Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/dd150e0c-376e-306c-acb5-77c430ed3ae9.roa
File:                     dd150e0c-376e-306c-acb5-77c430ed3ae9.roa (raw, json)
Hash identifier:          hRJFh53F/oTuNQzQntjy5zSAzfZiXsmqWNY3T4ntYyI=
Subject key identifier:   35:5D:56:F6:72:5F:B8:B7:23:A2:D4:B9:5A:7B:BA:BC:ED:34:BD:9A
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584D2BDA031ED8F439ADEA8C7400
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/dd150e0c-376e-306c-acb5-77c430ed3ae9.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     3356
IP address blocks:        173.195.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:03:1e:d8:f4:39:ad:ea:8c:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=3daa7af4-e669-4d50-b469-8b0071dfb6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:59:8f:5f:7b:57:e7:f7:bd:63:9b:2b:fd:
                    cd:da:29:0b:17:a0:6a:2a:4e:63:3f:f8:0b:a1:9f:
                    ad:a3:ad:be:02:41:63:c9:21:94:a2:dd:ec:7f:07:
                    f6:8e:1b:ae:75:7b:63:10:01:55:b3:bb:df:09:35:
                    89:9d:c2:d5:8d:57:a7:ab:0e:c2:32:e1:da:d7:03:
                    1c:7a:cc:d1:0a:e2:bd:80:c0:40:4f:7c:c8:87:b4:
                    28:a3:0a:e6:63:62:9a:cf:f2:03:1d:d7:25:77:96:
                    10:74:b5:33:08:6d:0a:bd:72:fa:20:fd:0b:e5:a1:
                    27:ba:7b:6d:fe:83:e0:d1:a9:31:3c:57:a4:ef:1f:
                    04:8f:8f:71:58:92:28:87:77:52:b4:c2:a6:c9:55:
                    57:01:31:f6:32:2d:0a:4c:6d:84:be:b7:87:aa:17:
                    84:94:0e:71:0d:f3:38:c2:c4:0e:ba:c0:8d:b6:11:
                    eb:3e:d2:7a:fd:e3:9e:b9:4a:7d:34:a7:b1:52:c7:
                    d8:7e:10:48:18:5f:e6:26:4f:78:10:38:86:36:8b:
                    26:ad:56:15:da:3f:78:25:7b:14:ff:98:68:e4:1a:
                    74:ed:b9:5c:bf:21:08:28:0a:ee:6c:d5:1f:96:35:
                    9d:43:26:a4:5c:43:47:a0:d0:df:a0:5b:7e:59:70:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5D:56:F6:72:5F:B8:B7:23:A2:D4:B9:5A:7B:BA:BC:ED:34:BD:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/dd150e0c-376e-306c-acb5-77c430ed3ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:98:8b:09:f6:e2:e3:c4:09:9f:2c:bd:4c:2d:4e:cc:6a:
         7c:d1:cc:68:c5:78:de:af:30:37:65:d9:11:a8:91:1c:d1:3e:
         ad:83:5c:91:d2:e7:0e:c9:b9:39:ad:b1:bd:cb:8a:04:fb:43:
         cc:dc:58:b6:4b:54:67:eb:b6:eb:fb:e4:03:06:4b:a7:d2:b9:
         69:7d:4f:02:ac:63:bc:a1:66:6d:12:33:ba:49:81:bc:37:20:
         e6:af:ce:e8:01:73:82:02:e8:9a:d9:77:fa:9f:c7:c4:8c:d8:
         21:d9:e8:61:29:e5:ce:9d:56:d5:72:14:7d:d0:28:8d:2b:cc:
         d9:84:60:c7:c8:2a:ec:09:80:5b:5a:d5:82:20:f4:71:0e:4d:
         57:5f:e6:c2:c4:48:c1:5e:cf:ea:06:14:ef:96:49:30:8e:3c:
         4f:09:e4:19:63:56:f6:ce:2a:95:26:e4:3c:83:d3:b1:6b:cf:
         87:35:e4:ea:63:8f:3f:67:ac:81:73:05:62:c1:13:75:92:43:
         18:44:c2:c7:e8:7e:86:72:a0:fd:02:49:3f:58:c0:40:8d:43:
         ba:b6:73:e9:3d:70:46:b7:b9:5c:ae:95:8a:b8:5f:9d:3d:37:
         03:13:aa:50:4f:65:9a:22:ef:3f:fc:1b:ab:81:47:af:b7:11:
         b5:9a:80:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gMe2PQ5reqMdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2YmVlZGYtYmM5OS00ZDdjLTlhMjAtNjBlYzkxM2E2
YTE3MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
M2RhYTdhZjQtZTY2OS00ZDUwLWI0NjktOGIwMDcxZGZiNmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTRZj197V+f3vWObK/3N2ikLF6BqKk5jP/gL
oZ+to62+AkFjySGUot3sfwf2jhuudXtjEAFVs7vfCTWJncLVjVenqw7CMuHa1wMc
eszRCuK9gMBAT3zIh7QoowrmY2Kaz/IDHdcld5YQdLUzCG0KvXL6IP0L5aEnuntt
/oPg0akxPFek7x8Ej49xWJIoh3dStMKmyVVXATH2Mi0KTG2EvreHqheElA5xDfM4
wsQOusCNthHrPtJ6/eOeuUp9NKexUsfYfhBIGF/mJk94EDiGNosmrVYV2j94JXsU
/5ho5Bp07blcvyEIKArubNUfljWdQyakXENHoNDfoFt+WXAeUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVdVvZyX7i3I6LUuVp7urztNL2aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZTZi
ZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVjOTEzYTZhMTcvZGQxNTBlMGMtMzc2ZS0z
MDZjLWFjYjUtNzdjNDMwZWQzYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGU2YmVlZGYtYmM5OS00ZDdjLTlh
MjAtNjBlYzkxM2E2YTE3LzRlNmJlZWRmLWJjOTktNGQ3Yy05YTIwLTYwZWM5MTNh
NmExNy5jcmwwHwYDVR0jBBgwFoAUyQ4hHWXwKXwCsjkvnzZN9Y5CVlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ZTZiZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVj
OTEzYTZhMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcNIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpcmIsJ9uLjxAmfLL1MLU7ManzRzGjFeN6vMDdl2RGokRzRPq2DXJHS
5w7JuTmtsb3LigT7Q8zcWLZLVGfrtuv75AMGS6fSuWl9TwKsY7yhZm0SM7pJgbw3
IOavzugBc4IC6JrZd/qfx8SM2CHZ6GEp5c6dVtVyFH3QKI0rzNmEYMfIKuwJgFta
1YIg9HEOTVdf5sLESMFez+oGFO+WSTCOPE8J5BljVvbOKpUm5DyD07Frz4c15Opj
jz9nrIFzBWLBE3WSQxhEwsfofoZyoP0CST9YwECNQ7q2c+k9cEa3uVyulYq4X509
NwMTqlBPZZoi7z/8G6uBR6+3EbWagMc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:09 2026 by rpki-client