Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa
File:                     3e608f82-082e-3625-8820-3883ef973c0c.roa (raw, json)
Hash identifier:          qyjLaYHxD9MiFXbvzPoV5jGy6e7dG6wfvehGN67Ds5M=
Subject key identifier:   9C:BF:30:4D:FE:77:EC:A6:4E:DF:94:63:E9:FC:59:E3:5D:38:BD:43
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584DFBD5EEF57FB41B2800E4E6C0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     13445
IP address blocks:        170.72.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ee:f5:7f:b4:1b:28:00:e4:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=d0990188-1156-48eb-ba16-57f9c216adea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:5f:25:63:e2:13:62:4d:79:56:8e:ed:28:
                    d1:5c:8b:b7:a5:5b:38:ef:8a:08:f0:a1:40:ab:37:
                    f2:59:fb:88:9a:f8:0b:1b:c4:d9:3a:fc:67:18:a0:
                    6f:40:48:25:90:2f:a0:4f:a6:8a:b8:6f:b6:34:8d:
                    46:ee:3e:44:fd:52:e4:72:9a:c7:9d:07:25:38:dc:
                    05:12:f6:55:bc:00:44:79:43:73:a7:84:f6:d5:a9:
                    a0:57:f0:fa:c4:90:a2:58:c9:78:25:7e:4a:15:73:
                    c0:c7:fb:95:77:da:17:f3:f0:8a:e0:fc:13:b8:4b:
                    cf:6a:0a:a1:5f:0f:d5:19:63:4f:d3:a4:ed:1b:8d:
                    29:de:51:f6:62:e0:ca:82:2e:ab:70:0f:b0:c1:0e:
                    1a:88:51:8e:46:09:5c:62:7f:41:03:24:a2:53:b0:
                    2a:0b:04:e1:62:60:74:2f:a1:f0:21:01:47:ff:5d:
                    fc:bd:fb:7f:03:63:72:2b:a4:46:63:fd:44:98:19:
                    0e:36:15:25:dd:9b:58:3b:9e:f4:37:29:5e:df:ab:
                    13:0e:5b:1a:5d:43:c8:5f:6f:0f:f0:07:28:6f:a2:
                    6e:e8:8b:30:39:f6:3b:bf:8d:ff:d1:d4:c7:fe:29:
                    dd:23:04:a5:a8:80:02:b4:19:cf:fd:aa:7f:44:39:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BF:30:4D:FE:77:EC:A6:4E:DF:94:63:E9:FC:59:E3:5D:38:BD:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/3e608f82-082e-3625-8820-3883ef973c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.72.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:58:51:f4:2d:c5:72:bb:c4:68:69:20:a0:7a:b3:c8:82:17:
         55:46:06:6e:fc:54:19:b1:ba:59:e0:79:61:cf:96:c4:06:73:
         b0:0a:b5:ad:9f:fb:df:5a:27:e3:e3:e2:8c:7d:9d:08:26:44:
         25:40:81:99:d1:d7:44:48:ad:42:91:b3:7e:7d:f9:ca:65:9e:
         c3:eb:15:6d:d7:e8:38:3b:15:89:a6:e1:53:5e:77:de:0a:74:
         ac:a1:a7:17:66:16:f0:18:42:c6:c1:81:df:2b:90:25:f9:f5:
         d2:8e:6c:fc:43:b0:e7:cf:84:5f:c0:19:44:6f:ad:c0:da:fd:
         5f:a1:e7:9e:29:ab:74:c7:7c:50:35:7f:84:00:80:25:8f:94:
         88:0e:49:46:b3:c6:c1:e5:09:8c:27:97:5d:56:72:5e:b9:dc:
         3a:60:8e:bb:e8:b3:fe:e9:4b:a9:7e:6e:ee:2b:e3:2a:a9:08:
         14:63:9c:fd:97:ff:53:66:d6:b3:4d:0e:4a:21:e8:d7:c6:ab:
         e7:d3:e5:c2:74:20:2b:eb:12:68:8e:54:06:29:8c:90:d1:e8:
         83:08:f3:33:2d:62:31:41:28:b5:0f:ff:81:e5:e0:4c:36:2f:
         38:79:6a:b6:be:d8:fc:11:ac:cb:3d:45:27:4d:4c:0a:b0:75:
         7a:66:42:8b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE371e71f7QbKADk5sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
ZDA5OTAxODgtMTE1Ni00OGViLWJhMTYtNTdmOWMyMTZhZGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuihfJWPiE2JNeVaO7SjRXIu3pVs474oI8KFA
qzfyWfuImvgLG8TZOvxnGKBvQEglkC+gT6aKuG+2NI1G7j5E/VLkcprHnQclONwF
EvZVvABEeUNzp4T21amgV/D6xJCiWMl4JX5KFXPAx/uVd9oX8/CK4PwTuEvPagqh
Xw/VGWNP06TtG40p3lH2YuDKgi6rcA+wwQ4aiFGORglcYn9BAySiU7AqCwThYmB0
L6HwIQFH/138vft/A2NyK6RGY/1EmBkONhUl3ZtYO570Nyle36sTDlsaXUPIX28P
8Acob6Ju6IswOfY7v43/0dTH/indIwSlqIACtBnP/ap/RDnfjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJy/ME3+d+ymTt+UY+n8WeNdOL1DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvM2U2MDhmODItMDgyZS0z
NjI1LTg4MjAtMzg4M2VmOTczYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqkgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlVhR9C3FcrvEaGkgoHqzyIIXVUYGbvxUGbG6WeB5Yc+WxAZzsAq1rZ/7
31on4+PijH2dCCZEJUCBmdHXREitQpGzfn35ymWew+sVbdfoODsViabhU1533gp0
rKGnF2YW8BhCxsGB3yuQJfn10o5s/EOw58+EX8AZRG+twNr9X6HnnimrdMd8UDV/
hACAJY+UiA5JRrPGweUJjCeXXVZyXrncOmCOu+iz/ulLqX5u7ivjKqkIFGOc/Zf/
U2bWs00OSiHo18ar59PlwnQgK+sSaI5UBimMkNHogwjzMy1iMUEotQ//geXgTDYv
OHlqtr7Y/BGsyz1FJ01MCrB1emZCiw==
-----END CERTIFICATE-----
Generated at Wed Jun 3 21:04:08 2026 by rpki-client