Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ffb3aee-4568-3045-93e5-be6f486e559a.roa
File:                     3ffb3aee-4568-3045-93e5-be6f486e559a.roa (raw, json)
Hash identifier:          9bUhlgRHl399DUf/2veLQjOdzMUIHgTfpYfIuv3HnWc=
Subject key identifier:   91:F2:05:1E:CB:3A:E5:BF:34:4F:C1:46:2E:4F:38:AC:AC:F0:D3:D5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DC135D043C7E5029EDA01BEC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ffb3aee-4568-3045-93e5-be6f486e559a.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        72.193.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:d0:43:c7:e5:02:9e:da:01:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=86753aa9-a52e-4cd4-a91a-df57d32e99d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3b:a8:c5:d0:ca:2c:a0:c1:71:e9:af:4b:b9:
                    ad:f7:b1:90:24:82:83:39:8a:a0:28:33:ee:e3:ad:
                    7a:d0:fa:34:31:4a:24:26:d6:6f:19:2b:b9:92:a7:
                    db:e3:f0:9c:31:f8:e0:49:45:c0:20:7d:df:c5:49:
                    b8:4a:f7:9b:09:07:fc:87:89:f6:a2:db:d7:4a:53:
                    12:1a:54:bb:c5:98:0b:76:67:62:45:2e:8a:ad:8c:
                    90:af:8c:58:af:2d:8b:46:26:cb:8c:65:2b:b2:79:
                    37:c7:2c:1b:19:59:16:33:c1:cf:08:d3:41:f8:8b:
                    de:af:f9:08:f3:db:da:02:a4:ae:ba:de:64:a2:d9:
                    9d:c0:5e:d1:54:c5:d2:70:70:e0:b7:5f:a1:1d:9b:
                    d5:b3:7b:4e:59:7f:fd:00:a3:b7:15:ae:79:0c:f0:
                    b4:bb:8b:2a:cc:26:03:3d:d0:b5:32:f1:50:20:5d:
                    8d:0a:fc:05:98:52:01:39:63:7d:82:79:24:f4:7a:
                    4e:39:00:67:e9:78:09:d2:37:5d:19:9b:b2:bb:76:
                    16:df:7d:20:c7:c0:69:a8:1d:a8:17:9b:13:13:6a:
                    ce:f5:0e:29:bd:63:d7:86:35:68:09:40:e4:e0:70:
                    77:06:35:20:c6:52:35:0f:c6:b3:4d:f7:b4:97:c3:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F2:05:1E:CB:3A:E5:BF:34:4F:C1:46:2E:4F:38:AC:AC:F0:D3:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ffb3aee-4568-3045-93e5-be6f486e559a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.193.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:79:39:fb:b6:20:44:bc:16:42:99:10:51:a2:9f:cb:9d:9a:
         2c:19:3c:d3:d0:4a:54:7a:87:87:ca:58:f4:fb:c9:77:09:23:
         ad:97:22:36:19:a4:c5:8b:ff:5b:07:fe:72:2b:97:59:34:29:
         e0:d9:94:56:48:91:25:34:f5:99:64:ee:c9:25:98:66:a4:6c:
         bb:5b:4c:69:e5:18:e5:38:40:50:a4:5c:3b:08:61:fa:cc:ae:
         2d:ef:3d:12:aa:2b:6f:7b:09:4f:1d:62:0b:d8:be:c1:df:37:
         68:ad:b2:c0:82:0b:11:7d:25:5c:60:dd:9a:8f:92:2c:94:ac:
         56:06:26:89:5c:e5:cf:98:c5:c8:c2:87:47:00:75:ff:fc:68:
         af:10:52:eb:70:a4:53:70:2f:e7:64:6b:19:77:d9:fd:29:54:
         00:f7:77:57:49:9c:3d:bc:01:22:55:76:c7:2c:29:bd:bc:d8:
         48:3f:49:b3:19:b1:9b:5f:dc:40:a7:c7:6e:7f:37:17:91:4f:
         1d:37:65:50:88:55:51:72:be:23:c2:91:cb:0b:68:f8:93:cf:
         7f:53:fc:e6:46:b6:b5:1d:71:fb:2a:7c:e7:c0:a6:d1:17:48:
         77:12:f2:4e:35:fd:3c:3e:60:16:92:77:db:a4:1a:19:ff:88:
         5c:fc:e6:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNdBDx+UCntoBvsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk
ODY3NTNhYTktYTUyZS00Y2Q0LWE5MWEtZGY1N2QzMmU5OWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzuoxdDKLKDBcemvS7mt97GQJIKDOYqgKDPu
46160Po0MUokJtZvGSu5kqfb4/CcMfjgSUXAIH3fxUm4SvebCQf8h4n2otvXSlMS
GlS7xZgLdmdiRS6KrYyQr4xYry2LRibLjGUrsnk3xywbGVkWM8HPCNNB+Iver/kI
89vaAqSuut5kotmdwF7RVMXScHDgt1+hHZvVs3tOWX/9AKO3Fa55DPC0u4sqzCYD
PdC1MvFQIF2NCvwFmFIBOWN9gnkk9HpOOQBn6XgJ0jddGZuyu3YW330gx8BpqB2o
F5sTE2rO9Q4pvWPXhjVoCUDk4HB3BjUgxlI1D8azTfe0l8Ow6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJHyBR7LOuW/NE/BRi5POKys8NPVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZmYjNhZWUtNDU2OC0z
MDQ1LTkzZTUtYmU2ZjQ4NmU1NTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMFDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGh5Ofu2IES8FkKZEFGin8udmiwZPNPQSlR6h4fKWPT7yXcJI62XIjYZ
pMWL/1sH/nIrl1k0KeDZlFZIkSU09Zlk7sklmGakbLtbTGnlGOU4QFCkXDsIYfrM
ri3vPRKqK297CU8dYgvYvsHfN2itssCCCxF9JVxg3ZqPkiyUrFYGJolc5c+YxcjC
h0cAdf/8aK8QUutwpFNwL+dkaxl32f0pVAD3d1dJnD28ASJVdscsKb282Eg/SbMZ
sZtf3ECnx25/NxeRTx03ZVCIVVFyviPCkcsLaPiTz39T/OZGtrUdcfsqfOfAptEX
SHcS8k41/Tw+YBaSd9ukGhn/iFz85kQ=
-----END CERTIFICATE-----
Generated at Wed May 13 04:40:38 2026 by rpki-client