Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5e26d7b-0f83-31a0-8bdb-e0d213378a66.roa
File:                     e5e26d7b-0f83-31a0-8bdb-e0d213378a66.roa (raw, json)
Hash identifier:          wJloIjVmjkg8UTELEQGlhvh6DUyzSkI/3zrSg8NuaIE=
Subject key identifier:   BC:49:55:B4:1E:3A:2F:A3:89:00:DC:B0:3E:3D:00:48:E5:55:EF:DE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E06368EBE360BAB22E2480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5e26d7b-0f83-31a0-8bdb-e0d213378a66.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        72.173.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:63:68:eb:e3:60:ba:b2:2e:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=8e81bbab-0aed-430d-acdd-1c51b276687d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:50:70:ad:3e:63:44:76:3c:e9:2d:6d:58:
                    dc:59:f9:da:e1:c7:58:78:a7:44:5f:af:d1:c7:82:
                    53:ab:fa:3e:54:f9:15:7c:ba:08:5f:68:ba:38:93:
                    c5:92:08:fe:ae:14:31:d9:be:a3:a8:b6:ab:60:f0:
                    3e:b3:ad:e7:8d:b7:5d:7d:3a:10:d3:05:e5:ae:da:
                    2a:91:6e:77:e8:0d:1c:10:e3:88:da:f6:d8:a8:a5:
                    17:e9:75:a6:65:ca:3a:c1:34:77:37:97:ee:6d:9e:
                    c9:ad:16:ca:1f:9c:8e:dc:e7:ab:77:91:21:63:6b:
                    98:04:2f:ad:7a:bb:a1:c5:b2:ec:f1:79:eb:ad:ce:
                    3c:0b:dc:a5:5c:b7:0f:c0:3a:b6:43:09:99:38:8f:
                    32:d5:cc:26:ff:ad:bf:3c:b1:68:5b:1b:c1:47:80:
                    d8:2f:ad:7d:bb:bc:ba:bc:5d:e3:54:c4:cc:9b:a8:
                    2b:e1:2c:8b:2c:9c:45:a9:b8:0c:dd:d5:10:96:57:
                    db:f1:4c:a6:8b:7a:11:80:98:c2:95:da:0b:75:58:
                    af:d4:41:ba:3a:e0:48:b6:25:13:72:68:ee:4c:3e:
                    18:b0:69:5f:a7:e8:10:6e:b8:ea:37:a5:63:62:6f:
                    ed:9e:95:93:75:cd:58:33:23:db:fa:74:b2:b0:5f:
                    77:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:49:55:B4:1E:3A:2F:A3:89:00:DC:B0:3E:3D:00:48:E5:55:EF:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5e26d7b-0f83-31a0-8bdb-e0d213378a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2d:99:ac:d7:87:87:a8:86:60:77:34:2a:a1:26:41:9f:1d:
         88:42:e0:bb:ed:3c:dd:92:e5:28:7f:66:8c:fe:82:39:ea:51:
         d0:39:b6:b8:4f:62:9c:d8:5e:63:9f:cf:b6:e9:39:96:d9:fe:
         75:bd:a7:a2:b9:ff:ee:c3:bf:51:de:70:19:43:ce:6a:80:62:
         7f:a5:ef:ad:a5:30:2a:18:74:38:d4:ca:48:88:2e:33:2b:a2:
         3d:21:15:be:97:8c:06:4c:c1:08:03:6f:20:6b:e4:d2:7f:8d:
         92:d6:dd:d2:77:81:0c:32:68:e2:7a:38:d9:11:e8:93:92:14:
         9c:c0:77:09:bb:dc:42:73:e8:6e:9d:60:57:27:5e:08:c5:ac:
         1f:74:df:93:07:cb:9c:9f:45:be:7d:c7:ac:87:04:c7:2d:48:
         88:cc:53:d5:23:a9:6b:df:d3:89:90:bf:cc:08:a6:82:a1:4e:
         cc:1d:1c:13:14:d1:97:e8:4d:c4:3c:eb:a7:89:47:b3:19:f9:
         47:e2:47:11:82:6f:7d:63:e6:66:66:bf:c6:a2:9e:c4:d4:fe:
         8d:a8:38:f8:2c:39:41:be:b7:04:f5:de:c0:9e:5e:66:94:e7:
         95:b2:5a:66:30:0d:cc:0a:c4:f0:ce:29:fc:a0:b0:11:8f:2d:
         59:6f:08:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GNo6+NgurIuJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
OGU4MWJiYWItMGFlZC00MzBkLWFjZGQtMWM1MWIyNzY2ODdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG5QcK0+Y0R2POktbVjcWfna4cdYeKdEX6/R
x4JTq/o+VPkVfLoIX2i6OJPFkgj+rhQx2b6jqLarYPA+s63njbddfToQ0wXlrtoq
kW536A0cEOOI2vbYqKUX6XWmZco6wTR3N5fubZ7JrRbKH5yO3Oerd5EhY2uYBC+t
eruhxbLs8Xnrrc48C9ylXLcPwDq2QwmZOI8y1cwm/62/PLFoWxvBR4DYL619u7y6
vF3jVMTMm6gr4SyLLJxFqbgM3dUQllfb8Uymi3oRgJjCldoLdViv1EG6OuBItiUT
cmjuTD4YsGlfp+gQbrjqN6VjYm/tnpWTdc1YMyPb+nSysF93VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxJVbQeOi+jiQDcsD49AEjlVe/eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTVlMjZkN2ItMGY4My0z
MWEwLThiZGItZTBkMjEzMzc4YTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYtmazXh4eohmB3NCqhJkGfHYhC4LvtPN2S5Sh/Zoz+gjnqUdA5trhP
YpzYXmOfz7bpOZbZ/nW9p6K5/+7Dv1HecBlDzmqAYn+l762lMCoYdDjUykiILjMr
oj0hFb6XjAZMwQgDbyBr5NJ/jZLW3dJ3gQwyaOJ6ONkR6JOSFJzAdwm73EJz6G6d
YFcnXgjFrB9035MHy5yfRb59x6yHBMctSIjMU9UjqWvf04mQv8wIpoKhTswdHBMU
0ZfoTcQ866eJR7MZ+UfiRxGCb31j5mZmv8ainsTU/o2oOPgsOUG+twT13sCeXmaU
55WyWmYwDcwKxPDOKfygsBGPLVlvCKc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:05:46 2026 by rpki-client