Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b65771f-095b-3f73-b749-be6e9d1578d5.roa
File:                     7b65771f-095b-3f73-b749-be6e9d1578d5.roa (raw, json)
Hash identifier:          6SaZcFgA+5bTepPIgKI9cyYricoj+aG2ucTNmJRu4h8=
Subject key identifier:   8D:D3:FE:99:05:35:0B:EE:71:DF:0A:DD:0C:BA:90:3B:7F:2D:CE:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A0A12AD55D90C930A3980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b65771f-095b-3f73-b749-be6e9d1578d5.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.105.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:0a:12:ad:55:d9:0c:93:0a:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=1147cc2a-fc26-4123-829f-2ca3f1ec4664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:72:22:07:0f:73:f4:ea:e4:c3:1c:55:41:
                    16:21:ea:c6:5e:f0:68:98:d7:57:23:73:6d:59:6f:
                    13:63:52:de:e2:1c:ca:a0:41:b4:e5:59:d5:f8:81:
                    b3:58:33:35:42:c8:a7:40:17:00:d2:44:d6:30:34:
                    80:0e:ff:3b:86:48:13:98:dc:11:dd:22:de:4f:c6:
                    b9:85:1d:01:06:4a:91:e2:44:24:b8:90:21:ee:46:
                    f8:7b:c2:3f:06:95:56:b6:09:18:e1:e7:2f:f5:86:
                    8b:d7:7f:c6:03:ef:28:8c:10:59:0e:c4:9d:81:c3:
                    f0:38:0e:56:0b:78:37:28:6d:3d:58:05:88:51:82:
                    ee:ef:6f:8b:c7:cc:77:33:1e:d2:b6:df:44:07:58:
                    15:f7:a6:24:e6:78:92:71:3a:13:77:09:c7:74:68:
                    7c:40:58:e8:8a:76:32:2d:4b:9d:53:ff:f7:49:9d:
                    fa:01:44:a5:a7:b1:85:cd:ce:9e:6a:26:e4:c9:30:
                    ab:4a:a1:20:80:2b:ba:09:12:c7:55:24:b3:97:cd:
                    19:05:e1:64:a2:85:9c:8e:81:30:bc:52:0e:66:25:
                    de:05:2c:71:5e:ca:da:aa:0f:1e:c6:df:cc:57:b1:
                    ee:4b:c9:44:a8:be:08:ce:6c:1f:25:51:18:bb:d8:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D3:FE:99:05:35:0B:EE:71:DF:0A:DD:0C:BA:90:3B:7F:2D:CE:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b65771f-095b-3f73-b749-be6e9d1578d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:9d:87:77:e3:fc:74:b1:3e:5f:00:ad:ab:bc:11:26:6c:2d:
         53:fb:3c:f0:a5:b8:1e:90:89:aa:2a:5a:85:49:4f:d4:67:c7:
         8e:ab:36:65:84:93:a0:bb:19:5d:8c:d1:93:ef:54:83:59:1b:
         ba:5c:9f:f2:ce:50:e8:66:61:b5:6c:87:4b:f0:a3:da:ab:5a:
         ab:14:5b:55:30:09:dd:3d:74:80:bd:ea:d6:94:b4:c2:bb:8e:
         47:3b:b6:c0:40:7d:66:81:53:97:8c:45:b6:82:68:10:13:c4:
         ac:3e:bd:72:74:75:94:78:f1:e5:7d:c9:40:56:f2:f9:7b:6d:
         cc:59:25:23:1a:76:ec:71:43:6d:03:f0:6b:33:a8:d7:f0:38:
         15:cc:95:4a:e3:b9:cd:8d:a0:28:a0:2d:86:9b:56:cc:52:b1:
         30:b1:96:81:88:88:02:d4:ce:ab:fa:19:f4:aa:f5:92:d3:e1:
         7d:f0:1e:58:48:4c:72:78:d0:40:ab:87:f5:77:ad:1f:02:df:
         99:54:a4:e3:0f:26:25:78:f5:c3:44:1c:41:e7:33:3b:47:ea:
         b1:8c:e3:ed:b4:60:55:00:23:cb:4b:f5:25:8e:97:04:5d:d8:
         7b:b8:99:a1:10:ea:54:68:6b:92:5a:e4:26:91:94:7a:4f:e6:
         6e:23:92:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgoSrVXZDJMKOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
MTE0N2NjMmEtZmMyNi00MTIzLTgyOWYtMmNhM2YxZWM0NjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtityIgcPc/Tq5MMcVUEWIerGXvBomNdXI3Nt
WW8TY1Le4hzKoEG05VnV+IGzWDM1QsinQBcA0kTWMDSADv87hkgTmNwR3SLeT8a5
hR0BBkqR4kQkuJAh7kb4e8I/BpVWtgkY4ecv9YaL13/GA+8ojBBZDsSdgcPwOA5W
C3g3KG09WAWIUYLu72+Lx8x3Mx7Stt9EB1gV96Yk5niScToTdwnHdGh8QFjoinYy
LUudU//3SZ36AUSlp7GFzc6eaibkyTCrSqEggCu6CRLHVSSzl80ZBeFkooWcjoEw
vFIOZiXeBSxxXsraqg8ext/MV7HuS8lEqL4IzmwfJVEYu9j2SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3T/pkFNQvucd8K3Qy6kDt/Lc4mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2I2NTc3MWYtMDk1Yi0z
ZjczLWI3NDktYmU2ZTlkMTU3OGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGkYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJedh3fj/HSxPl8Arau8ESZsLVP7PPCluB6QiaoqWoVJT9Rnx46rNmWE
k6C7GV2M0ZPvVINZG7pcn/LOUOhmYbVsh0vwo9qrWqsUW1UwCd09dIC96taUtMK7
jkc7tsBAfWaBU5eMRbaCaBATxKw+vXJ0dZR48eV9yUBW8vl7bcxZJSMaduxxQ20D
8GszqNfwOBXMlUrjuc2NoCigLYabVsxSsTCxloGIiALUzqv6GfSq9ZLT4X3wHlhI
THJ40ECrh/V3rR8C35lUpOMPJiV49cNEHEHnMztH6rGM4+20YFUAI8tL9SWOlwRd
2Hu4maEQ6lRoa5Ja5CaRlHpP5m4jkks=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:38:53 2026 by rpki-client