Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13e2b422-99e4-3642-80f4-80d4a69092d6.roa
File:                     13e2b422-99e4-3642-80f4-80d4a69092d6.roa (raw, json)
Hash identifier:          b2fRl2R8tex2pHnW09QCHgQa6ukEvf/HVnxbcMc+jyk=
Subject key identifier:   F1:94:25:A5:13:A3:41:6F:7A:E6:E3:B1:F4:FF:90:F5:C7:F2:70:DA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBE6B5107649F9F319E1EBF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13e2b422-99e4-3642-80f4-80d4a69092d6.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     22773
IP address blocks:        174.72.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:51:07:64:9f:9f:31:9e:1e:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=3903de2f-c523-45af-a91e-bbe56b541d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:f6:df:d3:9c:e4:22:2a:2a:69:4c:13:ab:
                    76:75:7d:b3:52:53:82:60:12:73:ad:e4:05:70:6d:
                    2c:e6:fa:0c:92:3e:f1:2e:c0:24:81:f6:ee:32:5a:
                    fa:9e:4d:77:58:af:96:9e:32:40:a5:4f:b2:74:ff:
                    cb:de:32:5c:93:08:a8:60:f0:93:40:58:08:ff:a4:
                    18:17:a3:0d:c5:68:ef:8e:d2:73:a0:0f:f7:ab:53:
                    54:62:73:54:80:e0:3e:cc:bf:b0:bb:f0:24:93:44:
                    88:9b:7d:1d:1e:ec:e3:a3:37:5e:6e:cc:c8:77:c2:
                    e3:e9:45:11:ba:4b:fe:25:d7:3e:20:f4:a2:5d:fd:
                    55:04:e1:31:24:dc:5d:93:a0:6b:ed:2e:f4:db:75:
                    d8:5f:84:c3:44:79:d9:1b:ed:49:50:9a:2c:98:c3:
                    0c:45:2a:a2:ab:6c:ab:3b:42:4d:fd:d7:09:db:92:
                    a8:fc:da:b3:63:5c:03:68:78:6d:78:e0:6d:e2:31:
                    c0:43:9f:ee:cb:c1:75:bb:29:94:f6:31:2b:e7:03:
                    f5:5d:bb:73:c9:63:4f:14:65:4d:96:2d:f0:7b:bc:
                    47:b6:51:66:8f:39:c2:82:02:90:62:d5:a4:db:d9:
                    18:80:df:bd:85:0a:63:6d:c3:40:3e:fd:f0:2c:97:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:94:25:A5:13:A3:41:6F:7A:E6:E3:B1:F4:FF:90:F5:C7:F2:70:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13e2b422-99e4-3642-80f4-80d4a69092d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.72.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:45:99:2d:dd:60:a5:a5:0f:35:e3:cb:11:1a:5e:b7:cf:19:
         57:1a:50:3d:71:8e:4d:66:31:d0:2e:e2:dd:d9:64:f4:65:2f:
         c6:e5:d7:d8:52:28:ac:3c:51:2f:7f:1b:08:24:40:bb:b8:d3:
         ce:0c:24:91:ad:8d:d3:9d:ac:c8:e7:c6:77:72:fe:09:18:7a:
         54:e0:27:9b:28:bf:d5:6d:5a:2a:c3:ee:3f:a2:bb:40:35:47:
         37:54:5c:fb:b0:d1:06:44:76:93:ce:40:41:8e:b5:17:80:07:
         87:f0:8f:80:3e:2f:6d:d1:e3:a5:99:00:ac:af:14:d1:49:c3:
         c1:89:17:c5:7e:4a:57:84:19:bb:43:f7:01:78:be:19:04:d9:
         e6:62:44:52:e3:67:d2:a1:3c:78:01:85:b7:0e:aa:2e:b1:69:
         59:12:64:69:ea:fc:96:fb:15:9a:60:a8:a6:7a:97:4d:70:41:
         50:03:79:ac:7f:a1:3a:64:60:c5:1e:01:6a:82:bd:27:73:93:
         5f:11:f3:80:17:4d:97:11:bc:87:b0:74:f7:bd:61:20:dd:fa:
         aa:3e:55:c3:a7:1e:e7:90:07:8c:f4:6e:e4:01:81:82:be:9f:
         37:e1:e4:a0:dd:cb:58:ee:08:a6:21:4b:61:3b:8c:a2:b2:41:
         57:32:c3:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+a1EHZJ+fMZ4evwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk
MzkwM2RlMmYtYzUyMy00NWFmLWE5MWUtYmJlNTZiNTQxZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA3239Oc5CIqKmlME6t2dX2zUlOCYBJzreQF
cG0s5voMkj7xLsAkgfbuMlr6nk13WK+WnjJApU+ydP/L3jJckwioYPCTQFgI/6QY
F6MNxWjvjtJzoA/3q1NUYnNUgOA+zL+wu/Akk0SIm30dHuzjozdebszId8Lj6UUR
ukv+Jdc+IPSiXf1VBOExJNxdk6Br7S7023XYX4TDRHnZG+1JUJosmMMMRSqiq2yr
O0JN/dcJ25Ko/NqzY1wDaHhteOBt4jHAQ5/uy8F1uymU9jEr5wP1XbtzyWNPFGVN
li3we7xHtlFmjznCggKQYtWk29kYgN+9hQpjbcNAPv3wLJczOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGUJaUTo0FveubjsfT/kPXH8nDaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTNlMmI0MjItOTllNC0z
NjQyLTgwZjQtODBkNGE2OTA5MmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkhHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNFmS3dYKWlDzXjyxEaXrfPGVcaUD1xjk1mMdAu4t3ZZPRlL8bl19hS
KKw8US9/GwgkQLu4084MJJGtjdOdrMjnxndy/gkYelTgJ5sov9VtWirD7j+iu0A1
RzdUXPuw0QZEdpPOQEGOtReAB4fwj4A+L23R46WZAKyvFNFJw8GJF8V+SleEGbtD
9wF4vhkE2eZiRFLjZ9KhPHgBhbcOqi6xaVkSZGnq/Jb7FZpgqKZ6l01wQVADeax/
oTpkYMUeAWqCvSdzk18R84AXTZcRvIewdPe9YSDd+qo+VcOnHueQB4z0buQBgYK+
nzfh5KDdy1juCKYhS2E7jKKyQVcyw+4=
-----END CERTIFICATE-----
Generated at Wed May 13 06:28:55 2026 by rpki-client