Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/07d0a275-848e-303f-a0ed-8b69b09fa29b.roa
File:                     07d0a275-848e-303f-a0ed-8b69b09fa29b.roa (raw, json)
Hash identifier:          k0ZMqa7HRbvUf6y7j5H0hhUIgTFBlSgvlG50VRtIhH0=
Subject key identifier:   67:28:97:C5:21:8F:91:A5:7C:C2:73:D0:02:23:41:DF:54:F6:7A:B8
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584D75FC52FD903F198B1425F580
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/07d0a275-848e-303f-a0ed-8b69b09fa29b.roa
Signing time:             Fri 10 Apr 2026 14:19:33 +0000
ROA not before:           Fri 10 Apr 2026 14:19:33 +0000
ROA not after:            Thu 09 Jul 2026 14:19:33 +0000
asID:                     1403
IP address blocks:        72.10.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:fc:52:fd:90:3f:19:8b:14:25:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Apr 10 14:19:33 2026 GMT
            Not After : Jul  9 14:19:33 2026 GMT
        Subject: CN=6413a2a7-c10f-4c42-87fb-41e55de6c93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:97:ae:4a:d1:ea:bc:59:2b:f7:13:60:04:
                    80:56:3d:2d:03:f4:b6:bc:e4:2f:5a:5d:48:06:2f:
                    cc:5b:03:29:21:ac:29:c3:a0:2e:74:bd:3f:52:3c:
                    00:e0:a0:8f:33:ed:a4:cf:96:0d:28:28:f7:d0:a5:
                    56:0b:27:55:a5:67:31:87:06:04:cf:58:93:33:7c:
                    d0:07:c5:59:90:20:b5:fc:04:ee:24:c3:00:fd:d1:
                    0f:33:38:38:0f:a8:d2:8e:f3:38:a8:35:ab:07:63:
                    e6:75:84:04:d3:85:89:5f:71:17:58:4b:77:67:b8:
                    e1:ea:23:31:4e:1f:f6:b1:4c:92:cc:6a:4d:7b:24:
                    1b:59:24:53:63:90:3c:20:5e:68:10:6e:f4:90:74:
                    03:cc:f8:77:be:c6:e8:72:e1:66:a8:91:0d:1a:b4:
                    e3:33:a5:60:eb:56:20:46:1d:e7:0c:96:37:a7:94:
                    dc:27:6f:42:1f:62:f5:69:c5:8c:84:db:51:02:6b:
                    0e:30:1a:6e:db:db:66:5a:6a:50:4c:19:8a:7c:45:
                    62:00:f6:7f:cc:48:37:2e:4a:86:7a:21:e5:1e:a4:
                    35:7e:eb:3f:a3:9b:db:18:24:56:e1:5f:38:2d:47:
                    b3:3f:09:18:a5:24:62:0d:98:06:b2:08:d2:6f:90:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:28:97:C5:21:8F:91:A5:7C:C2:73:D0:02:23:41:DF:54:F6:7A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/07d0a275-848e-303f-a0ed-8b69b09fa29b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4d:f8:9d:98:ef:2f:1a:81:54:a5:ba:fb:dc:33:3b:72:01:
         00:31:ed:b2:fe:a7:be:a3:df:e2:0c:51:70:ce:c1:bc:1e:40:
         d2:0b:77:e5:1c:e3:f8:4a:56:29:b4:15:c7:bf:1c:59:57:1f:
         cc:6f:51:a7:f8:4b:08:bb:87:67:71:0b:a6:93:4b:85:26:ab:
         5f:07:06:ef:42:d5:b1:90:ff:8c:cf:ce:f7:1f:58:7d:15:06:
         26:68:fb:12:bd:73:3a:28:cb:d6:38:28:59:e6:04:30:f9:3a:
         63:19:69:eb:22:29:03:78:63:3e:91:d8:36:04:77:89:78:38:
         37:7a:90:60:c7:82:60:87:f2:4c:38:1e:a1:df:d1:88:61:06:
         10:bd:47:d6:0d:88:91:11:22:d6:b4:61:a9:4a:59:64:bb:92:
         9c:72:95:45:25:4d:69:44:a6:7e:cd:fe:f9:02:8e:07:fb:7f:
         ea:9c:c5:9b:2b:da:f1:80:27:e0:73:ed:50:49:60:c6:6d:f6:
         20:0f:64:05:87:54:4b:15:0e:53:be:aa:a0:83:84:64:6e:59:
         b9:05:e7:83:0d:15:ee:70:15:eb:f5:b6:f6:58:65:ec:22:7f:
         7a:68:7d:03:22:45:bf:8c:83:fb:5d:32:b3:ee:27:43:99:55:
         b6:ff:6b:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE11/FL9kD8ZixQl9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5
MTY5MB4XDTI2MDQxMDE0MTkzM1oXDTI2MDcwOTE0MTkzM1owLzEtMCsGA1UEAxMk
NjQxM2EyYTctYzEwZi00YzQyLTg3ZmItNDFlNTVkZTZjOTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkWXrkrR6rxZK/cTYASAVj0tA/S2vOQvWl1I
Bi/MWwMpIawpw6AudL0/UjwA4KCPM+2kz5YNKCj30KVWCydVpWcxhwYEz1iTM3zQ
B8VZkCC1/ATuJMMA/dEPMzg4D6jSjvM4qDWrB2PmdYQE04WJX3EXWEt3Z7jh6iMx
Th/2sUySzGpNeyQbWSRTY5A8IF5oEG70kHQDzPh3vsbocuFmqJENGrTjM6Vg61Yg
Rh3nDJY3p5TcJ29CH2L1acWMhNtRAmsOMBpu29tmWmpQTBmKfEViAPZ/zEg3LkqG
eiHlHqQ1fus/o5vbGCRW4V84LUezPwkYpSRiDZgGsgjSb5B/VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcol8Uhj5GlfMJz0AIjQd9U9nq4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy
OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvMDdkMGEyNzUtODQ4ZS0z
MDNmLWEwZWQtOGI2OWIwOWZhMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0
NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3
OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj
NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAqVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVN+J2Y7y8agVSluvvcMztyAQAx7bL+p76j3+IMUXDOwbweQNILd+Uc
4/hKVim0Fce/HFlXH8xvUaf4Swi7h2dxC6aTS4Umq18HBu9C1bGQ/4zPzvcfWH0V
BiZo+xK9czooy9Y4KFnmBDD5OmMZaesiKQN4Yz6R2DYEd4l4ODd6kGDHgmCH8kw4
HqHf0YhhBhC9R9YNiJERIta0YalKWWS7kpxylUUlTWlEpn7N/vkCjgf7f+qcxZsr
2vGAJ+Bz7VBJYMZt9iAPZAWHVEsVDlO+qqCDhGRuWbkF54MNFe5wFev1tvZYZewi
f3pofQMiRb+Mg/tdMrPuJ0OZVbb/a1g=
-----END CERTIFICATE-----
Generated at Wed Apr 15 10:18:36 2026 by rpki-client