Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ffca1d83-f36b-3556-8d73-9b456af8d886.roa
File:                     ffca1d83-f36b-3556-8d73-9b456af8d886.roa (raw, json)
Hash identifier:          EMJaUnRccra8dLc69elfL6z7L6hqATVO5LLe4ysvO7A=
Subject key identifier:   68:B5:88:E6:97:B6:CD:B3:8F:A4:56:67:BD:6A:F9:5B:52:91:60:38
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722522118744415818B900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ffca1d83-f36b-3556-8d73-9b456af8d886.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        72.28.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:25:22:11:87:44:41:58:18:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=adb66bef-051c-4a54-ac28-87447965b4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:1b:15:e7:b7:cb:2d:35:34:14:58:bc:fb:
                    55:4f:27:45:4d:95:c2:1f:c5:24:0c:25:fd:eb:0f:
                    b3:03:52:32:dc:0c:70:55:d3:47:b5:bf:be:f7:20:
                    8c:ef:80:a5:13:58:94:7c:cd:55:21:83:ee:28:95:
                    70:df:8d:cf:1f:82:6b:4d:08:63:ce:e3:ff:6c:5e:
                    19:ab:88:95:53:b5:32:0c:88:4e:c5:1b:c1:45:41:
                    ee:a5:cd:af:40:9b:4d:9c:61:a5:d4:84:f4:bf:8a:
                    9d:42:3b:f3:2f:8d:ff:e0:91:50:5b:5b:54:4e:6e:
                    e7:f8:93:97:24:21:2b:0a:59:48:d9:e8:21:2c:8c:
                    7b:5b:1d:af:7f:23:99:00:61:3b:69:d9:69:e1:4e:
                    10:38:26:23:1c:e1:2c:b3:d9:1d:4c:35:fd:e4:0c:
                    f5:70:71:3f:43:fc:dd:69:4b:ca:32:b2:8f:b1:fe:
                    67:9f:b2:da:4d:af:91:1b:a0:6c:e7:51:0d:01:9f:
                    1f:e2:02:bb:a5:3b:e1:c4:ee:46:ee:35:58:a3:e6:
                    f6:c9:e6:49:7b:2f:7f:74:bb:00:6b:cd:83:cc:fe:
                    d7:db:2f:4f:b2:c8:2c:5b:62:3c:a9:91:e5:cf:14:
                    de:1d:12:e1:47:30:e9:c8:d6:71:1d:9d:ce:c3:2b:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B5:88:E6:97:B6:CD:B3:8F:A4:56:67:BD:6A:F9:5B:52:91:60:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ffca1d83-f36b-3556-8d73-9b456af8d886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.28.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:70:6e:7f:24:5d:ca:14:d7:fb:c2:04:f7:ed:82:d0:ae:
         0d:f1:b2:85:02:dc:95:d2:79:aa:eb:d3:13:fd:70:29:84:af:
         e0:2b:e8:b3:b0:ca:8c:3a:1c:e8:54:84:86:69:b2:fd:e2:2c:
         88:0a:49:e7:11:e7:d0:c4:e5:c2:bb:12:82:e6:3b:c5:e8:f9:
         f0:d3:17:ca:56:7c:87:a5:aa:58:98:66:a4:f8:5b:9c:48:df:
         af:4c:c9:83:b3:f4:b1:28:a8:33:03:0c:54:11:2a:6e:8a:1a:
         58:ed:c4:94:02:e7:63:28:67:a0:f4:35:ab:9c:61:bf:3c:a8:
         83:8f:94:86:d0:f4:c2:ba:18:1f:40:5b:9f:0a:a3:5d:15:35:
         51:2b:33:a7:c9:43:48:ba:5f:1d:49:53:a8:91:a0:2c:a2:42:
         f6:a1:c5:7e:3e:b9:39:6e:45:d3:66:30:13:a9:25:e8:5b:fe:
         5f:bb:43:96:55:fc:ed:49:7a:9f:46:6d:83:ad:83:13:f5:ca:
         5d:f5:06:53:27:31:34:b1:ed:a8:90:ea:ec:b5:1d:e5:39:32:
         ea:ea:80:60:c4:92:d3:36:25:5f:90:49:e4:25:b7:69:4d:11:
         c5:3a:07:dc:a8:de:9a:c6:46:a7:63:7f:25:4a:15:95:f7:03:
         76:81:e2:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GciUiEYdEQVgYuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
YWRiNjZiZWYtMDUxYy00YTU0LWFjMjgtODc0NDc5NjViNGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl0bFee3yy01NBRYvPtVTydFTZXCH8UkDCX9
6w+zA1Iy3AxwVdNHtb++9yCM74ClE1iUfM1VIYPuKJVw343PH4JrTQhjzuP/bF4Z
q4iVU7UyDIhOxRvBRUHupc2vQJtNnGGl1IT0v4qdQjvzL43/4JFQW1tUTm7n+JOX
JCErCllI2eghLIx7Wx2vfyOZAGE7adlp4U4QOCYjHOEss9kdTDX95Az1cHE/Q/zd
aUvKMrKPsf5nn7LaTa+RG6Bs51ENAZ8f4gK7pTvhxO5G7jVYo+b2yeZJey9/dLsA
a82DzP7X2y9PssgsW2I8qZHlzxTeHRLhRzDpyNZxHZ3Owys7wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGi1iOaXts2zj6RWZ71q+VtSkWA4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZmZjYTFkODMtZjM2Yi0z
NTU2LThkNzMtOWI0NTZhZjhkODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBxMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFecG5/JF3KFNf7wgT37YLQrg3xsoUC3JXSearr0xP9cCmEr+Ar6LOw
yow6HOhUhIZpsv3iLIgKSecR59DE5cK7EoLmO8Xo+fDTF8pWfIelqliYZqT4W5xI
369MyYOz9LEoqDMDDFQRKm6KGljtxJQC52MoZ6D0NaucYb88qIOPlIbQ9MK6GB9A
W58Ko10VNVErM6fJQ0i6Xx1JU6iRoCyiQvahxX4+uTluRdNmMBOpJehb/l+7Q5ZV
/O1Jep9GbYOtgxP1yl31BlMnMTSx7aiQ6uy1HeU5MurqgGDEktM2JV+QSeQlt2lN
EcU6B9yo3prGRqdjfyVKFZX3A3aB4mM=
-----END CERTIFICATE-----
Generated at Sun Oct 11 04:42:05 2026 by rpki-client