Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c814f056-b6f8-3d38-bca1-53524829f2b8.roa
File:                     c814f056-b6f8-3d38-bca1-53524829f2b8.roa (raw, json)
Hash identifier:          I30+PMurlb5eFia+Oj0+u1vnTAYibLFk11RTEhok+ng=
Subject key identifier:   5E:4A:1E:99:96:38:29:20:22:B7:F9:69:23:D5:0B:6D:25:DC:CF:60
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EA78F2E6B692B818DAEC85E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c814f056-b6f8-3d38-bca1-53524829f2b8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        72.17.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:2e:6b:69:2b:81:8d:ae:c8:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=30c0a050-0b72-4fd7-8b80-061641242813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:55:03:dc:d5:1a:79:2a:ec:e8:d5:e1:6b:
                    29:34:6f:da:c8:96:8d:52:d8:ac:19:e7:0b:d7:64:
                    1b:2d:dd:43:f8:57:be:b8:7d:e7:3f:1f:a5:8c:23:
                    de:23:d9:15:75:d8:7a:4f:f6:fd:10:04:77:7c:5d:
                    c9:7a:48:a3:7c:4d:d7:e2:ed:ec:2b:5c:6e:71:f7:
                    a4:63:81:c6:a7:4b:81:64:a0:40:0e:86:57:fb:51:
                    78:4f:19:d4:bd:fb:60:a8:23:8c:c8:9f:5d:09:d7:
                    4a:6a:68:56:c6:fe:bb:53:a7:5c:3c:e2:04:b5:06:
                    a1:b0:f7:a8:25:c2:20:10:b3:0b:2b:a9:dd:06:ef:
                    4c:19:73:c2:e7:26:80:ac:90:84:78:d6:f6:b7:00:
                    90:07:3e:1f:8a:1a:3e:c2:79:69:17:e9:42:e4:f3:
                    3c:f1:2d:47:1f:eb:41:10:b8:60:d5:69:1b:23:98:
                    d1:14:57:c3:0e:66:a3:96:95:51:68:5c:c4:ed:93:
                    bd:c2:d5:2c:92:e7:0c:bd:9e:01:18:0a:2b:aa:25:
                    e7:ae:e8:a5:a3:eb:61:a4:57:4b:59:aa:a3:4d:9b:
                    8e:f5:32:78:44:3f:e9:46:b2:33:f2:70:42:6c:01:
                    c1:90:ee:76:b6:1a:8f:d0:86:0e:48:25:bd:87:3b:
                    4a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4A:1E:99:96:38:29:20:22:B7:F9:69:23:D5:0B:6D:25:DC:CF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c814f056-b6f8-3d38-bca1-53524829f2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.17.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fb:4e:f8:0e:b0:6b:1a:c6:ad:6b:41:6e:25:4e:16:dc:5a:
         88:a9:21:ba:a3:e4:19:d6:e6:6d:8a:64:7b:a0:87:fe:5d:c5:
         53:21:f3:91:ae:2c:1b:93:bc:16:0f:66:06:24:d4:c4:76:bb:
         3b:a6:f5:62:4a:3d:de:69:93:38:cb:84:73:70:b5:8e:84:4e:
         2e:f0:5a:73:2e:ef:6c:99:e8:33:7c:00:a4:00:17:9f:61:6d:
         28:5e:e7:0e:cd:e8:a9:1d:00:a3:1a:e9:4d:30:72:04:94:7b:
         bb:51:c4:80:0b:0f:83:db:93:65:86:a0:53:7f:9e:85:b7:91:
         d1:e8:51:84:f9:b5:1e:9f:36:f9:09:cd:e5:73:98:6d:26:81:
         21:d1:18:6c:c6:3e:af:d4:41:cf:b3:17:92:2d:3b:21:0c:bc:
         6c:79:4b:0a:c5:5f:cf:ae:e4:60:50:cf:e9:e8:90:49:a8:49:
         83:65:db:16:63:8f:f0:c1:38:03:1b:14:0c:f3:cc:47:02:08:
         f5:f2:29:80:39:c4:34:b5:53:58:75:28:4d:ff:cd:d7:31:d3:
         48:cf:82:ba:6e:09:19:c7:a4:ae:0e:fb:39:fc:1c:e4:6a:a5:
         fa:a0:3e:de:e6:92:d6:6f:67:64:fe:5c:41:c1:3d:90:b4:e7:
         97:66:85:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njy5raSuBja7IXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzBjMGEwNTAtMGI3Mi00ZmQ3LThiODAtMDYxNjQxMjQyODEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxodVA9zVGnkq7OjV4WspNG/ayJaNUtisGecL
12QbLd1D+Fe+uH3nPx+ljCPeI9kVddh6T/b9EAR3fF3JekijfE3X4u3sK1xucfek
Y4HGp0uBZKBADoZX+1F4TxnUvftgqCOMyJ9dCddKamhWxv67U6dcPOIEtQahsPeo
JcIgELMLK6ndBu9MGXPC5yaArJCEeNb2twCQBz4fiho+wnlpF+lC5PM88S1HH+tB
ELhg1WkbI5jRFFfDDmajlpVRaFzE7ZO9wtUskucMvZ4BGAorqiXnruilo+thpFdL
WaqjTZuO9TJ4RD/pRrIz8nBCbAHBkO52thqP0IYOSCW9hztKmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF5KHpmWOCkgIrf5aSPVC20l3M9gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzgxNGYwNTYtYjZmOC0z
ZDM4LWJjYTEtNTM1MjQ4MjlmMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSBEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI37TvgOsGsaxq1rQW4lThbcWoipIbqj5BnW5m2KZHugh/5dxVMh85Gu
LBuTvBYPZgYk1MR2uzum9WJKPd5pkzjLhHNwtY6ETi7wWnMu72yZ6DN8AKQAF59h
bShe5w7N6KkdAKMa6U0wcgSUe7tRxIALD4Pbk2WGoFN/noW3kdHoUYT5tR6fNvkJ
zeVzmG0mgSHRGGzGPq/UQc+zF5ItOyEMvGx5SwrFX8+u5GBQz+nokEmoSYNl2xZj
j/DBOAMbFAzzzEcCCPXyKYA5xDS1U1h1KE3/zdcx00jPgrpuCRnHpK4O+zn8HORq
pfqgPt7mktZvZ2T+XEHBPZC055dmhTo=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:20:46 2026 by rpki-client