Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
File:                     9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa (raw, json)
Hash identifier:          8R03f0/XUGMnEHKsv0QavPj3QJkNSIpDPWZ6Jw+8OTg=
Subject key identifier:   CB:DD:CC:E3:F7:F9:15:17:AF:7F:2D:3E:0A:A0:4F:7D:AA:DD:ED:C5
Certificate issuer:       /CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
Certificate serial:       010D0C9F4328584D8D8BE4FCCE88C5537F35B0C0
Authority key identifier: 96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
Signing time:             Sun 19 Apr 2026 00:52:25 +0000
ROA not before:           Sun 19 Apr 2026 00:52:25 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     62648
IP address blocks:        72.22.192.0/21 maxlen: 21
                          192.198.188.0/22 maxlen: 22
                          209.172.16.0/22 maxlen: 22
                          216.245.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8b:e4:fc:ce:88:c5:53:7f:35:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
        Validity
            Not Before: Apr 19 00:52:25 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=a1f208b7-4b39-483c-b7fd-df074985b602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:0a:13:db:2f:18:a9:70:25:d8:ed:a3:bb:
                    98:4a:2f:08:23:df:53:c1:de:a0:60:51:04:1c:9f:
                    cb:28:1b:14:92:58:c3:27:0b:7a:33:ab:29:84:70:
                    85:e0:16:85:5b:f3:d9:34:be:25:ed:77:d5:b4:24:
                    c0:71:60:ba:11:52:a7:0f:74:01:16:48:59:67:d1:
                    ca:1c:76:1e:4d:77:03:50:70:39:e8:6f:ec:23:9f:
                    62:03:ce:c5:42:d2:b3:cd:c7:52:73:3c:34:84:db:
                    7f:c5:26:70:67:1f:36:50:28:49:7b:57:a3:33:19:
                    e2:b1:c7:8f:99:6c:ff:bd:9d:d5:7c:2e:f8:7b:97:
                    d9:87:1b:4e:4e:08:6b:62:45:bd:51:f2:49:84:9f:
                    9d:67:06:68:51:69:2c:7b:6e:52:95:8b:83:20:40:
                    5b:ea:1a:33:24:23:22:fc:c4:5f:79:e4:85:9c:d0:
                    72:93:b0:e0:1f:0b:49:00:42:49:c0:54:63:4d:f5:
                    29:9d:5c:85:10:1e:0c:c3:5e:38:07:c0:c2:6e:8e:
                    63:3b:30:b8:07:f3:fc:a5:57:2a:77:25:23:75:c2:
                    ba:1d:03:bd:15:ef:49:0f:9f:48:e7:69:d3:0c:01:
                    ff:54:84:2b:02:3c:3f:25:8b:da:fd:aa:6d:4c:0e:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:CC:E3:F7:F9:15:17:AF:7F:2D:3E:0A:A0:4F:7D:AA:DD:ED:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl

            X509v3 Authority Key Identifier:
                keyid:96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.192.0/21
                  192.198.188.0/22
                  209.172.16.0/22
