Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/87f106fd-f72f-36db-8354-803bfa8d5d7d.roa
File:                     87f106fd-f72f-36db-8354-803bfa8d5d7d.roa (raw, json)
Hash identifier:          sJQBHD6JfvW6fktyKAkCwDZUlN7RMuqKUtp0NkKt+kM=
Subject key identifier:   A3:B8:37:FD:0D:A7:EF:70:DB:D7:99:14:A8:F9:BB:FC:66:5F:92:CB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E5B4070CBDF1663290108DFF4
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/87f106fd-f72f-36db-8354-803bfa8d5d7d.roa
Signing time:             Wed 01 Jul 2026 17:16:55 +0000
ROA not before:           Wed 01 Jul 2026 17:16:55 +0000
ROA not after:            Tue 29 Sep 2026 17:16:55 +0000
asID:                     7029
IP address blocks:        72.244.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:40:70:cb:df:16:63:29:01:08:df:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  1 17:16:55 2026 GMT
            Not After : Sep 29 17:16:55 2026 GMT
        Subject: CN=0c7f21dd-6ee7-4e25-8f7f-8a8f6625b84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0a:ec:14:de:46:3e:a2:2d:df:9a:da:16:f4:
                    f5:c6:8d:37:07:ea:f3:91:b1:d3:27:b2:2b:72:56:
                    ed:7d:3d:cd:cf:d7:70:a2:9b:4c:82:f8:a3:81:e9:
                    cc:00:e8:b3:80:ac:d0:b9:6c:3e:a7:83:ec:93:62:
                    ad:b5:75:1d:66:12:e6:15:dd:3e:b7:54:10:47:b3:
                    47:e7:4c:7e:d3:3a:94:36:ca:3e:e6:19:ea:e6:15:
                    21:0c:c2:f0:41:a6:b6:95:55:d3:7f:70:e1:41:87:
                    27:4e:6d:95:b8:04:b0:b0:1d:16:91:d6:e5:f1:e5:
                    8f:bf:30:e8:be:73:7e:07:2a:f2:4a:4c:24:14:75:
                    97:cb:d9:dd:b7:d0:8b:26:ee:06:b4:39:7d:76:6e:
                    7f:9d:59:5e:ad:f5:60:ed:81:ca:69:61:64:73:f7:
                    f4:e1:93:df:e5:ba:6e:44:8a:21:be:93:5e:16:a4:
                    9e:c8:cf:41:00:e6:3f:99:68:28:e8:9f:b8:98:33:
                    6b:f5:27:c4:5b:01:99:55:d9:da:45:30:e2:37:10:
                    50:17:da:7f:80:1d:20:bf:da:68:22:b8:2c:92:f2:
                    a5:b7:53:6e:c1:6a:f6:c3:af:d9:d9:55:48:8f:18:
                    f9:37:30:6a:e0:0d:8b:3a:9d:61:cf:6d:ce:8a:7e:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B8:37:FD:0D:A7:EF:70:DB:D7:99:14:A8:F9:BB:FC:66:5F:92:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/87f106fd-f72f-36db-8354-803bfa8d5d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4b:7f:aa:41:b6:b3:52:9a:1f:de:7a:43:1f:ee:00:6c:a5:
         1d:bb:d5:87:0a:bb:c1:53:73:68:58:56:15:30:ac:8e:78:99:
         e8:27:37:da:4f:69:90:08:77:03:5d:65:32:aa:50:96:2e:c1:
         66:d3:df:0e:9e:d3:a2:4e:7f:b2:20:d7:f2:1b:c3:93:42:4c:
         7b:ba:41:44:cf:50:c4:d0:d1:e2:9a:c5:7a:87:a7:68:22:6f:
         3b:1b:a3:5b:4f:75:fc:50:da:2e:fc:b5:cc:a4:fd:dc:45:0a:
         59:cb:5e:5b:32:e0:63:90:7b:67:65:fd:63:1c:85:dc:a0:11:
         bf:df:4a:dc:c8:c2:1a:4f:45:43:22:4c:20:77:b1:f1:a1:00:
         bb:c1:83:3a:b1:5a:a6:23:42:07:a6:9f:39:60:bd:7c:8c:a7:
         22:f6:14:36:c7:3c:69:02:22:45:12:b1:78:1a:46:af:b1:23:
         4b:a0:0f:6b:cf:d2:b4:53:6b:93:97:86:37:0e:24:6c:f5:9f:
         98:ec:4f:f9:ff:3e:14:f4:8a:4a:02:25:85:15:31:6c:42:2a:
         e1:0c:a6:29:63:df:cf:00:17:ca:4e:94:70:0a:58:6d:b3:cd:
         24:fe:33:c7:85:09:ec:39:c8:32:50:33:64:5d:48:8a:97:14:
         c9:7e:68:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5bQHDL3xZjKQEI3/QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcwMTE3MTY1NVoXDTI2MDkyOTE3MTY1NVowLzEtMCsGA1UEAxMk
MGM3ZjIxZGQtNmVlNy00ZTI1LThmN2YtOGE4ZjY2MjViODRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggrsFN5GPqIt35raFvT1xo03B+rzkbHTJ7Ir
clbtfT3Nz9dwoptMgvijgenMAOizgKzQuWw+p4Psk2KttXUdZhLmFd0+t1QQR7NH
50x+0zqUNso+5hnq5hUhDMLwQaa2lVXTf3DhQYcnTm2VuASwsB0Wkdbl8eWPvzDo
vnN+ByrySkwkFHWXy9ndt9CLJu4GtDl9dm5/nVlerfVg7YHKaWFkc/f04ZPf5bpu
RIohvpNeFqSeyM9BAOY/mWgo6J+4mDNr9SfEWwGZVdnaRTDiNxBQF9p/gB0gv9po
IrgskvKlt1NuwWr2w6/Z2VVIjxj5NzBq4A2LOp1hz23Oin6o7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKO4N/0Np+9w29eZFKj5u/xmX5LLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODdmMTA2ZmQtZjcyZi0z
NmRiLTgzNTQtODAzYmZhOGQ1ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQ1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtLf6pBtrNSmh/eekMf7gBspR271YcKu8FTc2hYVhUwrI54megnN9pP
aZAIdwNdZTKqUJYuwWbT3w6e06JOf7Ig1/Ibw5NCTHu6QUTPUMTQ0eKaxXqHp2gi
bzsbo1tPdfxQ2i78tcyk/dxFClnLXlsy4GOQe2dl/WMchdygEb/fStzIwhpPRUMi
TCB3sfGhALvBgzqxWqYjQgemnzlgvXyMpyL2FDbHPGkCIkUSsXgaRq+xI0ugD2vP
0rRTa5OXhjcOJGz1n5jsT/n/PhT0ikoCJYUVMWxCKuEMpilj388AF8pOlHAKWG2z
zST+M8eFCew5yDJQM2RdSIqXFMl+aHw=
-----END CERTIFICATE-----
Generated at Fri Jul 10 13:48:20 2026 by rpki-client