Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/07550265-1a17-33a0-8a00-5b0ff24950d3.roa
File:                     07550265-1a17-33a0-8a00-5b0ff24950d3.roa (raw, json)
Hash identifier:          NViqpek1GcYDqytOfFoAbq8pE4Jb/49SG5rHg5kg404=
Subject key identifier:   BE:50:39:08:33:EF:A4:FC:C3:29:FF:E8:F9:6A:A0:6B:64:AE:23:6D
Certificate issuer:       /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Certificate serial:       010D0C9F4328584D40CA5A4A3FF209A9190E62C0
Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/07550265-1a17-33a0-8a00-5b0ff24950d3.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     52468
IP address blocks:        67.73.164.0/24 maxlen: 24
                          67.73.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:5a:4a:3f:f2:09:a9:19:0e:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=b549b551-3905-4c99-bd06-ba5552d91a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:1a:b9:7d:8a:7e:2b:33:00:36:3c:26:b1:
                    df:e5:31:fb:ad:b8:4b:67:71:81:e5:39:04:8d:75:
                    a8:2d:da:18:39:93:28:a3:19:2c:e6:37:18:d8:fc:
                    a7:ff:e7:5a:9d:09:e8:cc:c5:67:f4:5a:13:13:bc:
                    34:fe:bf:8e:95:c4:2c:e8:ef:f5:be:99:6d:68:3b:
                    22:ac:bb:0f:6d:24:c7:73:a9:b0:3d:cc:e5:fb:31:
                    cc:32:a8:9f:f0:37:2d:ba:6c:fd:3a:70:46:38:a0:
                    78:9c:d9:fc:57:be:46:55:18:5a:ca:25:01:5d:1e:
                    47:5d:7b:c3:2a:fc:8c:68:09:4f:a6:f3:19:10:86:
                    d9:44:c7:2a:7e:c1:e0:f0:66:2d:e0:f4:93:66:fa:
                    55:b5:cc:b2:aa:e8:d7:7a:36:4d:6c:38:ad:af:de:
                    e9:d9:ac:29:1a:aa:73:32:b3:04:8c:da:bb:94:b6:
                    e1:7e:7e:0d:6f:72:a6:f6:12:ec:5a:bd:ca:68:42:
                    9a:2e:36:13:e4:0a:d1:53:2d:c6:e2:31:3b:7f:d0:
                    0c:af:1e:c8:ab:ff:aa:6a:dd:4d:d5:9b:3e:5b:b2:
                    87:a2:b7:ad:07:5c:82:92:71:a5:49:64:fe:77:b5:
                    4c:69:22:60:79:8c:da:97:90:74:15:67:8d:bc:71:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:50:39:08:33:EF:A4:FC:C3:29:FF:E8:F9:6A:A0:6B:64:AE:23:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/07550265-1a17-33a0-8a00-5b0ff24950d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.73.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:90:52:c2:49:e1:78:f5:28:71:69:3b:7f:5c:24:83:ab:db:
         9b:03:3a:49:a9:f1:5d:58:62:a2:71:f1:9c:07:93:04:da:cd:
         45:bf:9b:e1:58:3f:a3:6d:38:09:a4:c5:18:68:25:e2:a0:83:
         42:87:97:5f:9b:0b:aa:b4:fc:7d:8f:18:6b:9b:17:1b:03:f2:
         6e:44:0f:2f:b7:5d:89:57:33:d2:35:fd:ff:c0:e9:23:03:0d:
         25:f4:3b:f1:dd:19:8e:9e:91:f7:31:5c:af:9c:e9:3d:4d:e2:
         84:3c:ff:21:54:7c:ff:03:71:3c:53:f2:be:5d:ca:d9:4e:cf:
         b0:98:66:18:b0:e6:e4:b5:5c:73:59:c4:44:3b:69:05:80:bc:
         1f:80:73:e9:fa:11:48:c4:66:de:7f:91:62:67:3e:ca:fb:ba:
         ff:3a:0e:8c:91:89:33:b4:15:7b:95:e7:5d:7a:a5:6d:57:52:
         f6:5d:4f:e3:7b:90:5d:c4:2c:0d:1a:52:3f:d6:15:81:ca:a1:
         72:81:96:4a:39:19:c7:8b:e1:1b:bb:7e:86:c5:f9:b3:f9:b4:
         7a:0a:18:45:8b:bc:0e:cd:da:49:f1:4a:4a:c5:85:4d:6d:58:
         8f:88:b4:c1:9e:bc:d2:71:db:71:ab:9e:13:9f:bf:94:34:20:
         f8:ca:44:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylpKP/IJqRkOYsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj
OTBlMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YjU0OWI1NTEtMzkwNS00Yzk5LWJkMDYtYmE1NTUyZDkxYTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28QauX2KfiszADY8JrHf5TH7rbhLZ3GB5TkE
jXWoLdoYOZMooxks5jcY2Pyn/+danQnozMVn9FoTE7w0/r+OlcQs6O/1vpltaDsi
rLsPbSTHc6mwPczl+zHMMqif8Dctumz9OnBGOKB4nNn8V75GVRhayiUBXR5HXXvD
KvyMaAlPpvMZEIbZRMcqfsHg8GYt4PSTZvpVtcyyqujXejZNbDitr97p2awpGqpz
MrMEjNq7lLbhfn4Nb3Km9hLsWr3KaEKaLjYT5ArRUy3G4jE7f9AMrx7Iq/+qat1N
1Zs+W7KHoretB1yCknGlSWT+d7VMaSJgeYzal5B0FWeNvHHxqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5QOQgz76T8wyn/6PlqoGtkriNtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi
NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvMDc1NTAyNjUtMWExNy0z
M2EwLThhMDAtNWIwZmYyNDk1MGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0
NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1
YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx
MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ0mkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGQUsJJ4Xj1KHFpO39cJIOr25sDOkmp8V1YYqJx8ZwHkwTazUW/m+FY
P6NtOAmkxRhoJeKgg0KHl1+bC6q0/H2PGGubFxsD8m5EDy+3XYlXM9I1/f/A6SMD
DSX0O/HdGY6ekfcxXK+c6T1N4oQ8/yFUfP8DcTxT8r5dytlOz7CYZhiw5uS1XHNZ
xEQ7aQWAvB+Ac+n6EUjEZt5/kWJnPsr7uv86DoyRiTO0FXuV5116pW1XUvZdT+N7
kF3ELA0aUj/WFYHKoXKBlko5GceL4Ru7fobF+bP5tHoKGEWLvA7N2knxSkrFhU1t
WI+ItMGevNJx23GrnhOfv5Q0IPjKRJI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:08 2026 by rpki-client