                  216.245.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:76:6c:c5:b9:67:b2:34:06:ed:33:a8:f9:99:bb:6a:60:
         cf:7b:e3:3a:e0:e0:3c:2c:79:0c:04:88:63:e1:2c:1f:8a:8e:
         5c:32:14:a9:65:37:98:7d:b8:67:cf:f8:24:0c:cd:14:d7:d6:
         53:83:bd:5e:ee:b2:5a:a3:42:85:4d:49:61:d0:d0:2d:8d:49:
         c0:7e:fe:f7:b6:9e:66:eb:08:33:71:a3:a7:00:fb:a8:ad:98:
         33:bb:d7:ea:4b:5b:55:e5:20:3b:07:fa:a1:f2:17:24:f4:87:
         86:d0:c9:a9:21:02:a8:ea:43:a6:a2:1a:aa:4f:31:78:50:2b:
         75:60:8c:98:e5:1d:be:4c:c1:25:2b:b3:be:d7:87:98:ba:74:
         16:d0:3a:f0:39:99:6e:af:2f:3b:22:e6:f5:66:85:e4:68:ac:
         0e:46:38:ce:78:7f:8a:2e:8e:fe:d1:a5:0f:59:6d:27:fe:18:
         50:bd:82:0c:c6:5f:fa:c3:7c:5d:8b:09:24:2a:46:2d:c0:50:
         f9:78:b2:00:0b:86:7c:3f:2f:19:26:b3:01:e2:63:dc:74:0f:
         72:25:b6:f3:35:43:a3:09:e6:6a:15:86:8b:1c:63:08:3f:84:
         a1:62:fa:84:bb:00:aa:fc:ad:50:fb:e5:b3:0e:c4:06:43:2f:
         67:ba:01:38
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE2Ni+T8zojFU381sMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwZjZhMGEtYjZjMy00ZTRhLTg5NDEtMTczNjcwMGRl
ZDU5MB4XDTI2MDQxOTAwNTIyNVoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk
YTFmMjA4YjctNGIzOS00ODNjLWI3ZmQtZGYwNzQ5ODViNjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiMKE9svGKlwJdjto7uYSi8II99Twd6gYFEE
HJ/LKBsUkljDJwt6M6sphHCF4BaFW/PZNL4l7XfVtCTAcWC6EVKnD3QBFkhZZ9HK
HHYeTXcDUHA56G/sI59iA87FQtKzzcdSczw0hNt/xSZwZx82UChJe1ejMxnisceP
mWz/vZ3VfC74e5fZhxtOTghrYkW9UfJJhJ+dZwZoUWkse25SlYuDIEBb6hozJCMi
/MRfeeSFnNByk7DgHwtJAEJJwFRjTfUpnVyFEB4Mw144B8DCbo5jOzC4B/P8pVcq
dyUjdcK6HQO9Fe9JD59I52nTDAH/VIQrAjw/JYva/aptTA58TQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFMvdzOP3+RUXr38tPgqgT32q3e3FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZTBm
NmEwYS1iNmMzLTRlNGEtODk0MS0xNzM2NzAwZGVkNTkvOTE1MmIwOGUtZTUyNS0z
OGEyLThlZDItNjJlNDIyN2E2ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGUwZjZhMGEtYjZjMy00ZTRhLTg5
NDEtMTczNjcwMGRlZDU5L2RlMGY2YTBhLWI2YzMtNGU0YS04OTQxLTE3MzY3MDBk
ZWQ1OS5jcmwwHwYDVR0jBBgwFoAUlvlhRSpzomVs+q/f9PQ7B8FoIGAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZTBmNmEwYS1iNmMzLTRlNGEtODk0MS0xNzM2
NzAwZGVkNTkuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDSBbAAwQC
wMa8AwQC0awQAwQC2PVAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACyXdmzFuWeyNAbtM6j5mbtqYM974zrg
4DwseQwEiGPhLB+KjlwyFKllN5h9uGfP+CQMzRTX1lODvV7uslqjQoVNSWHQ0C2N
ScB+/ve2nmbrCDNxo6cA+6itmDO71+pLW1XlIDsH+qHyFyT0h4bQyakhAqjqQ6ai
GqpPMXhQK3VgjJjlHb5MwSUrs77Xh5i6dBbQOvA5mW6vLzsi5vVmheRorA5GOM54
f4oujv7RpQ9ZbSf+GFC9ggzGX/rDfF2LCSQqRi3AUPl4sgALhnw/LxkmswHiY9x0
D3IltvM1Q6MJ5moVhoscYwg/hKFi+oS7AKr8rVD75bMOxAZDL2e6ATg=
-----END CERTIFICATE-----
Generated at Fri May 1 16:58:34 2026 by rpki-client