Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/72276c2a-12de-3d01-9cca-f0c9bb94109b.roa
File:                     72276c2a-12de-3d01-9cca-f0c9bb94109b.roa (raw, json)
Hash identifier:          w4bC/TI1oPwL/lMdKDi/Nz+8yGYeN7yF34ZbwZMiytE=
Subject key identifier:   38:65:3B:CB:7B:89:D6:C1:CA:F2:2F:E8:CD:CE:EB:29:05:19:DB:9E
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584DB4A5893108ABBD309EE1DEC0
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/72276c2a-12de-3d01-9cca-f0c9bb94109b.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     19137
IP address blocks:        208.70.136.0/23 maxlen: 23
                          208.70.138.0/24 maxlen: 24
                          208.70.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:89:31:08:ab:bd:30:9e:e1:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=30cea95c-0ba4-4cb7-99c9-13403a96eeda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:b4:00:5a:a4:b4:59:51:de:27:de:72:cf:
                    90:d9:40:67:0a:b7:16:19:6e:bd:fd:c0:b9:a1:e2:
                    bc:ad:94:fe:9f:2c:71:ac:8a:31:1c:46:e1:e0:66:
                    09:67:a1:3e:17:c6:b9:70:36:f2:4e:02:a3:04:3f:
                    f5:b1:3d:11:f2:40:c6:a2:72:17:2e:c2:c9:bb:25:
                    37:92:2c:d3:a2:b0:a7:38:1a:db:9f:16:ee:af:cd:
                    14:b5:11:9a:64:ca:b1:6f:63:40:48:fe:d8:2c:3c:
                    de:e6:54:80:e8:c6:a7:6a:3f:45:9d:93:2b:9b:f6:
                    98:b7:6a:53:e4:20:aa:ad:a6:be:de:c3:ef:f6:44:
                    d2:81:74:1e:3c:c4:dd:34:fa:9b:30:b0:81:68:7c:
                    58:5c:22:63:40:ca:fb:0b:71:6a:d5:44:bb:05:8f:
                    bf:8b:8f:f4:90:69:62:91:ec:8b:8c:6e:16:d3:6a:
                    6c:9c:c0:1b:50:04:7d:7c:03:f1:01:7f:e2:8b:dc:
                    8c:7d:cc:14:fc:85:eb:21:7b:cd:2d:0c:69:bc:9b:
                    64:be:78:cf:9e:db:51:78:84:97:c0:76:c0:89:3c:
                    8b:56:66:86:ea:53:c6:b1:a1:fb:f9:f0:08:34:85:
                    72:95:18:7f:33:a9:c3:93:fc:a0:9d:97:d3:06:76:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:65:3B:CB:7B:89:D6:C1:CA:F2:2F:E8:CD:CE:EB:29:05:19:DB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/72276c2a-12de-3d01-9cca-f0c9bb94109b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:5a:dd:56:d5:25:d9:7f:63:e0:a6:73:56:e2:c7:e8:7c:
         40:ae:c6:f8:84:85:49:6d:fb:db:1a:3e:1c:05:53:03:1f:5d:
         05:45:b5:ed:6c:65:57:0e:cb:23:3a:bd:d6:41:b2:27:99:f5:
         14:f4:84:62:b2:d9:58:0e:16:de:7f:1b:9e:fe:1e:04:9f:32:
         56:b2:4c:8f:d1:2d:ae:b5:fe:db:6f:6e:90:17:af:e4:5d:09:
         88:91:35:90:a2:b9:d5:5d:c0:7c:53:ab:c1:b7:0a:1f:7e:3b:
         07:2c:07:c7:79:c7:ee:7c:95:20:10:8c:a0:41:07:a6:bf:12:
         91:97:ab:f8:f9:a0:aa:bb:66:ef:6f:98:5b:f4:44:cf:d7:92:
         4d:37:d3:71:ed:30:ee:5c:39:5d:e6:93:e5:0c:3d:4a:45:65:
         11:b8:60:eb:5e:a3:ff:39:1a:3a:6f:9f:17:59:52:03:06:cf:
         b1:11:30:1d:e9:2a:fc:34:a6:e1:8b:0a:c2:74:43:a5:24:09:
         f4:ac:25:fc:40:07:44:a8:81:77:7c:25:d8:80:06:43:f0:31:
         18:1f:7f:39:2f:36:d8:29:a5:80:d2:b2:ee:70:59:71:30:ab:
         b2:b7:79:4f:eb:dd:67:b2:af:21:2c:e5:e2:88:d4:1a:1e:12:
         19:91:53:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYkxCKu9MJ7h3sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjEzZTUzNjUtNWJlMy00MmY0LWEzZDEtN2Y3NGJiNDRk
ZjEzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MzBjZWE5NWMtMGJhNC00Y2I3LTk5YzktMTM0MDNhOTZlZWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYa0AFqktFlR3ifecs+Q2UBnCrcWGW69/cC5
oeK8rZT+nyxxrIoxHEbh4GYJZ6E+F8a5cDbyTgKjBD/1sT0R8kDGonIXLsLJuyU3
kizTorCnOBrbnxbur80UtRGaZMqxb2NASP7YLDze5lSA6Manaj9FnZMrm/aYt2pT
5CCqraa+3sPv9kTSgXQePMTdNPqbMLCBaHxYXCJjQMr7C3Fq1US7BY+/i4/0kGli
keyLjG4W02psnMAbUAR9fAPxAX/ii9yMfcwU/IXrIXvNLQxpvJtkvnjPnttReISX
wHbAiTyLVmaG6lPGsaH7+fAINIVylRh/M6nDk/ygnZfTBnYwoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhlO8t7idbByvIv6M3O6ykFGdueMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTNl
NTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0YmI0NGRmMTMvNzIyNzZjMmEtMTJkZS0z
ZDAxLTljY2EtZjBjOWJiOTQxMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjEzZTUzNjUtNWJlMy00MmY0LWEz
ZDEtN2Y3NGJiNDRkZjEzLzIxM2U1MzY1LTViZTMtNDJmNC1hM2QxLTdmNzRiYjQ0
ZGYxMy5jcmwwHwYDVR0jBBgwFoAUesHGDQ+FIB+5tE9s1pRMS9GI/PwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yMTNlNTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0
YmI0NGRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAET1Wt1W1SXZf2PgpnNW4sfofECuxviEhUlt+9saPhwFUwMfXQVFte1s
ZVcOyyM6vdZBsieZ9RT0hGKy2VgOFt5/G57+HgSfMlayTI/RLa61/ttvbpAXr+Rd
CYiRNZCiudVdwHxTq8G3Ch9+OwcsB8d5x+58lSAQjKBBB6a/EpGXq/j5oKq7Zu9v
mFv0RM/Xkk0303HtMO5cOV3mk+UMPUpFZRG4YOteo/85GjpvnxdZUgMGz7ERMB3p
Kvw0puGLCsJ0Q6UkCfSsJfxAB0SogXd8JdiABkPwMRgffzkvNtgppYDSsu5wWXEw
q7K3eU/r3WeyryEs5eKI1BoeEhmRU3o=
-----END CERTIFICATE-----
Generated at Wed May 13 11:55:00 2026 by rpki-client