Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/1a4d5eb6-24f5-342b-9b1f-afddf704c416.roa
File:                     1a4d5eb6-24f5-342b-9b1f-afddf704c416.roa (raw, json)
Hash identifier:          FlQTGivVfYqYFxsC6V2AsX77IDgO8ma4aJ+8FMV2XAo=
Subject key identifier:   67:ED:4A:73:8A:DA:6E:F9:36:28:6D:9C:81:BC:5F:FB:89:5E:F1:64
Certificate issuer:       /CN=2b0745c6-87b9-4dc9-87d6-03dfe0664bda
Certificate serial:       010D0C9F4328584DC995BE8752D7EFBEF4ADA880
Authority key identifier: 4B:DB:D2:A6:55:98:B7:4D:D5:AE:15:A8:5F:56:3E:08:1E:56:EF:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/1a4d5eb6-24f5-342b-9b1f-afddf704c416.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     4913
IP address blocks:        72.2.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:be:87:52:d7:ef:be:f4:ad:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0745c6-87b9-4dc9-87d6-03dfe0664bda
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=2f37fdd2-11ab-4bdf-8e70-525faeea2f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:83:eb:48:c0:ab:30:5c:e8:ce:05:bf:fe:
                    20:74:3b:3f:a1:e6:d2:fa:04:a2:8c:e8:7f:60:4d:
                    1b:bc:75:5a:7b:f1:41:ef:d7:93:4e:8e:1c:7b:0e:
                    5e:05:b4:84:40:27:a4:ff:14:f4:5a:2c:b0:ae:be:
                    23:f4:c7:6e:74:de:57:3f:37:05:41:4a:6b:44:fa:
                    8e:6c:a9:b0:14:d7:b5:37:f6:10:b8:94:30:a1:2c:
                    66:ce:07:e5:ed:52:45:59:d3:5a:2f:ff:79:c0:4c:
                    c4:51:73:c8:2f:38:d9:64:c8:92:ef:b1:b6:2b:72:
                    b4:02:ec:d1:21:9f:98:e5:56:6e:3d:aa:e5:20:c3:
                    59:89:2d:28:ee:3c:ef:cd:31:b3:28:ea:6d:ec:ee:
                    8e:0d:2a:03:4a:59:cd:37:53:17:08:3a:51:e5:51:
                    41:07:ab:75:dd:4a:79:37:a5:05:b7:78:b0:be:2b:
                    fc:97:6c:01:1b:d1:42:0a:d9:b8:fe:c6:be:88:17:
                    3e:a6:cf:7a:07:e0:92:9d:47:d8:d6:b4:0e:a0:e6:
                    f0:0a:81:d5:cd:81:d9:59:21:e5:79:e0:a2:ae:a3:
                    fd:08:76:20:86:e9:f9:1e:7a:5a:39:2d:8c:00:25:
                    d7:7d:47:d6:1f:53:f3:d5:35:f0:d2:b9:5f:70:b5:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:ED:4A:73:8A:DA:6E:F9:36:28:6D:9C:81:BC:5F:FB:89:5E:F1:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/1a4d5eb6-24f5-342b-9b1f-afddf704c416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.crl

            X509v3 Authority Key Identifier:
                keyid:4B:DB:D2:A6:55:98:B7:4D:D5:AE:15:A8:5F:56:3E:08:1E:56:EF:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.2.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:28:50:cf:00:ad:85:1d:1d:5d:3a:4f:5d:b4:36:0d:34:8d:
