Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/03164dfa-c28d-3c9a-8b5a-b414a82a0862.roa
File:                     03164dfa-c28d-3c9a-8b5a-b414a82a0862.roa (raw, json)
Hash identifier:          pIuDAOy6U5toU0hLZ8qaC9CW/0ONRdvOR8jaAUyOZ2E=
Subject key identifier:   9B:D7:07:16:E7:A2:32:32:69:7D:B4:A9:93:5A:DB:1F:C4:3A:74:56
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F4328584EA7884A2CC2B5F624ACE0CC40
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/03164dfa-c28d-3c9a-8b5a-b414a82a0862.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7725
IP address blocks:        72.162.28.0/23 maxlen: 23
                          72.162.30.0/23 maxlen: 23
                          72.162.32.0/24 maxlen: 24
                          72.162.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4a:2c:c2:b5:f6:24:ac:e0:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5c4999ef-9556-490c-bcfb-60c79ef03d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:37:c8:40:12:fe:2e:72:bb:4e:96:35:fe:
                    2e:36:ad:1d:c2:d7:38:07:88:a9:ee:44:5e:1d:1f:
                    f5:23:b2:78:53:6b:42:c9:22:56:24:dd:a9:50:25:
                    d6:f4:fc:c0:d5:b9:ac:10:af:0c:b9:ac:30:a4:a6:
                    d7:7f:1c:72:72:42:88:f9:3f:9a:a2:6a:0d:c4:15:
                    4c:26:f7:d5:1e:94:45:d9:27:0e:1c:64:29:97:80:
                    04:20:0c:11:e5:82:e2:69:d7:a2:52:66:a9:b3:52:
                    28:81:7b:e9:71:02:9c:bf:11:a1:14:2a:6c:07:eb:
                    aa:c6:88:ec:ad:9f:7d:f3:ac:1f:9b:dc:c8:78:9c:
                    5a:2e:ef:f4:ad:cc:d3:72:5a:73:a1:78:0d:84:5f:
                    af:70:14:be:86:f0:42:10:19:9a:8e:1c:99:a5:25:
                    77:7f:ff:57:21:dd:e6:be:0c:a1:eb:f7:60:a1:3e:
                    94:d1:b5:84:7d:64:b8:21:b7:c2:d7:23:e2:c9:62:
                    06:c2:75:8e:b7:ff:8e:66:69:6f:46:48:19:91:8f:
                    a7:c2:ce:65:24:37:8a:f2:d7:f5:8a:63:94:29:88:
                    45:ef:d2:d3:f9:3b:ad:63:45:53:91:a1:66:c8:b2:
                    9b:f7:fc:67:01:5e:3a:91:34:5c:9f:8b:1e:8e:16:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D7:07:16:E7:A2:32:32:69:7D:B4:A9:93:5A:DB:1F:C4:3A:74:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/03164dfa-c28d-3c9a-8b5a-b414a82a0862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.28.0-72.162.32.255
                  72.162.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:d9:37:2e:f0:0a:d6:4a:a6:b0:41:ac:88:75:6a:d7:6c:
         ea:24:d2:72:c9:0c:c7:5a:43:e9:5b:d5:1c:5b:b7:83:a9:b0:
         24:9d:6f:45:eb:aa:9b:a2:25:09:6a:17:14:d6:3f:3d:24:53:
         42:e1:23:69:44:5d:5b:d6:ef:b9:6d:9d:c8:ef:3a:01:a5:83:
         db:04:cd:81:30:14:95:65:f8:03:93:79:a1:8f:62:6f:9f:a7:
         0e:b4:a2:96:91:04:46:ed:98:00:af:03:0b:8f:b1:a5:f8:60:
         0d:56:a8:88:42:3a:65:bf:f1:03:be:35:09:fb:34:d6:fc:66:
         50:88:88:48:59:19:e9:a3:3d:fe:cd:cd:77:18:58:b8:9c:d6:
         ae:d6:78:de:eb:cd:cf:f8:e8:aa:87:79:25:b7:f5:c8:42:e1:
         c5:8e:9e:7d:87:2a:d0:8f:ef:9f:3a:b4:94:d9:df:3d:f3:4c:
         ea:74:ec:08:8c:93:70:40:89:a3:f4:85:0a:57:08:e1:1d:0c:
         ee:2b:99:7e:f0:77:f1:db:10:fb:57:a5:8f:3d:a4:d7:0a:44:
         6c:83:31:7c:73:81:3e:7f:76:09:b2:d0:97:b5:69:02:49:36:
         47:4e:a8:dc:13:89:60:31:86:b4:ea:81:47:34:04:7c:14:43:
         31:bd:d6:00
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE6niEoswrX2JKzgzEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQyNDdhNzAtYzkzZC00MDY1LTk1NDgtNzYyZGE1YTM4
NmJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NWM0OTk5ZWYtOTU1Ni00OTBjLWJjZmItNjBjNzllZjAzZDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwY3yEAS/i5yu06WNf4uNq0dwtc4B4ip7kRe
HR/1I7J4U2tCySJWJN2pUCXW9PzA1bmsEK8MuawwpKbXfxxyckKI+T+aomoNxBVM
JvfVHpRF2ScOHGQpl4AEIAwR5YLiadeiUmaps1IogXvpcQKcvxGhFCpsB+uqxojs
rZ9986wfm9zIeJxaLu/0rczTclpzoXgNhF+vcBS+hvBCEBmajhyZpSV3f/9XId3m
vgyh6/dgoT6U0bWEfWS4IbfC1yPiyWIGwnWOt/+OZmlvRkgZkY+nws5lJDeK8tf1
imOUKYhF79LT+TutY0VTkaFmyLKb9/xnAV46kTRcn4sejhbQywIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFJvXBxbnojIyaX20qZNa2x/EOnRWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0
N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJkYTVhMzg2YmEvMDMxNjRkZmEtYzI4ZC0z
YzlhLThiNWEtYjQxNGE4MmEwODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzQyNDdhNzAtYzkzZC00MDY1LTk1
NDgtNzYyZGE1YTM4NmJhLzM0MjQ3YTcwLWM5M2QtNDA2NS05NTQ4LTc2MmRhNWEz
ODZiYS5jcmwwHwYDVR0jBBgwFoAUpsEb1rclWtCkwZuf94Ui0ZNhSYIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJk
YTVhMzg2YmEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJIohwD
BABIoiADBABIoiUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAOQ7ZNy7wCtZKprBBrIh1atds6iTScskMx1pD
6VvVHFu3g6mwJJ1vReuqm6IlCWoXFNY/PSRTQuEjaURdW9bvuW2dyO86AaWD2wTN
gTAUlWX4A5N5oY9ib5+nDrSilpEERu2YAK8DC4+xpfhgDVaoiEI6Zb/xA741Cfs0
1vxmUIiISFkZ6aM9/s3NdxhYuJzWrtZ43uvNz/joqod5Jbf1yELhxY6efYcq0I/v
nzq0lNnfPfNM6nTsCIyTcECJo/SFClcI4R0M7iuZfvB38dsQ+1eljz2k1wpEbIMx
fHOBPn92CbLQl7VpAkk2R06o3BOJYDGGtOqBRzQEfBRDMb3WAA==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:40:13 2026 by rpki-client