Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/037c8b26-c8cf-38d0-8db1-ba1e32068e2c.roa
File:                     037c8b26-c8cf-38d0-8db1-ba1e32068e2c.roa (raw, json)
Hash identifier:          xjTepPUPCk9tV94d+Qna8HSgA73kcKWB5zDehQww2jw=
Subject key identifier:   80:C1:46:1C:93:A8:07:67:25:4E:7A:8D:51:3E:7C:52:24:51:28:54
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D996FD30E082C12BAEE854500
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/037c8b26-c8cf-38d0-8db1-ba1e32068e2c.roa
Signing time:             Thu 23 Apr 2026 07:05:34 +0000
ROA not before:           Thu 23 Apr 2026 07:05:34 +0000
ROA not after:            Wed 22 Jul 2026 07:05:34 +0000
asID:                     402306
IP address blocks:        72.244.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:99:6f:d3:0e:08:2c:12:ba:ee:85:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 23 07:05:34 2026 GMT
            Not After : Jul 22 07:05:34 2026 GMT
        Subject: CN=0c6c3198-8e26-4ffc-8893-b12f21c5822b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:64:d6:2a:c2:19:b0:34:39:9b:a0:c9:a1:
                    c5:7b:9e:01:aa:59:50:e4:12:8e:8a:e7:19:4a:32:
                    70:0d:03:90:46:9b:2a:4c:bb:96:79:4d:55:cf:2f:
                    63:cd:ff:79:52:cb:f4:84:7e:fd:c8:18:88:1c:79:
                    9b:7b:78:92:63:9f:a8:f0:ae:bc:02:6e:67:6f:ec:
                    52:be:45:f1:84:1c:35:0a:88:9c:fb:c9:4b:fb:26:
                    b5:0a:2d:19:30:3e:74:f1:5e:30:b6:f6:81:6e:54:
                    79:57:e2:78:2b:27:eb:58:5b:d6:a4:96:75:5e:af:
                    14:be:af:bc:f9:19:08:af:3c:ea:d6:6c:b3:00:62:
                    51:c9:ca:81:a3:cf:70:6a:f6:05:45:98:87:83:9b:
                    b7:66:b5:76:6b:a2:05:96:19:3d:42:65:82:d2:3a:
                    ba:86:79:c2:5d:67:6c:f1:94:fa:d4:ad:0e:7e:56:
                    e1:6d:6e:bb:2f:32:31:81:37:8b:74:70:b3:de:6b:
                    54:54:29:9c:fb:75:bc:5c:52:d3:1b:28:73:bc:e9:
                    24:73:64:50:09:3a:17:57:72:3b:41:23:7e:3b:f2:
                    36:ab:48:48:6b:7b:33:29:75:77:c0:43:6a:e2:e7:
                    c2:ac:a2:09:e7:13:bf:69:1d:44:91:e0:cb:ab:a0:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C1:46:1C:93:A8:07:67:25:4E:7A:8D:51:3E:7C:52:24:51:28:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/037c8b26-c8cf-38d0-8db1-ba1e32068e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:38:5b:4d:a7:9a:43:38:40:37:af:f5:30:ff:bd:da:16:e7:
         89:4b:36:cb:22:20:c2:5a:dd:96:5a:7c:9e:bc:58:c6:3f:69:
         b7:80:14:bd:e5:51:56:1c:4c:f5:c4:37:16:c6:6d:ac:fb:5f:
         fb:28:69:c4:11:12:0e:ab:3a:b0:af:61:5e:c1:f1:5c:31:75:
         3b:38:59:cb:d3:80:99:e1:94:cb:ef:95:7f:0c:5f:5b:72:37:
         93:f3:39:d7:d3:86:52:6f:87:f4:4f:66:21:14:50:80:53:6b:
         a3:6f:90:41:85:24:94:ce:fa:9a:d7:be:b8:e3:43:70:3c:e7:
         14:52:39:90:b1:9a:b9:4d:61:a0:8e:29:8e:29:9f:3a:45:d9:
         b0:30:e3:f1:54:91:4e:a9:8f:d0:d2:61:c7:08:ad:15:c3:b7:
         5f:98:2b:ae:89:ab:30:c0:b8:12:03:f3:89:e7:a0:42:e9:10:
         d1:c2:e5:9c:cf:44:61:aa:c3:84:30:ab:07:84:a6:b3:3f:b4:
         01:9d:84:fe:73:62:02:4c:6c:51:1c:db:65:c3:de:c6:7d:35:
         75:19:86:21:d0:a0:d0:fa:c7:ba:c6:66:9f:06:be:ce:bb:44:
         fc:41:bf:5f:b3:29:05:78:ac:94:60:20:a5:95:c7:36:87:bd:
         46:67:4e:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Zb9MOCCwSuu6FRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQyMzA3MDUzNFoXDTI2MDcyMjA3MDUzNFowLzEtMCsGA1UEAxMk
MGM2YzMxOTgtOGUyNi00ZmZjLTg4OTMtYjEyZjIxYzU4MjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUFk1irCGbA0OZugyaHFe54BqllQ5BKOiucZ
SjJwDQOQRpsqTLuWeU1Vzy9jzf95Usv0hH79yBiIHHmbe3iSY5+o8K68Am5nb+xS
vkXxhBw1Coic+8lL+ya1Ci0ZMD508V4wtvaBblR5V+J4KyfrWFvWpJZ1Xq8Uvq+8
+RkIrzzq1myzAGJRycqBo89wavYFRZiHg5u3ZrV2a6IFlhk9QmWC0jq6hnnCXWds
8ZT61K0OflbhbW67LzIxgTeLdHCz3mtUVCmc+3W8XFLTGyhzvOkkc2RQCToXV3I7
QSN+O/I2q0hIa3szKXV3wENq4ufCrKIJ5xO/aR1EkeDLq6CV9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDBRhyTqAdnJU56jVE+fFIkUShUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDM3YzhiMjYtYzhjZi0z
OGQwLThkYjEtYmExZTMyMDY4ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQ4W02nmkM4QDev9TD/vdoW54lLNssiIMJa3ZZafJ68WMY/abeAFL3l
UVYcTPXENxbGbaz7X/soacQREg6rOrCvYV7B8VwxdTs4WcvTgJnhlMvvlX8MX1ty
N5PzOdfThlJvh/RPZiEUUIBTa6NvkEGFJJTO+prXvrjjQ3A85xRSOZCxmrlNYaCO
KY4pnzpF2bAw4/FUkU6pj9DSYccIrRXDt1+YK66JqzDAuBID84nnoELpENHC5ZzP
RGGqw4QwqweEprM/tAGdhP5zYgJMbFEc22XD3sZ9NXUZhiHQoND6x7rGZp8Gvs67
RPxBv1+zKQV4rJRgIKWVxzaHvUZnThU=
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:46 2026 by rpki-client