         80:9c:6f:68:74:97:16:25:e7:06:55:02:59:11:d1:0d:e0:39:
         9f:9d:e2:48:99:0b:ad:f4:36:fd:5c:d9:2b:6a:9a:a3:14:32:
         f4:42:b1:c7:c1:73:63:b1:75:bc:82:d6:12:d5:99:02:f1:35:
         99:fb:48:5e:25:ac:f1:aa:6f:0f:02:3b:22:35:56:d9:0c:81:
         9a:a5:df:c7:98:09:ea:b8:f7:48:90:c5:c7:d0:84:f5:a9:39:
         5f:34:8b:f6:7e:88:5f:84:f1:11:cf:00:ad:10:d6:02:a9:03:
         a5:55:32:04:7c:52:be:6b:87:5d:4a:82:3e:fd:70:de:eb:36:
         db:f2:a4:cf:97:b5:f7:d3:64:42:c1:df:18:0b:d9:cd:a6:30:
         55:c0:b2:63:3b:06:d5:0e:38:88:5e:94:31:8e:e2:7a:90:ac:
         ac:2f:8e:4f:3a:a5:61:43:81:d7:f7:c0:f2:6f:1f:d5:4d:2a:
         fd:bd:5b:dc:19:fd:d2:26:03:e0:31:75:a3:83:d4:9b:aa:e2:
         e1:80:f1:8b:f6:5b:4f:58:6a:a1:bc:bf:dd:b5:37:81:ea:a5:
         56:5d:51:96:3c:78:60:17:23:de:54:7a:c2:6a:e5:35:ee:2f:
         5e:cf:f7:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Jlb6HUtfvvvStqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmIwNzQ1YzYtODdiOS00ZGM5LTg3ZDYtMDNkZmUwNjY0
YmRhMB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk
MmYzN2ZkZDItMTFhYi00YmRmLThlNzAtNTI1ZmFlZWEyZjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1OD60jAqzBc6M4Fv/4gdDs/oebS+gSijOh/
YE0bvHVae/FB79eTTo4cew5eBbSEQCek/xT0Wiywrr4j9MdudN5XPzcFQUprRPqO
bKmwFNe1N/YQuJQwoSxmzgfl7VJFWdNaL/95wEzEUXPILzjZZMiS77G2K3K0AuzR
IZ+Y5VZuParlIMNZiS0o7jzvzTGzKOpt7O6ODSoDSlnNN1MXCDpR5VFBB6t13Up5
N6UFt3iwviv8l2wBG9FCCtm4/sa+iBc+ps96B+CSnUfY1rQOoObwCoHVzYHZWSHl
eeCirqP9CHYghun5HnpaOS2MACXXfUfWH1Pz1TXw0rlfcLVfbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGftSnOK2m75NihtnIG8X/uJXvFkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjA3
NDVjNi04N2I5LTRkYzktODdkNi0wM2RmZTA2NjRiZGEvMWE0ZDVlYjYtMjRmNS0z
NDJiLTliMWYtYWZkZGY3MDRjNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmIwNzQ1YzYtODdiOS00ZGM5LTg3
ZDYtMDNkZmUwNjY0YmRhLzJiMDc0NWM2LTg3YjktNGRjOS04N2Q2LTAzZGZlMDY2
NGJkYS5jcmwwHwYDVR0jBBgwFoAUS9vSplWYt03VrhWoX1Y+CB5W70cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjA3NDVjNi04N2I5LTRkYzktODdkNi0wM2Rm
ZTA2NjRiZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESALgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgoUM8ArYUdHV06T120Ng00jYCcb2h0lxYl5wZVAlkR0Q3gOZ+d4kiZ
C630Nv1c2StqmqMUMvRCscfBc2OxdbyC1hLVmQLxNZn7SF4lrPGqbw8COyI1VtkM
gZql38eYCeq490iQxcfQhPWpOV80i/Z+iF+E8RHPAK0Q1gKpA6VVMgR8Ur5rh11K
gj79cN7rNtvypM+XtffTZELB3xgL2c2mMFXAsmM7BtUOOIhelDGO4nqQrKwvjk86
pWFDgdf3wPJvH9VNKv29W9wZ/dImA+AxdaOD1Juq4uGA8Yv2W09YaqG8v921N4Hq
pVZdUZY8eGAXI95UesJq5TXuL17P9+w=
-----END CERTIFICATE-----
Generated at Wed May 13 10:28:11 2026 by rpki-client