Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6cd49ca-1f6e-3f98-8fc0-997c30b60b2b.roa
File:                     d6cd49ca-1f6e-3f98-8fc0-997c30b60b2b.roa (raw, json)
Hash identifier:          tcREWAG7/ENCxU+0Dt0XRpQEnmsR9QA8VPz10f04dSc=
Subject key identifier:   B6:2F:7C:44:69:70:20:E2:BD:51:9F:E0:06:64:DA:44:18:FC:8B:F2
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBC28F8BB5E5CFB9CF5C3FB80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6cd49ca-1f6e-3f98-8fc0-997c30b60b2b.roa
Signing time:             Wed 05 Aug 2026 10:23:02 +0000
ROA not before:           Wed 05 Aug 2026 10:23:02 +0000
ROA not after:            Tue 03 Nov 2026 11:23:02 +0000
asID:                     27411
IP address blocks:        173.208.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:28:f8:bb:5e:5c:fb:9c:f5:c3:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  5 10:23:02 2026 GMT
            Not After : Nov  3 11:23:02 2026 GMT
        Subject: CN=2e03cab8-63df-4957-9534-e8d9c0347ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:41:72:36:82:cc:03:6e:b5:b2:43:b6:61:
                    e0:72:d9:92:09:ca:0a:f9:e1:0d:4d:90:01:36:9d:
                    57:33:fc:f5:a6:19:c7:f4:cf:6f:2b:cd:9f:a6:65:
                    66:7c:fb:29:95:d1:ee:2b:28:71:5e:50:f8:f6:b7:
                    0e:81:14:e0:30:c2:79:a2:11:bf:72:a5:c3:45:3b:
                    f5:e1:8a:3a:86:f7:68:49:5e:3f:2f:8d:08:96:ec:
                    69:76:af:12:5a:35:f4:a2:02:57:8a:5f:2d:c2:fd:
                    00:66:46:88:f0:f9:6b:b8:bd:fe:b3:13:e6:c4:82:
                    ea:ee:c9:9d:d9:40:6d:74:b1:d1:39:a0:44:bf:53:
                    2d:41:de:e0:94:0b:8b:99:01:96:e7:18:bb:91:6d:
                    ef:ba:43:46:0c:05:e6:46:2a:e6:32:96:a6:9e:7d:
                    26:45:0e:aa:72:68:e1:4e:27:b8:18:37:77:f9:1c:
                    96:bd:27:59:3f:a6:a0:1b:b2:e3:9b:6d:d9:63:4d:
                    5d:8e:1a:51:a6:20:81:b0:cd:f0:f4:84:63:c6:b0:
                    c0:80:98:92:ec:b1:96:ee:5e:92:20:9e:ff:53:54:
                    a9:d5:9a:49:9e:0a:df:b8:4c:e4:46:32:aa:aa:c4:
                    d1:eb:04:cc:fe:68:a0:49:bc:01:9c:98:4e:aa:7f:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:7C:44:69:70:20:E2:BD:51:9F:E0:06:64:DA:44:18:FC:8B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6cd49ca-1f6e-3f98-8fc0-997c30b60b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6c:08:03:53:44:af:9c:14:03:55:40:a4:f9:8c:e1:24:9b:
         5f:72:2c:32:6d:bf:cf:3b:49:4c:0c:0f:82:0d:0c:90:73:8d:
         b7:34:5c:2e:b2:6e:e3:df:2c:95:fb:b7:f3:93:0a:46:a4:5f:
         01:0b:ca:c2:c1:5e:ae:5b:20:00:bf:b3:03:51:05:4a:f2:8c:
         21:79:04:05:57:4c:03:93:e6:51:bc:03:44:8c:d7:77:df:67:
         09:2a:b3:0d:29:ec:cd:52:b0:ea:bf:21:bf:4f:fe:2c:60:6a:
         a4:bb:d7:76:2f:28:14:2a:81:9a:e9:9f:d3:e7:d7:36:29:71:
         ec:4f:93:09:8b:fc:21:3c:9e:78:85:ce:f5:f3:56:85:00:2a:
         59:53:bb:ed:be:bb:3b:ff:5d:30:c2:a5:ca:ff:23:22:bc:fa:
         1b:e7:8d:9c:34:f0:50:74:48:56:1d:24:7f:34:b6:ba:e0:58:
         de:01:32:34:f3:b1:e2:da:30:1b:48:f6:10:c0:9f:d1:eb:a6:
         6f:d5:19:0e:5f:fb:79:53:69:7e:b5:09:ca:2f:89:d6:20:95:
         a1:b3:77:42:82:e6:b7:40:29:0f:fc:9b:dd:80:46:ee:26:f9:
         6f:c7:eb:56:aa:3f:c4:58:00:88:03:ce:bd:99:3a:0a:fd:a9:
         83:ca:8f:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68KPi7Xlz7nPXD+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNTEwMjMwMloXDTI2MTEwMzExMjMwMlowLzEtMCsGA1UEAxMk
MmUwM2NhYjgtNjNkZi00OTU3LTk1MzQtZThkOWMwMzQ3YWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO9BcjaCzANutbJDtmHgctmSCcoK+eENTZAB
Np1XM/z1phnH9M9vK82fpmVmfPspldHuKyhxXlD49rcOgRTgMMJ5ohG/cqXDRTv1
4Yo6hvdoSV4/L40Iluxpdq8SWjX0ogJXil8twv0AZkaI8PlruL3+sxPmxILq7smd
2UBtdLHROaBEv1MtQd7glAuLmQGW5xi7kW3vukNGDAXmRirmMpamnn0mRQ6qcmjh
Tie4GDd3+RyWvSdZP6agG7Ljm23ZY01djhpRpiCBsM3w9IRjxrDAgJiS7LGW7l6S
IJ7/U1Sp1ZpJngrfuEzkRjKqqsTR6wTM/migSbwBnJhOqn+9sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYvfERpcCDivVGf4AZk2kQY/IvyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDZjZDQ5Y2EtMWY2ZS0z
Zjk4LThmYzAtOTk3YzMwYjYwYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrdBIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5sCANTRK+cFANVQKT5jOEkm19yLDJtv887SUwMD4INDJBzjbc0XC6y
buPfLJX7t/OTCkakXwELysLBXq5bIAC/swNRBUryjCF5BAVXTAOT5lG8A0SM13ff
Zwkqsw0p7M1SsOq/Ib9P/ixgaqS713YvKBQqgZrpn9Pn1zYpcexPkwmL/CE8nniF
zvXzVoUAKllTu+2+uzv/XTDCpcr/IyK8+hvnjZw08FB0SFYdJH80trrgWN4BMjTz
seLaMBtI9hDAn9Hrpm/VGQ5f+3lTaX61CcovidYglaGzd0KC5rdAKQ/8m92ARu4m
+W/H61aqP8RYAIgDzr2ZOgr9qYPKj3E=
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:01:37 2026 by rpki-client