Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa
File:                     7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa (raw, json)
Hash identifier:          6DWL0MCofrwebp8r/cuL7Anvta0oURcQHul+lbZta2Y=
Subject key identifier:   D9:82:2B:94:29:82:4D:5A:AC:D5:44:18:92:11:AE:48:05:6E:8C:66
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584DFBD5E840276B0FD352D46700
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     394437
IP address blocks:        72.20.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:e8:40:27:6b:0f:d3:52:d4:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=209c84e7-ad3d-4adf-871b-c634382faf9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:65:df:67:c7:33:3b:a1:a2:b9:0c:cb:05:
                    bc:23:ee:ae:e1:1f:8d:ae:91:54:52:86:a5:af:cd:
                    4e:22:a9:62:88:e0:f1:64:da:00:73:53:25:4c:14:
                    8a:8b:03:90:e2:58:ab:59:b8:90:cb:e2:0d:78:e9:
                    6c:5a:3c:a4:3e:2d:11:94:cf:46:4a:08:ad:06:c8:
                    a5:1a:16:b6:48:f0:27:12:e9:d0:d9:e3:70:83:0f:
                    76:60:4a:43:80:d0:f7:2e:de:41:c2:6d:7a:a6:72:
                    ea:89:d7:a5:3a:65:22:9a:b9:e5:7f:73:1d:d2:7c:
                    cd:1f:7a:0a:81:13:46:eb:9f:ab:31:36:ef:3f:09:
                    56:f8:ea:d6:74:0e:84:d7:05:d2:1e:78:e6:9a:2b:
                    4b:64:ee:cf:8e:e6:46:94:5a:03:d3:2f:ff:46:ac:
                    dc:9e:42:89:84:2e:80:5d:90:b9:ee:0d:a2:e2:a3:
                    96:22:29:7e:75:00:e9:2b:e0:54:07:c2:4a:b0:5c:
                    ee:b2:cc:ef:60:2e:fa:98:7e:dc:34:9b:d0:3e:b5:
                    1f:91:c0:c5:64:40:27:76:55:32:9c:16:bb:4c:4a:
                    81:60:e2:9a:4a:6e:81:1f:31:d0:86:a1:ec:d0:a0:
                    56:60:c5:5b:a2:97:92:0a:fe:57:7f:85:16:d3:0b:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:82:2B:94:29:82:4D:5A:AC:D5:44:18:92:11:AE:48:05:6E:8C:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:af:06:bd:d9:11:e7:82:f3:a8:4c:e6:1d:ab:da:82:d3:95:
         92:37:01:bc:00:e1:23:ae:bf:58:78:19:71:70:2b:a5:c1:6a:
         f1:f0:6c:ca:5c:20:14:82:7c:69:2e:ba:5d:53:5c:ba:ea:6e:
         16:68:92:59:24:28:cb:b6:c1:17:ce:44:93:e8:7a:b7:2b:57:
         80:d7:40:4d:cf:a7:6d:de:68:b3:11:d5:a3:7f:f0:47:33:8f:
         87:d8:6b:01:e5:17:a9:27:b3:cd:30:3f:f5:00:34:e4:d0:1f:
         58:b0:9b:78:88:78:75:16:93:f8:ac:b1:53:7a:79:a8:f7:e8:
         01:6e:37:77:0d:d4:61:b5:3c:6e:82:61:19:e9:20:fe:f5:fd:
         a4:0a:c0:e0:6f:dc:b0:92:71:e2:4a:d7:2a:73:a5:a8:b0:ce:
         be:8e:b7:f8:02:a3:41:dd:ca:a8:41:76:da:ae:44:3a:d6:67:
         7a:49:63:29:51:33:65:40:e8:17:21:d4:ba:ce:d3:81:6a:dd:
         ce:a3:46:b8:a6:23:67:a5:5f:cc:73:ce:cc:20:d3:d9:32:0a:
         8b:0e:c4:e4:72:4a:95:f1:7c:5f:f5:1b:c0:f3:76:9f:fe:a9:
         21:c4:f0:13:8f:d4:24:01:2a:be:26:85:b4:77:df:e4:b8:ff:
         65:f6:45:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371ehAJ2sP01LUZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
MjA5Yzg0ZTctYWQzZC00YWRmLTg3MWItYzYzNDM4MmZhZjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY5l32fHMzuhorkMywW8I+6u4R+NrpFUUoal
r81OIqliiODxZNoAc1MlTBSKiwOQ4lirWbiQy+INeOlsWjykPi0RlM9GSgitBsil
Gha2SPAnEunQ2eNwgw92YEpDgND3Lt5Bwm16pnLqidelOmUimrnlf3Md0nzNH3oK
gRNG65+rMTbvPwlW+OrWdA6E1wXSHnjmmitLZO7PjuZGlFoD0y//RqzcnkKJhC6A
XZC57g2i4qOWIil+dQDpK+BUB8JKsFzusszvYC76mH7cNJvQPrUfkcDFZEAndlUy
nBa7TEqBYOKaSm6BHzHQhqHs0KBWYMVbopeSCv5Xf4UW0wsUNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmCK5Qpgk1arNVEGJIRrkgFboxmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvN2VjYjhlNWQtYjhmMy0z
OTIyLWE1MjYtZGUzNzFlY2Y0ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJevBr3ZEeeC86hM5h2r2oLTlZI3AbwA4SOuv1h4GXFwK6XBavHwbMpc
IBSCfGkuul1TXLrqbhZoklkkKMu2wRfORJPoercrV4DXQE3Pp23eaLMR1aN/8Ecz
j4fYawHlF6kns80wP/UANOTQH1iwm3iIeHUWk/issVN6eaj36AFuN3cN1GG1PG6C
YRnpIP71/aQKwOBv3LCSceJK1ypzpaiwzr6Ot/gCo0HdyqhBdtquRDrWZ3pJYylR
M2VA6Bch1LrO04Fq3c6jRrimI2elX8xzzswg09kyCosOxORySpXxfF/1G8Dzdp/+
qSHE8BOP1CQBKr4mhbR33+S4/2X2RUc=
-----END CERTIFICATE-----
Generated at Sun May 31 02:36:55 2026 by rpki-client