Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc69a22f-b437-3a6c-8ca3-fee3d4e9398f.roa
File:                     dc69a22f-b437-3a6c-8ca3-fee3d4e9398f.roa (raw, json)
Hash identifier:          ASL582+778lFEHhtVN3TiclxUjOWQ/jvVS0bobvxH+0=
Subject key identifier:   53:8B:8D:C5:F4:C9:08:A3:44:05:A9:48:5B:45:5E:C4:A5:D2:8C:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0699D3ED2AEDFF7A388B8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc69a22f-b437-3a6c-8ca3-fee3d4e9398f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        72.173.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:69:9d:3e:d2:ae:df:f7:a3:88:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=130b7cf6-8e4a-4003-8459-138d74d1c500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:e3:a4:cc:a0:b5:e7:da:c0:ad:6b:d5:70:
                    a7:72:ee:62:3b:14:b5:ea:91:fe:e0:36:b5:70:2e:
                    3b:69:7c:c2:3d:ca:1c:58:31:6e:ee:d7:5d:b6:31:
                    65:28:7a:ba:0e:c7:3e:f1:29:c6:fd:6d:ac:50:1c:
                    92:2a:e7:77:31:71:9f:69:f8:13:95:fa:a4:9c:b3:
                    ae:68:95:cb:d6:d4:ce:fd:ee:b1:d7:95:d8:66:93:
                    77:da:30:40:6c:22:88:26:04:25:3b:5c:82:d5:82:
                    f4:e7:6d:3a:17:68:97:c1:b9:81:c9:16:22:ae:a0:
                    ad:1e:92:eb:30:1f:e2:26:ac:20:bc:f0:a2:f2:1f:
                    38:30:2f:08:cd:c0:bf:1b:55:e1:56:d4:7c:80:86:
                    86:ed:c3:50:da:f7:29:10:47:0b:3a:b1:0c:0e:71:
                    ee:98:51:f8:c2:9c:c9:06:9e:20:70:38:8f:dd:27:
                    00:01:ac:6d:cf:62:07:47:5d:01:91:b9:db:b6:94:
                    a5:80:dc:16:f2:61:55:e4:fd:f3:2e:4b:06:d7:04:
                    52:c0:04:97:22:7f:d8:d7:4e:52:1d:53:f8:4b:c5:
                    e7:d4:5d:84:b5:da:e3:ff:98:e8:fb:47:70:e2:6f:
                    09:50:4f:54:9d:cd:9e:6c:91:99:cc:60:39:6c:a3:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8B:8D:C5:F4:C9:08:A3:44:05:A9:48:5B:45:5E:C4:A5:D2:8C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc69a22f-b437-3a6c-8ca3-fee3d4e9398f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:6f:77:1b:fd:91:6b:b0:6b:d5:4d:93:64:7e:37:dd:12:
         f5:fb:38:9c:2f:e0:bc:cb:f4:3f:6c:46:c4:19:51:68:24:32:
         98:b1:07:a2:e2:ad:81:a4:f8:19:06:d0:8d:36:c6:9e:d5:72:
         ee:d8:d7:d7:b7:0b:48:18:74:6b:4a:93:64:7f:8b:01:be:4d:
         e4:94:76:d8:f6:5c:23:d6:f1:57:f6:8d:1f:62:b6:4f:f8:4c:
         8d:17:a7:bf:e8:35:26:27:fc:1e:c7:0f:88:41:80:34:a6:60:
         46:ee:93:fc:43:78:80:0c:e2:ae:13:3c:25:92:a8:7f:20:3b:
         88:e4:d0:c2:59:46:8b:3d:3d:1c:a0:c8:28:4a:2c:23:cd:6b:
         81:b3:4d:80:3b:52:8d:80:2b:12:82:91:55:23:92:5d:ab:56:
         f4:3f:a8:b3:e6:9c:70:10:0f:b7:8a:e4:97:56:e3:2a:25:48:
         23:41:74:dc:28:cf:24:c4:f4:87:31:8f:c3:6e:76:ad:eb:57:
         f8:22:91:f2:58:28:58:fb:ac:7e:62:b0:c6:72:4c:df:66:5a:
         54:7f:a9:39:ab:8a:dc:b4:88:c1:af:29:fc:82:be:30:f5:e3:
         26:2a:d1:3c:a8:44:2d:fb:8a:0e:c4:16:7e:7e:f8:24:65:c9:
         41:c8:0b:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GmdPtKu3/ejiLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MTMwYjdjZjYtOGU0YS00MDAzLTg0NTktMTM4ZDc0ZDFjNTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMbjpMygtefawK1r1XCncu5iOxS16pH+4Da1
cC47aXzCPcocWDFu7tddtjFlKHq6Dsc+8SnG/W2sUBySKud3MXGfafgTlfqknLOu
aJXL1tTO/e6x15XYZpN32jBAbCKIJgQlO1yC1YL05206F2iXwbmByRYirqCtHpLr
MB/iJqwgvPCi8h84MC8IzcC/G1XhVtR8gIaG7cNQ2vcpEEcLOrEMDnHumFH4wpzJ
Bp4gcDiP3ScAAaxtz2IHR10BkbnbtpSlgNwW8mFV5P3zLksG1wRSwASXIn/Y105S
HVP4S8Xn1F2Etdrj/5jo+0dw4m8JUE9Unc2ebJGZzGA5bKOUkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOLjcX0yQijRAWpSFtFXsSl0oyjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGM2OWEyMmYtYjQzNy0z
YTZjLThjYTMtZmVlM2Q0ZTkzOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3+b3cb/ZFrsGvVTZNkfjfdEvX7OJwv4LzL9D9sRsQZUWgkMpixB6Li
rYGk+BkG0I02xp7Vcu7Y19e3C0gYdGtKk2R/iwG+TeSUdtj2XCPW8Vf2jR9itk/4
TI0Xp7/oNSYn/B7HD4hBgDSmYEbuk/xDeIAM4q4TPCWSqH8gO4jk0MJZRos9PRyg
yChKLCPNa4GzTYA7Uo2AKxKCkVUjkl2rVvQ/qLPmnHAQD7eK5JdW4yolSCNBdNwo
zyTE9Icxj8Nudq3rV/gikfJYKFj7rH5isMZyTN9mWlR/qTmrity0iMGvKfyCvjD1
4yYq0TyoRC37ig7EFn5++CRlyUHIC/M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:49 2026 by rpki-client