCTN/XbnUIpF6v41eXf8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzFkMjNjYWQtNDcxNi0z
ZGJkLTlhZDctMjZiMGJmZGE1ZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJtOGrZKiD/1Os/pcZRLeBSEinWWWiuuuKjK1xtowfBoL7SKcZ5+AjM
eWoGeLSC4at6mUFGv/1MB7DlhJTNYVmuNrjvAlItBdlmhuCaAtDx9z7X177Ty7jg
plbNYj2rsEokcV/pGJC5sZfqg5nIfHa0fFLKfwnqWm90wjVAMe1vvSJBygbPZ5r/
mGSnvpF9amq7Il1Qa0o4W52mMxVhrF/9nZWO06DyEU6suLdT66a8R/DaHMqJBcaQ
nkgn9p95I5R+HpYBdsXYA3/WDvetSFc3HwG5exLCWeFke2OheWhMw9XhGvASLZxP
RSbuR08/wbHSsBGibmReDygxNTTppDM=
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:51 2026 by rpki-client