Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a086737-f631-3c36-ab0b-ab9af4e96f37.roa
File:                     6a086737-f631-3c36-ab0b-ab9af4e96f37.roa (raw, json)
Hash identifier:          xo9G9Oftgn07sfvdVwERkmhF54MJlmy18dNbIcn5F6Q=
Subject key identifier:   84:16:8B:47:CB:42:CA:1E:3B:30:8C:14:50:E4:BC:29:ED:4A:98:4D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF44CCB4C18C193885B7B6A00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a086737-f631-3c36-ab0b-ab9af4e96f37.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        72.244.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:cb:4c:18:c1:93:88:5b:7b:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=d70f6b32-b03f-4c20-98fb-18c3a5d29517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:2c:7e:b0:e5:80:0c:7f:7c:3f:a8:aa:a4:
                    35:eb:91:62:ae:26:31:36:0d:f0:ed:0d:d3:45:1d:
                    9c:ef:fe:43:ce:31:f7:e1:52:6b:24:55:d6:d9:91:
                    27:a5:07:c9:c2:41:78:65:c2:bd:cc:6d:60:81:55:
                    67:b5:1f:7e:40:62:00:a2:98:55:e4:33:55:e9:c9:
                    e3:ba:0d:93:4e:10:7d:85:07:73:81:e8:70:12:8e:
                    1e:81:1d:f8:7f:29:4b:a4:e8:bf:65:5d:f3:1c:5a:
                    b3:ff:ba:61:a7:8c:a9:10:a1:f2:0b:d9:2a:97:42:
                    6f:ad:77:ad:93:4c:34:5e:7a:cb:e4:bc:60:af:48:
                    00:dc:e3:f9:5c:24:5d:97:c5:00:16:8a:8c:cd:33:
                    e5:d1:81:4e:27:3f:28:c8:ed:a3:89:d4:e6:d3:72:
                    bd:3f:a5:ac:aa:e4:2d:92:cd:1d:75:0b:ff:89:b2:
                    a2:bc:56:96:09:ee:66:98:ca:52:1d:25:68:c9:6b:
                    bf:a1:03:ad:ae:df:44:1f:88:64:c9:df:d9:0d:22:
                    7d:1e:ff:e0:e7:f0:a5:bf:d8:9a:75:12:ab:14:a6:
                    c2:d1:bc:e5:e6:ce:d6:61:1e:3e:ce:6e:34:d7:79:
                    72:ac:87:14:b4:7f:23:76:22:a1:47:8d:c2:e3:2a:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:16:8B:47:CB:42:CA:1E:3B:30:8C:14:50:E4:BC:29:ED:4A:98:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a086737-f631-3c36-ab0b-ab9af4e96f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:10:59:52:72:98:64:fb:75:cb:95:e7:85:1f:c7:2d:ce:a6:
         7c:e2:8f:25:38:56:22:78:4f:d7:c1:c7:25:8b:59:d6:50:63:
         4b:53:22:2c:b8:59:20:63:fe:59:90:0b:67:7a:e9:67:06:7e:
         21:b4:ba:bf:03:79:08:28:52:f5:bc:c4:05:c0:27:73:0a:85:
         dd:6d:c7:17:31:ab:c6:c8:a9:ce:bc:9a:83:3b:3d:fa:05:5b:
         1a:ac:aa:b7:df:86:8f:b5:82:c9:06:e8:4c:18:65:9d:a8:26:
         ec:1e:d9:9b:29:ce:86:48:2c:fe:10:e7:72:60:6d:c6:dc:c9:
         77:5a:1a:59:ca:b3:f2:61:d3:cb:65:9e:c9:60:62:25:7c:3a:
         42:88:df:8e:b9:61:33:e7:d7:1e:f2:8a:84:a0:f1:6b:72:c3:
         aa:6e:ed:02:fe:ed:a5:ab:3f:47:77:0e:21:3a:6e:7c:02:94:
         96:17:94:26:f4:be:72:b3:33:0b:93:fe:97:3a:22:74:29:f7:
         6e:12:a4:f6:8e:e2:3b:80:14:b3:23:be:1f:31:4b:e1:cf:fa:
         5f:8c:ca:a4:a3:99:b6:b5:fc:03:85:68:20:d6:70:92:8b:0a:
         da:71:94:7b:3a:ab:b7:d2:db:0e:2b:ff:8d:48:d2:4a:9c:85:
         3c:d3:a3:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMtMGMGTiFt7agAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk
ZDcwZjZiMzItYjAzZi00YzIwLTk4ZmItMThjM2E1ZDI5NTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta4sfrDlgAx/fD+oqqQ165FiriYxNg3w7Q3T
RR2c7/5DzjH34VJrJFXW2ZEnpQfJwkF4ZcK9zG1ggVVntR9+QGIAophV5DNV6cnj
ug2TThB9hQdzgehwEo4egR34fylLpOi/ZV3zHFqz/7php4ypEKHyC9kql0JvrXet
k0w0XnrL5Lxgr0gA3OP5XCRdl8UAFoqMzTPl0YFOJz8oyO2jidTm03K9P6WsquQt
ks0ddQv/ibKivFaWCe5mmMpSHSVoyWu/oQOtrt9EH4hkyd/ZDSJ9Hv/g5/Clv9ia
dRKrFKbC0bzl5s7WYR4+zm4013lyrIcUtH8jdiKhR43C4yogNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQWi0fLQsoeOzCMFFDkvCntSphNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmEwODY3MzctZjYzMS0z
YzM2LWFiMGItYWI5YWY0ZTk2ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPRkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYQWVJymGT7dcuV54Ufxy3OpnzijyU4ViJ4T9fBxyWLWdZQY0tTIiy4
WSBj/lmQC2d66WcGfiG0ur8DeQgoUvW8xAXAJ3MKhd1txxcxq8bIqc68moM7PfoF
Wxqsqrffho+1gskG6EwYZZ2oJuwe2ZspzoZILP4Q53JgbcbcyXdaGlnKs/Jh08tl
nslgYiV8OkKI3465YTPn1x7yioSg8Wtyw6pu7QL+7aWrP0d3DiE6bnwClJYXlCb0
vnKzMwuT/pc6InQp924SpPaO4juAFLMjvh8xS+HP+l+MyqSjmba1/AOFaCDWcJKL
CtpxlHs6q7fS2w4r/41I0kqchTzTo0c=
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:47:48 2026 by rpki-client