Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/7de945fb-9b3a-32a7-a489-e8575475c79c.roa
File:                     7de945fb-9b3a-32a7-a489-e8575475c79c.roa (raw, json)
Hash identifier:          GWmGwAsHrMUpyzp1ABj6oK7bPKebNtGqDarqnEcm5Wg=
Subject key identifier:   02:11:AF:0F:4F:F3:5D:03:75:E1:07:40:45:A3:CA:C9:BC:E5:0B:F1
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F4328584D100D02C294E8EA1643A8C300
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/7de945fb-9b3a-32a7-a489-e8575475c79c.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     397453
IP address blocks:        72.26.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0d:02:c2:94:e8:ea:16:43:a8:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=7d192eb8-c2a6-4012-8d5d-4ba503f94ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:77:6f:d8:a5:0a:ee:86:c6:c9:b1:dd:1c:
                    de:cb:6b:b3:ae:ec:59:69:82:c9:f2:89:61:88:89:
                    43:89:ba:b3:c1:19:f3:14:5e:3b:ae:4d:9d:83:ef:
                    15:a0:70:22:76:0b:b7:6c:5f:a0:2c:18:68:0c:88:
                    24:67:32:7b:8b:fa:62:11:9a:20:57:db:03:a2:59:
                    46:59:ac:7e:0e:93:3b:e7:f5:8f:51:8d:7d:01:27:
                    c4:c0:3d:76:31:28:b4:ad:97:03:c3:97:f4:6d:27:
                    ce:4e:d1:08:34:fb:4f:72:22:44:4e:e0:ef:a0:88:
                    b9:fb:a5:d2:81:3e:a1:ee:c5:93:db:f9:64:23:b6:
                    79:2d:4b:b1:b5:5c:12:78:ce:74:53:19:8b:9f:71:
                    0a:cc:83:5c:e0:b9:4c:6c:fe:f3:d9:7d:35:e5:fa:
                    77:aa:36:e7:b4:c2:ca:8a:39:27:5a:e5:f2:5f:e9:
                    5d:b7:ad:b5:23:76:97:d5:b8:37:89:a0:b5:a3:c2:
                    37:1f:6a:3d:87:f4:8c:d2:db:09:ef:52:c1:8c:93:
                    6f:2a:b6:a9:23:d7:0b:e9:e5:c3:6c:ea:e2:42:25:
                    04:f0:9d:e3:d1:cc:b8:b8:98:e7:c4:5b:ae:c5:4e:
                    7f:e0:d7:fa:08:a7:ee:59:33:a0:ba:5c:25:2e:6d:
                    e6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:11:AF:0F:4F:F3:5D:03:75:E1:07:40:45:A3:CA:C9:BC:E5:0B:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/7de945fb-9b3a-32a7-a489-e8575475c79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.26.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9a:90:22:de:a4:cb:b9:03:7a:8b:6c:75:9e:96:1c:69:2a:
         03:ad:49:b0:ac:36:79:6a:52:4e:47:80:5f:c2:07:13:ff:99:
         a6:c3:40:0b:6b:0d:ff:8f:e3:9d:4d:68:ef:94:b2:38:4d:a0:
         90:11:63:ef:77:39:cc:32:3f:1e:a1:35:87:9f:2c:fd:b9:a3:
         2b:7b:8f:43:5b:14:d7:6c:24:5a:7d:2e:5f:ad:87:4d:30:04:
         37:1e:0b:4c:28:38:6e:70:cf:3e:c6:c1:21:3b:de:20:30:6c:
         09:39:c9:a0:99:95:99:14:6c:8a:38:32:76:0f:80:56:1f:c3:
         04:b7:7d:05:3c:1f:e1:55:6c:8c:d4:da:d4:85:01:f9:17:ae:
         90:e8:5a:0b:5d:8b:a7:31:ea:bd:a6:e0:e9:56:f9:61:1c:76:
         e7:bd:f7:67:77:cb:50:d4:f0:13:20:75:eb:fa:02:2f:70:7f:
         6a:d6:db:d7:89:09:ee:df:df:ea:53:f6:da:d5:9b:21:40:0f:
         ab:c4:86:00:98:5c:f9:13:5d:ef:e8:8d:44:bc:fd:99:3c:00:
         0c:8d:0a:da:5e:56:55:53:dc:0b:9a:5b:95:48:ba:2a:70:df:
         52:fc:8f:5d:b7:c4:61:7f:0c:70:10:c8:89:6c:f9:ee:ee:67:
         92:2f:71:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDQLClOjqFkOowwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz
NTgzMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk
N2QxOTJlYjgtYzJhNi00MDEyLThkNWQtNGJhNTAzZjk0ZWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt513b9ilCu6Gxsmx3Rzey2uzruxZaYLJ8olh
iIlDibqzwRnzFF47rk2dg+8VoHAidgu3bF+gLBhoDIgkZzJ7i/piEZogV9sDollG
Wax+DpM75/WPUY19ASfEwD12MSi0rZcDw5f0bSfOTtEINPtPciJETuDvoIi5+6XS
gT6h7sWT2/lkI7Z5LUuxtVwSeM50UxmLn3EKzINc4LlMbP7z2X015fp3qjbntMLK
ijknWuXyX+ldt621I3aX1bg3iaC1o8I3H2o9h/SM0tsJ71LBjJNvKrapI9cL6eXD
bOriQiUE8J3j0cy4uJjnxFuuxU5/4Nf6CKfuWTOgulwlLm3mfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIRrw9P810DdeEHQEWjysm85QvxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz
OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvN2RlOTQ1ZmItOWIzYS0z
MmE3LWE0ODktZTg1NzU0NzVjNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0
ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl
MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0
MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKakCLepMu5A3qLbHWelhxpKgOtSbCsNnlqUk5HgF/CBxP/mabDQAtr
Df+P451NaO+UsjhNoJARY+93OcwyPx6hNYefLP25oyt7j0NbFNdsJFp9Ll+th00w
BDceC0woOG5wzz7GwSE73iAwbAk5yaCZlZkUbIo4MnYPgFYfwwS3fQU8H+FVbIzU
2tSFAfkXrpDoWgtdi6cx6r2m4OlW+WEcdue992d3y1DU8BMgdev6Ai9wf2rW29eJ
Ce7f3+pT9trVmyFAD6vEhgCYXPkTXe/ojUS8/Zk8AAyNCtpeVlVT3AuaW5VIuipw
31L8j123xGF/DHAQyIls+e7uZ5IvcbE=
-----END CERTIFICATE-----
Generated at Sun Mar 22 09:55:21 2026 by rpki-client