Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37ad8f7-65b2-38e4-920e-a373f524040d.roa
File:                     c37ad8f7-65b2-38e4-920e-a373f524040d.roa (raw, json)
Hash identifier:          jI7nZM9QYx5IVyAr4OQHz39kP86YlrcjoGSvBJCJ320=
Subject key identifier:   39:AA:48:23:12:E2:45:52:FC:6D:B0:5A:87:13:18:03:90:2B:F4:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A119E2A3513E547DDEE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37ad8f7-65b2-38e4-920e-a373f524040d.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.96.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:11:9e:2a:35:13:e5:47:dd:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=07d4889d-6048-4be1-b27c-0f46f1baad33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:2e:94:de:ac:84:2e:d7:0d:c8:82:e5:06:
                    6a:a2:b5:fa:e5:3c:bd:65:d6:64:53:81:45:46:49:
                    b1:ab:28:b5:8e:85:f3:47:c2:58:d2:6b:01:bf:3b:
                    6a:eb:e4:d3:81:69:ac:23:86:36:f9:c9:48:fa:0f:
                    ac:97:1f:97:4a:ef:31:4c:c5:cb:1b:45:fe:5b:75:
                    77:dc:76:37:33:31:04:df:26:e0:eb:e4:13:ae:90:
                    76:12:e5:b0:de:e7:2a:69:55:ee:99:78:84:e9:6e:
                    a9:eb:1f:ea:a5:ff:50:46:4b:57:c1:d4:12:c0:50:
                    4a:df:96:7d:db:85:d1:cd:f9:07:a9:a0:54:28:88:
                    2e:54:00:77:2d:ba:1a:2f:38:26:16:f4:e7:be:4d:
                    de:2f:0e:cb:fa:2e:c7:98:32:59:ee:b1:34:ae:d7:
                    9a:dd:53:eb:a5:b4:1c:04:61:e4:62:63:15:1a:c9:
                    d0:2b:60:86:00:51:b1:9b:81:08:41:cc:06:4e:a3:
                    a1:68:df:53:63:38:40:97:a0:89:99:a7:63:5b:c3:
                    16:40:1a:a0:52:ac:b6:28:12:97:44:de:1d:3e:58:
                    47:a1:4c:0d:97:bc:b5:9c:cb:4e:2c:df:c0:f4:f7:
                    33:4f:23:f4:c4:cc:d4:57:a5:90:e5:8c:08:f6:54:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AA:48:23:12:E2:45:52:FC:6D:B0:5A:87:13:18:03:90:2B:F4:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37ad8f7-65b2-38e4-920e-a373f524040d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:93:31:0d:63:c8:b9:6f:4a:e5:b5:3a:db:a3:a5:10:11:31:
         fd:18:18:ba:ae:77:62:6c:ce:6f:b5:c9:f4:7a:3f:e5:bc:9e:
         2c:f0:4c:93:36:66:9f:cb:41:41:3c:5b:20:19:c5:3a:1a:ca:
         59:61:18:7e:17:ed:fe:7a:40:1c:b3:4e:fc:9d:dd:a4:72:45:
         0e:93:2f:6b:cf:3c:55:e0:a1:06:50:41:bd:14:98:74:9a:8d:
         0c:3c:d5:a9:d0:2e:64:9c:e7:c0:38:87:7b:33:18:8e:08:ce:
         85:1f:9b:1a:e0:a8:ae:04:d1:ac:1a:e7:a5:5b:fa:39:10:8e:
         f3:94:4f:cf:ec:f5:a9:9e:f7:6b:02:46:8f:79:0e:0c:e1:fc:
         ce:0b:9a:1f:56:a3:c3:5a:cf:ee:09:cd:25:60:1d:f6:17:dd:
         76:9c:c9:e9:1b:73:bc:fa:7d:f8:8e:9f:3d:6f:ce:4b:e1:b8:
         72:0a:dc:45:b4:70:0f:7a:0f:d2:69:23:98:c0:dd:f7:39:c8:
         ae:a7:96:cc:fa:0f:1e:59:0c:b5:27:49:6c:cb:12:87:f1:56:
         f3:f5:16:6a:fd:de:b8:05:dd:2c:60:9f:9a:e8:eb:aa:d6:45:
         f0:63:3f:c6:e1:5e:cf:e8:8a:7b:af:41:c9:d1:ca:eb:ff:61:
         6a:a1:ad:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aShGeKjUT5Ufd7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
MDdkNDg4OWQtNjA0OC00YmUxLWIyN2MtMGY0NmYxYmFhZDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxgulN6shC7XDciC5QZqorX65Ty9ZdZkU4FF
Rkmxqyi1joXzR8JY0msBvztq6+TTgWmsI4Y2+clI+g+slx+XSu8xTMXLG0X+W3V3
3HY3MzEE3ybg6+QTrpB2EuWw3ucqaVXumXiE6W6p6x/qpf9QRktXwdQSwFBK35Z9
24XRzfkHqaBUKIguVAB3LboaLzgmFvTnvk3eLw7L+i7HmDJZ7rE0rtea3VPrpbQc
BGHkYmMVGsnQK2CGAFGxm4EIQcwGTqOhaN9TYzhAl6CJmadjW8MWQBqgUqy2KBKX
RN4dPlhHoUwNl7y1nMtOLN/A9PczTyP0xMzUV6WQ5YwI9lQXkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmqSCMS4kVS/G2wWocTGAOQK/QtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzM3YWQ4ZjctNjViMi0z
OGU0LTkyMGUtYTM3M2Y1MjQwNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKTMQ1jyLlvSuW1OtujpRARMf0YGLqud2Jszm+1yfR6P+W8nizwTJM2
Zp/LQUE8WyAZxToayllhGH4X7f56QByzTvyd3aRyRQ6TL2vPPFXgoQZQQb0UmHSa
jQw81anQLmSc58A4h3szGI4IzoUfmxrgqK4E0awa56Vb+jkQjvOUT8/s9ame92sC
Ro95Dgzh/M4Lmh9Wo8Naz+4JzSVgHfYX3Xacyekbc7z6ffiOnz1vzkvhuHIK3EW0
cA96D9JpI5jA3fc5yK6nlsz6Dx5ZDLUnSWzLEofxVvP1Fmr93rgF3Sxgn5ro66rW
RfBjP8bhXs/oinuvQcnRyuv/YWqhrUI=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:36:59 2026 by rpki-client