Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d54eca6f-2965-3ae6-b89c-1fcf60156fb7.roa
File:                     d54eca6f-2965-3ae6-b89c-1fcf60156fb7.roa (raw, json)
Hash identifier:          gHgstH+sI50RY3hLf2UHTTHzkOpKykU+iy05dLagO7E=
Subject key identifier:   3A:D5:22:23:E5:D6:F8:6E:07:75:9D:DC:3F:3C:A5:52:A0:17:01:37
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E577F44FF382B90F49D196700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d54eca6f-2965-3ae6-b89c-1fcf60156fb7.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     2914
IP address blocks:        72.245.192.0/21 maxlen: 24
                          72.245.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:44:ff:38:2b:90:f4:9d:19:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=58a870f6-02ba-4840-bd37-73431a1c22b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:b3:df:27:39:d1:08:c9:4b:ef:03:0c:a0:
                    9b:55:03:6c:fd:63:ec:29:5e:c7:0e:0e:28:21:7b:
                    ff:48:37:4e:4a:ef:50:7e:e0:cc:c1:dd:e7:02:82:
                    1a:28:8c:a8:0e:58:ba:05:29:d8:f9:7e:cc:18:d7:
                    11:4d:05:ab:30:f7:09:9e:a2:4a:50:31:36:af:5f:
                    d0:fd:6e:66:08:1a:16:2c:39:c9:85:2c:0b:d6:87:
                    7f:61:f9:72:5c:8b:90:a3:4e:e5:b9:85:de:c5:c1:
                    86:38:5f:4e:66:29:f9:86:8f:99:28:51:40:6f:04:
                    19:5a:68:8c:1e:e1:af:9e:72:0d:8d:20:8d:ac:f5:
                    16:7f:e4:c6:e6:7a:f5:b4:b3:ae:e2:cb:65:de:b8:
                    99:eb:02:b9:86:b3:05:e8:54:22:24:68:1d:1d:05:
                    dd:b6:fe:2f:5a:a2:49:e3:f8:2f:a7:bf:db:a1:cd:
                    4c:3f:98:6d:87:20:8f:fc:53:e7:19:2c:07:80:c9:
                    d7:b6:e1:fb:ec:87:56:81:e4:14:df:be:7b:ba:53:
                    3d:00:43:c9:ef:1f:6d:fb:ab:d6:54:3e:1e:9a:45:
                    8b:6c:48:07:db:98:25:f6:02:6c:d4:18:d3:4a:e8:
                    d8:43:43:59:b3:24:6c:61:56:4a:54:82:78:cf:77:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D5:22:23:E5:D6:F8:6E:07:75:9D:DC:3F:3C:A5:52:A0:17:01:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d54eca6f-2965-3ae6-b89c-1fcf60156fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.245.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:15:9f:05:11:be:87:7f:5c:eb:15:5f:ba:86:f9:e5:34:73:
         ed:56:de:ad:00:f1:82:60:5b:83:07:32:63:2a:a8:a4:b9:d4:
         15:b5:a4:91:ab:69:6a:d8:4a:18:60:80:29:61:31:4b:37:26:
         7a:1f:94:ce:0b:f4:2c:a0:c2:cd:0c:2e:3d:ac:9a:c4:6b:b6:
         8b:95:0e:01:72:03:1b:49:8a:e4:d1:07:63:60:2a:5b:8f:b1:
         ab:d7:64:93:0b:5c:0b:a2:f9:75:e4:28:c6:d0:a1:b9:5b:a9:
         52:87:44:23:2b:77:7b:ee:86:4e:f3:10:ae:f9:dd:23:8c:0d:
         7a:f3:b0:7e:d9:6d:52:69:ee:5d:3a:0e:be:a2:6b:00:25:d6:
         ca:ce:12:82:43:23:26:ba:8b:b1:39:00:69:4f:1a:a4:a0:75:
         1f:f1:a5:8f:a7:92:2f:80:3a:cb:bf:95:f9:f5:83:dc:0e:94:
         1d:ea:fb:2e:41:ef:84:28:df:84:ee:6a:d6:69:2a:9f:2f:ac:
         93:12:0f:7c:7a:25:f0:c2:ed:ed:9d:90:16:ee:a6:e6:82:b6:
         d6:19:0d:1a:a1:9d:f6:a9:38:74:82:3b:6a:f8:aa:ed:bc:1b:
         af:9f:74:f1:48:f5:fa:85:d7:8c:0e:b5:41:7f:00:f5:1a:d2:
         5c:0a:25:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0T/OCuQ9J0ZZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk
NThhODcwZjYtMDJiYS00ODQwLWJkMzctNzM0MzFhMWMyMmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKWz3yc50QjJS+8DDKCbVQNs/WPsKV7HDg4o
IXv/SDdOSu9QfuDMwd3nAoIaKIyoDli6BSnY+X7MGNcRTQWrMPcJnqJKUDE2r1/Q
/W5mCBoWLDnJhSwL1od/YflyXIuQo07luYXexcGGOF9OZin5ho+ZKFFAbwQZWmiM
HuGvnnINjSCNrPUWf+TG5nr1tLOu4stl3riZ6wK5hrMF6FQiJGgdHQXdtv4vWqJJ
4/gvp7/boc1MP5hthyCP/FPnGSwHgMnXtuH77IdWgeQU3757ulM9AEPJ7x9t+6vW
VD4emkWLbEgH25gl9gJs1BjTSujYQ0NZsyRsYVZKVIJ4z3csqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDrVIiPl1vhuB3Wd3D88pVKgFwE3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDU0ZWNhNmYtMjk2NS0z
YWU2LWI4OWMtMWZjZjYwMTU2ZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYVnwURvod/XOsVX7qG+eU0c+1W3q0A8YJgW4MHMmMqqKS51BW1pJGr
aWrYShhggClhMUs3JnoflM4L9Cygws0MLj2smsRrtouVDgFyAxtJiuTRB2NgKluP
savXZJMLXAui+XXkKMbQoblbqVKHRCMrd3vuhk7zEK753SOMDXrzsH7ZbVJp7l06
Dr6iawAl1srOEoJDIya6i7E5AGlPGqSgdR/xpY+nki+AOsu/lfn1g9wOlB3q+y5B
74Qo34TuatZpKp8vrJMSD3x6JfDC7e2dkBbupuaCttYZDRqhnfapOHSCO2r4qu28
G6+fdPFI9fqF14wOtUF/APUa0lwKJbM=
-----END CERTIFICATE-----
Generated at Fri Jul 10 13:52:01 2026 by rpki-client