Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7acd5227-4ec2-33f5-aacf-bf8364a77974.roa
File:                     7acd5227-4ec2-33f5-aacf-bf8364a77974.roa (raw, json)
Hash identifier:          QOo6Cw1Bsfch78X5vhWE5BvfBz/vC7Zan4GaOptLEhk=
Subject key identifier:   85:4D:72:F3:03:56:00:82:9C:8E:56:DA:B0:7A:EB:E1:A6:8D:78:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EC7A1E70DCF3E8548882C6F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7acd5227-4ec2-33f5-aacf-bf8364a77974.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        72.109.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e7:0d:cf:3e:85:48:88:2c:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=8949d573-e2f3-41a3-9356-530166268a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:d4:7b:7a:85:86:73:e5:e5:70:12:ce:47:
                    8e:e4:85:57:1b:82:f4:ca:9f:19:0b:be:c9:6e:78:
                    15:82:dd:40:60:2b:25:cc:ef:ab:e6:ac:32:3a:15:
                    3d:51:5a:b4:29:a7:a0:b7:c3:28:a1:26:04:21:f2:
                    a6:69:77:90:b8:c6:a8:7c:71:78:89:0d:dd:f6:00:
                    cf:8f:0a:ca:a0:14:04:54:0f:5a:73:a3:46:ea:59:
                    25:98:44:ea:53:36:f8:df:ac:7f:95:a1:40:dc:19:
                    84:79:2b:72:52:6b:29:82:9d:c9:29:c8:d0:b0:86:
                    73:7f:52:d9:25:52:1e:b1:f1:f6:e7:58:fe:53:31:
                    70:56:ce:7d:4b:6a:2e:c4:17:66:a0:a6:58:2c:f6:
                    e0:ab:fa:fa:d5:4b:c1:8f:fd:ea:f9:9f:ed:2f:59:
                    94:c0:e0:e2:19:72:4a:d1:f7:e3:75:d8:82:fe:84:
                    b8:0e:7c:6d:0c:6d:22:02:2f:fc:8d:c3:45:77:1b:
                    db:ab:5f:c8:2c:6a:76:f6:92:02:b0:ae:65:83:7e:
                    97:4e:e5:09:fd:d0:a8:ea:81:99:f0:42:af:3d:23:
                    b1:ae:4a:1c:ed:04:c4:67:25:49:9c:2e:9a:f7:d8:
                    c1:f3:fd:06:38:0e:12:19:15:20:af:71:28:f0:c8:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4D:72:F3:03:56:00:82:9C:8E:56:DA:B0:7A:EB:E1:A6:8D:78:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7acd5227-4ec2-33f5-aacf-bf8364a77974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.109.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:54:41:64:03:f5:c5:c6:0f:4d:20:d2:9d:ad:86:3b:27:68:
         d7:c3:1f:7c:21:94:2c:e3:64:65:c1:50:47:94:90:52:93:e9:
         f7:56:4e:a1:ce:2c:fe:00:26:df:b1:ae:b1:c4:57:a2:6f:01:
         43:26:85:eb:89:db:8d:e2:d2:0d:75:57:ad:24:d4:4a:44:6f:
         84:70:de:3b:1b:7e:b8:43:06:a4:2b:33:e6:e1:1d:b7:5d:c1:
         ae:55:c9:39:c9:2e:47:1d:22:48:cb:72:be:e3:d3:67:fa:17:
         b1:ba:32:0c:58:06:90:2b:80:16:c4:65:eb:65:95:62:96:9c:
         2c:83:44:a2:00:f9:4e:14:c5:92:24:5b:57:e2:24:89:28:44:
         d5:8d:15:df:89:e4:9e:0b:c3:fd:2d:14:a8:3a:34:97:e5:05:
         fb:ad:36:64:f0:1c:31:cc:c9:72:0c:a4:09:49:86:5a:a6:a3:
         09:a7:f8:10:16:9e:14:96:89:8c:b6:00:d0:b5:3c:e2:8d:04:
         eb:da:0d:23:12:ba:39:56:b3:1b:25:ee:e6:96:9e:3b:1f:50:
         73:42:15:ed:16:4c:36:a9:fa:cb:14:1e:8d:0f:b5:f3:9c:e2:
         51:02:90:ca:90:3f:36:88:5f:c0:3a:a2:cb:ff:9f:0a:4a:f5:
         37:35:18:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HoecNzz6FSIgsbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
ODk0OWQ1NzMtZTJmMy00MWEzLTkzNTYtNTMwMTY2MjY4YTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL/Ue3qFhnPl5XASzkeO5IVXG4L0yp8ZC77J
bngVgt1AYCslzO+r5qwyOhU9UVq0Kaegt8MooSYEIfKmaXeQuMaofHF4iQ3d9gDP
jwrKoBQEVA9ac6NG6lklmETqUzb436x/laFA3BmEeStyUmspgp3JKcjQsIZzf1LZ
JVIesfH251j+UzFwVs59S2ouxBdmoKZYLPbgq/r61UvBj/3q+Z/tL1mUwODiGXJK
0ffjddiC/oS4DnxtDG0iAi/8jcNFdxvbq1/ILGp29pICsK5lg36XTuUJ/dCo6oGZ
8EKvPSOxrkoc7QTEZyVJnC6a99jB8/0GOA4SGRUgr3Eo8Mh4xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVNcvMDVgCCnI5W2rB66+GmjXgrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2FjZDUyMjctNGVjMi0z
M2Y1LWFhY2YtYmY4MzY0YTc3OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSG0kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBUQWQD9cXGD00g0p2thjsnaNfDH3whlCzjZGXBUEeUkFKT6fdWTqHO
LP4AJt+xrrHEV6JvAUMmheuJ243i0g11V60k1EpEb4Rw3jsbfrhDBqQrM+bhHbdd
wa5VyTnJLkcdIkjLcr7j02f6F7G6MgxYBpArgBbEZetllWKWnCyDRKIA+U4UxZIk
W1fiJIkoRNWNFd+J5J4Lw/0tFKg6NJflBfutNmTwHDHMyXIMpAlJhlqmowmn+BAW
nhSWiYy2ANC1POKNBOvaDSMSujlWsxsl7uaWnjsfUHNCFe0WTDap+ssUHo0PtfOc
4lECkMqQPzaIX8A6osv/nwpK9Tc1GIE=
-----END CERTIFICATE-----
Generated at Thu Aug 27 21:47:33 2026 by rpki-client