Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccabaeb6-9b9c-3e30-9379-65bf7f12a164.roa
File:                     ccabaeb6-9b9c-3e30-9379-65bf7f12a164.roa (raw, json)
Hash identifier:          hFle7uMTvxcxN0/Qhf2dS9eRGHw2IGju5MeGiP3Vsb0=
Subject key identifier:   F8:A1:F5:D2:CC:6C:9E:E9:50:8F:62:94:5F:BC:06:98:70:0A:1C:1D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA7911E830A9696B2D5FD74C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccabaeb6-9b9c-3e30-9379-65bf7f12a164.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        72.244.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:1e:83:0a:96:96:b2:d5:fd:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aced51f4-f1cb-4585-b09d-f882a22d8bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:97:d6:43:35:33:31:c0:a2:3f:26:b4:d1:
                    ce:be:e0:eb:5c:44:de:1a:67:18:db:ef:b8:43:28:
                    c9:08:d3:b5:55:c5:bf:d5:72:19:1c:83:1a:eb:6c:
                    b9:60:83:68:5b:23:c9:7c:ac:6e:f5:b0:86:6d:d9:
                    f3:6e:fc:36:90:70:e0:c8:7a:41:9a:f5:df:c1:15:
                    6c:69:9d:cd:af:81:1e:cb:db:6b:d3:f1:f5:f6:3d:
                    73:3a:62:06:0a:0c:1f:0f:a3:31:71:e8:6c:fa:78:
                    71:a5:d2:ad:91:a5:fa:83:56:c5:fc:7e:09:c1:fb:
                    e8:bd:7e:e2:0f:6d:33:e3:a4:0a:8b:b5:ef:ef:17:
                    e1:f3:85:c0:9d:ad:27:49:a1:c5:ee:10:4a:27:44:
                    a3:d4:15:f2:30:96:99:ab:c8:47:26:57:ed:f1:eb:
                    cc:e6:2e:d2:0b:7b:9b:28:e4:c7:6c:30:6f:62:48:
                    0a:e9:f2:7f:62:f3:b7:fa:d4:59:a3:d9:43:72:89:
                    e5:f6:4c:58:53:7f:a4:5d:ff:fb:7e:ce:ed:ab:c3:
                    12:09:29:b5:73:0a:d2:ea:46:97:0e:01:85:03:6f:
                    89:ed:21:2a:14:93:a3:91:d5:7e:97:8c:78:86:af:
                    ba:be:07:81:4c:07:ba:9e:f2:81:e4:4a:a5:df:d6:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A1:F5:D2:CC:6C:9E:E9:50:8F:62:94:5F:BC:06:98:70:0A:1C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccabaeb6-9b9c-3e30-9379-65bf7f12a164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:5a:bf:2d:5a:9a:5a:a8:8f:de:98:e8:2d:c7:30:1a:19:88:
         28:0b:9a:16:fa:58:d4:f9:f0:a3:9d:c3:39:60:18:d1:dd:ad:
         0e:41:ac:f7:39:f4:15:a3:cb:d5:91:1a:57:86:18:a2:80:1b:
         a5:ca:5c:01:69:1d:8a:0e:dd:80:20:aa:04:3a:96:58:f9:9d:
         e0:44:5f:d5:fe:79:e3:1c:94:7a:b2:78:f8:5c:87:48:f2:3d:
         66:54:66:39:bc:6c:69:ce:85:15:82:72:6a:52:81:86:e3:25:
         2a:e4:74:ce:61:8f:68:79:84:dd:a6:94:d0:fb:67:85:83:e3:
         83:ee:01:37:24:44:0a:0d:32:2a:4a:97:88:38:a3:1f:40:38:
         a2:fe:1a:07:df:c5:9f:4f:d6:91:c2:59:94:86:28:80:8c:e7:
         5f:fe:90:c3:28:e5:f7:bb:c2:22:d3:74:11:62:25:2f:83:b2:
         9a:35:cb:84:c7:d3:ce:2f:df:2f:0a:25:47:7a:21:5d:03:ec:
         19:14:87:9e:ea:a6:a0:25:41:5d:89:20:60:46:87:f2:25:a2:
         ff:b1:b3:a4:78:6a:75:38:2b:26:79:8c:5b:b0:0c:ca:63:ee:
         d0:c5:e3:88:b4:5f:77:08:9d:9c:87:43:0e:8d:50:25:bc:73:
         0e:7e:54:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkR6DCpaWstX9dMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YWNlZDUxZjQtZjFjYi00NTg1LWIwOWQtZjg4MmEyMmQ4YmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNCX1kM1MzHAoj8mtNHOvuDrXETeGmcY2++4
QyjJCNO1VcW/1XIZHIMa62y5YINoWyPJfKxu9bCGbdnzbvw2kHDgyHpBmvXfwRVs
aZ3Nr4Eey9tr0/H19j1zOmIGCgwfD6Mxcehs+nhxpdKtkaX6g1bF/H4JwfvovX7i
D20z46QKi7Xv7xfh84XAna0nSaHF7hBKJ0Sj1BXyMJaZq8hHJlft8evM5i7SC3ub
KOTHbDBvYkgK6fJ/YvO3+tRZo9lDconl9kxYU3+kXf/7fs7tq8MSCSm1cwrS6kaX
DgGFA2+J7SEqFJOjkdV+l4x4hq+6vgeBTAe6nvKB5Eql39Zo7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPih9dLMbJ7pUI9ilF+8BphwChwdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2NhYmFlYjYtOWI5Yy0z
ZTMwLTkzNzktNjViZjdmMTJhMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMJavy1amlqoj96Y6C3HMBoZiCgLmhb6WNT58KOdwzlgGNHdrQ5BrPc5
9BWjy9WRGleGGKKAG6XKXAFpHYoO3YAgqgQ6llj5neBEX9X+eeMclHqyePhch0jy
PWZUZjm8bGnOhRWCcmpSgYbjJSrkdM5hj2h5hN2mlND7Z4WD44PuATckRAoNMipK
l4g4ox9AOKL+GgffxZ9P1pHCWZSGKICM51/+kMMo5fe7wiLTdBFiJS+Dspo1y4TH
084v3y8KJUd6IV0D7BkUh57qpqAlQV2JIGBGh/Ilov+xs6R4anU4KyZ5jFuwDMpj
7tDF44i0X3cInZyHQw6NUCW8cw5+VF4=
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:21:10 2026 by rpki-client