Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
File:                     703f5f39-4ca1-3844-a475-708e53f14853.roa (raw, json)
Hash identifier:          ik6FCIA0vPMQ09KPpBu6VmOqzrxyCWrqM3UpWbvMrWc=
Subject key identifier:   2C:09:56:CC:D9:E3:07:63:65:A2:99:26:A2:3A:06:97:12:C3:3B:25
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584DBA3B0D6BA9195433C4025080
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     36114
IP address blocks:        72.46.128.0/22 maxlen: 24
                          76.164.192.0/22 maxlen: 24
                          76.164.206.0/23 maxlen: 24
                          104.143.10.0/23 maxlen: 24
                          2605:6f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:0d:6b:a9:19:54:33:c4:02:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=d7dfb2af-77d3-4a54-b661-6dbe0437635d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:d2:d0:2c:c1:52:41:54:2f:15:c2:3b:57:
                    13:49:84:97:b9:f7:c9:83:da:bb:cd:2d:5b:72:2b:
                    b4:85:45:e4:45:d9:c6:37:54:00:cf:9f:3f:d9:3b:
                    56:aa:da:fd:b5:5d:a1:bd:e1:9f:89:ea:1e:19:94:
                    72:24:8e:a9:ee:2e:77:03:8d:56:75:4c:31:ac:22:
                    3b:8c:14:0e:93:95:a8:c9:39:08:dc:6b:4c:07:1f:
                    84:41:eb:4d:09:7c:c1:d0:1f:82:97:f6:7e:ba:d6:
                    50:68:0d:d4:a7:6a:fd:d9:96:b6:23:15:0f:77:95:
                    39:fd:79:69:7e:c1:11:b0:69:cd:0a:de:58:8e:a7:
                    cb:ec:00:9b:00:e9:27:b6:09:c3:65:64:96:9e:de:
                    fd:fc:35:88:be:0e:5e:1e:2a:0e:4c:e9:bf:d9:cc:
                    21:df:f4:82:13:d8:8d:f1:c0:d7:ed:95:f8:a1:62:
                    c7:1b:10:e5:63:ab:4f:56:3f:bb:9b:43:3a:bf:5e:
                    66:cb:23:03:8c:1a:23:9c:f0:d0:51:79:d5:4f:c8:
                    10:c8:9c:51:8e:04:52:aa:1f:2e:1b:48:78:56:68:
                    81:99:3d:f0:92:e4:ed:f9:82:43:5a:83:ff:a4:5b:
                    d2:f5:9a:84:52:a6:52:2d:73:5e:ff:f4:89:51:d1:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:09:56:CC:D9:E3:07:63:65:A2:99:26:A2:3A:06:97:12:C3:3B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.128.0/22
                  76.164.192.0/22
                  76.164.206.0/23
                  104.143.10.0/23
                IPv6:
                  2605:6f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:52:6d:34:7a:8c:a3:77:be:51:85:13:21:aa:b2:10:a4:a6:
         47:85:59:35:6a:c1:e9:58:b2:bd:64:97:8a:da:ae:70:77:1c:
         69:d9:59:db:b5:e4:13:d2:75:fb:41:5b:60:43:4d:71:57:f5:
         ea:82:18:1b:8f:53:b7:c3:dd:05:25:a8:68:90:21:b0:df:08:
         67:f2:19:2f:8c:f8:55:34:bc:56:7b:bd:28:6a:e3:25:bb:fc:
         89:84:bf:a2:ad:f3:7b:68:3d:2f:f5:d7:4e:6c:58:ca:94:78:
         fd:36:84:e5:8a:bc:7f:9c:77:52:04:2d:aa:6c:6b:70:20:4e:
         53:09:12:72:31:69:67:50:88:53:3c:ad:d1:26:04:5e:2e:aa:
         ee:ea:cf:8e:22:db:5d:10:3f:57:51:4d:6e:7b:4b:3c:b1:4b:
         60:8b:a4:65:97:19:48:4f:3d:29:e9:92:87:bd:fe:eb:fa:53:
         ec:b9:35:e5:8d:a5:b7:32:1e:cb:5d:03:c6:39:78:c8:fa:a3:
         bb:35:33:cd:28:81:9d:cb:ac:af:62:62:d1:f2:56:60:98:e5:
         ac:fc:03:49:13:cc:e4:ae:b8:1f:4a:f3:9a:39:83:1f:f3:5b:
         87:d8:7e:ae:d3:1a:c1:37:74:36:a2:0b:f3:0d:d9:96:d2:d4:
         04:55:b5:3f
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE26Ow1rqRlUM8QCUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDc0NmE5MmQtNWY2OS00MjY0LTg2M2YtODEyOThhM2Q5
M2VkMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
ZDdkZmIyYWYtNzdkMy00YTU0LWI2NjEtNmRiZTA0Mzc2MzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYjS0CzBUkFULxXCO1cTSYSXuffJg9q7zS1b
ciu0hUXkRdnGN1QAz58/2TtWqtr9tV2hveGfieoeGZRyJI6p7i53A41WdUwxrCI7
jBQOk5WoyTkI3GtMBx+EQetNCXzB0B+Cl/Z+utZQaA3Up2r92Za2IxUPd5U5/Xlp
fsERsGnNCt5YjqfL7ACbAOkntgnDZWSWnt79/DWIvg5eHioOTOm/2cwh3/SCE9iN
8cDX7ZX4oWLHGxDlY6tPVj+7m0M6v15myyMDjBojnPDQUXnVT8gQyJxRjgRSqh8u
G0h4VmiBmT3wkuTt+YJDWoP/pFvS9ZqEUqZSLXNe//SJUdGbVQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFCwJVszZ4wdjZaKZJqI6BpcSwzslMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NzQ2
YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5OGEzZDkzZWQvNzAzZjVmMzktNGNhMS0z
ODQ0LWE0NzUtNzA4ZTUzZjE0ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc0NmE5MmQtNWY2OS00MjY0LTg2
M2YtODEyOThhM2Q5M2VkLzQ3NDZhOTJkLTVmNjktNDI2NC04NjNmLTgxMjk4YTNk
OTNlZC5jcmwwHwYDVR0jBBgwFoAUgW9dnFJE1xApxoveK2ZyuqaaHnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NzQ2YTkyZC01ZjY5LTQyNjQtODYzZi04MTI5
OGEzZDkzZWQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCSC6AAwQC
TKTAAwQBTKTOAwQBaI8KMA0EAgACMAcDBQAmBW+AMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACdSbTR6jKN3
vlGFEyGqshCkpkeFWTVqwelYsr1kl4rarnB3HGnZWdu15BPSdftBW2BDTXFX9eqC
GBuPU7fD3QUlqGiQIbDfCGfyGS+M+FU0vFZ7vShq4yW7/ImEv6Kt83toPS/1105s
WMqUeP02hOWKvH+cd1IELapsa3AgTlMJEnIxaWdQiFM8rdEmBF4uqu7qz44i210Q
P1dRTW57SzyxS2CLpGWXGUhPPSnpkoe9/uv6U+y5NeWNpbcyHstdA8Y5eMj6o7s1
M80ogZ3LrK9iYtHyVmCY5az8A0kTzOSuuB9K85o5gx/zW4fYfq7TGsE3dDaiC/MN
2ZbS1ARVtT8=
-----END CERTIFICATE-----
Generated at Wed May 13 13:40:04 2026 by rpki-client