Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa
File:                     6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa (raw, json)
Hash identifier:          77dou7dMmcnBqq3tecUD9eT5hYjYN5G7SaPg+u7WzNk=
Subject key identifier:   2E:C4:6C:DC:80:B7:B5:29:CE:80:56:05:AD:91:7D:88:DE:F3:44:EC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A14331F03884D8B122C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        72.92.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a1:43:31:f0:38:84:d8:b1:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=a60ad79f-8745-497a-a703-0cf0d22494fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5a:c9:4e:53:e7:9e:ef:d2:22:6e:51:bc:4b:
                    2e:54:4e:7f:13:07:cb:aa:98:59:95:24:96:81:8c:
                    d5:a6:56:46:65:a3:94:b2:9c:93:50:59:36:a3:e0:
                    7c:1f:4c:44:59:95:44:6f:05:21:8b:00:35:34:01:
                    4a:93:1a:75:5f:dd:5e:0f:db:8f:a2:41:30:81:cc:
                    44:c6:af:2c:a5:cb:15:57:e7:35:7e:5a:03:54:ca:
                    9b:57:35:a2:92:46:eb:a3:a3:cf:93:88:56:07:d5:
                    ba:33:00:f6:63:fa:ac:5a:59:7b:b3:1c:bb:c0:a6:
                    01:20:1a:d8:c9:7d:82:6e:e2:a5:71:72:03:81:0c:
                    00:62:95:2b:14:c7:2f:83:c1:b9:08:d4:69:62:70:
                    3f:e3:78:53:89:7b:af:47:ee:06:3a:70:bb:57:46:
                    b3:9c:05:77:90:77:cc:44:2c:e2:e9:d5:8d:5e:cc:
                    d4:25:43:2e:aa:c1:26:b1:78:24:93:ce:57:7a:04:
                    fe:00:76:43:e5:d7:0a:53:ec:9f:c1:b6:0e:49:ff:
                    a5:5a:e0:4d:ff:90:3c:4b:da:67:2a:f5:0f:48:15:
                    6f:33:d8:0d:68:1b:8e:36:fa:f6:08:61:8e:d4:c1:
                    e9:14:7f:e1:31:3f:00:ed:28:eb:87:48:22:77:7d:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C4:6C:DC:80:B7:B5:29:CE:80:56:05:AD:91:7D:88:DE:F3:44:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ca4dc2c-aad8-34b4-9417-080b9a317fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.92.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:06:d8:de:9b:6a:34:17:d6:7a:ce:e7:b6:5b:e5:88:5a:31:
         88:53:09:0e:1b:f1:b2:e6:52:c5:2e:e6:10:96:40:34:3e:30:
         9d:b0:62:2f:37:7d:69:f3:be:03:f0:83:02:97:85:86:e8:84:
         5e:68:aa:90:30:41:5e:1a:b3:c2:69:98:3a:a1:60:4e:47:f4:
         f8:81:b5:ae:b2:7d:73:52:88:1d:30:5d:32:57:18:dd:f3:6a:
         35:28:50:c0:4b:0f:74:37:bf:d0:df:25:3f:17:4c:be:77:7f:
         41:c3:03:1b:3c:7e:50:63:33:60:cf:60:96:85:9f:b5:ff:a4:
         25:9a:25:5e:fe:fc:c0:44:d1:fc:a4:33:b6:1a:2b:e7:3f:ad:
         7f:21:cc:be:09:0d:e4:73:4c:ee:75:ab:22:63:64:f8:bd:bd:
         92:9c:a0:82:e4:b6:88:03:15:b0:21:2c:ed:57:53:31:e4:8b:
         46:74:45:1d:fa:08:d6:97:0a:1b:57:ea:ea:6b:ea:54:82:ea:
         cc:b9:89:9e:a7:cd:47:68:98:ee:e1:b2:7e:b8:f2:ad:36:29:
         d5:37:49:1f:24:15:dc:0b:23:1b:50:bb:a8:ac:22:59:e7:cb:
         71:34:ec:22:44:f6:89:4d:6c:a8:0d:6c:94:5a:17:d9:92:04:
         d2:66:91:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaKFDMfA4hNixIsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
YTYwYWQ3OWYtODc0NS00OTdhLWE3MDMtMGNmMGQyMjQ5NGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51rJTlPnnu/SIm5RvEsuVE5/EwfLqphZlSSW
gYzVplZGZaOUspyTUFk2o+B8H0xEWZVEbwUhiwA1NAFKkxp1X91eD9uPokEwgcxE
xq8spcsVV+c1floDVMqbVzWikkbro6PPk4hWB9W6MwD2Y/qsWll7sxy7wKYBIBrY
yX2CbuKlcXIDgQwAYpUrFMcvg8G5CNRpYnA/43hTiXuvR+4GOnC7V0aznAV3kHfM
RCzi6dWNXszUJUMuqsEmsXgkk85XegT+AHZD5dcKU+yfwbYOSf+lWuBN/5A8S9pn
KvUPSBVvM9gNaBuONvr2CGGO1MHpFH/hMT8A7Sjrh0gid33vewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7EbNyAt7UpzoBWBa2RfYje80TsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmNhNGRjMmMtYWFkOC0z
NGI0LTk0MTctMDgwYjlhMzE3ZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESFzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMG2N6bajQX1nrO57Zb5YhaMYhTCQ4b8bLmUsUu5hCWQDQ+MJ2wYi83
fWnzvgPwgwKXhYbohF5oqpAwQV4as8JpmDqhYE5H9PiBta6yfXNSiB0wXTJXGN3z
ajUoUMBLD3Q3v9DfJT8XTL53f0HDAxs8flBjM2DPYJaFn7X/pCWaJV7+/MBE0fyk
M7YaK+c/rX8hzL4JDeRzTO51qyJjZPi9vZKcoILktogDFbAhLO1XUzHki0Z0RR36
CNaXChtX6upr6lSC6sy5iZ6nzUdomO7hsn648q02KdU3SR8kFdwLIxtQu6isIlnn
y3E07CJE9olNbKgNbJRaF9mSBNJmkd8=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:10:58 2026 by rpki-client