Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2cc4eca8-c88f-3533-8fa0-d5b5d4b8fa74.roa
File:                     2cc4eca8-c88f-3533-8fa0-d5b5d4b8fa74.roa (raw, json)
Hash identifier:          yckl/Qa1Or3VXGh+P91HtOSa89f0dR69lARduIV9ScY=
Subject key identifier:   AD:B0:EA:50:21:7C:6B:5A:9E:2A:82:71:1D:E5:EB:B8:38:86:6D:56
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA847DC825AFE9B0E1D640
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2cc4eca8-c88f-3533-8fa0-d5b5d4b8fa74.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11427
IP address blocks:        72.135.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:84:7d:c8:25:af:e9:b0:e1:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=ed59449c-d238-4d56-a5cc-d00da7c1d212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:45:d5:d7:a1:d4:e0:04:6f:c0:64:eb:3b:
                    88:9b:c7:73:d7:f9:7b:f8:77:e8:90:2f:02:36:00:
                    8b:48:99:75:25:d5:b2:ab:df:0f:5a:56:92:1a:a6:
                    56:74:69:c9:64:c4:f3:a6:1b:21:bd:ad:f6:52:f6:
                    73:81:bc:a8:be:9b:83:3f:8f:18:f8:19:7d:29:9e:
                    d6:9a:5c:80:a7:28:c8:25:98:b4:3a:1c:7a:24:5e:
                    bf:21:f6:2e:b7:5c:15:03:eb:50:5f:91:f2:ee:cd:
                    ab:43:47:83:e3:f3:47:23:29:4a:78:38:44:e9:38:
                    df:df:01:06:18:40:e1:f4:48:2c:7d:e5:3b:1e:24:
                    b1:47:c1:95:d9:4f:8b:24:e2:a9:d7:20:34:03:2e:
                    57:b3:a7:ba:36:bb:f8:ef:ea:57:6b:f5:32:56:ef:
                    06:b2:b4:da:a2:59:61:57:18:e2:53:14:5c:be:f1:
                    31:e5:a4:f8:4d:55:2b:32:2f:bb:ab:14:79:5b:7e:
                    be:1e:5e:73:95:33:68:85:13:07:0d:6c:87:dd:be:
                    bc:9a:33:14:55:59:40:4e:fb:a0:ad:39:46:9b:ff:
                    55:e9:5d:10:19:d2:77:4a:a3:34:37:e8:9b:9d:3e:
                    a1:42:f2:15:52:6c:47:33:57:63:fa:bf:ee:71:9b:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:EA:50:21:7C:6B:5A:9E:2A:82:71:1D:E5:EB:B8:38:86:6D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2cc4eca8-c88f-3533-8fa0-d5b5d4b8fa74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.135.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:47:61:67:b9:63:26:ad:d1:47:e7:af:89:f8:a9:5d:9b:dd:
         b7:52:ae:fc:57:c0:37:19:96:df:a8:a1:4a:b3:a9:3e:71:50:
         13:fb:aa:96:a5:fe:92:c3:7f:dd:35:38:fe:31:9a:5a:71:14:
         e9:59:9f:b6:23:cd:21:88:c2:fb:01:6b:94:ce:f4:cc:95:61:
         ab:c8:a7:d4:e9:93:2a:fb:80:4c:61:f9:b3:8a:96:e5:14:de:
         05:ec:6d:47:f9:3b:92:7c:95:fb:33:a5:07:76:b9:4e:90:d4:
         18:61:f1:19:59:a9:eb:1b:c9:21:a4:05:f6:3e:51:b2:57:fa:
         de:8c:a2:4c:b7:2c:e2:80:a2:26:06:c7:b8:07:e8:e6:f0:ee:
         33:b4:88:50:bd:b0:4a:3e:20:85:bb:5a:ed:9b:09:e9:98:22:
         09:c7:a8:27:43:e0:79:09:12:ff:22:eb:a9:e3:ec:eb:09:71:
         96:62:44:bd:e1:8e:63:8e:42:29:8f:78:32:3f:ad:b0:97:db:
         97:b2:a2:5c:ba:c3:08:0f:27:e3:40:32:33:d1:ca:0f:36:e5:
         da:ee:5e:3d:f4:eb:5b:3f:e7:ae:2c:02:af:db:c0:43:14:4e:
         a3:3a:37:72:1e:fb:f9:56:e0:29:7e:09:57:79:ae:e1:8c:6f:
         50:09:a4:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyoR9yCWv6bDh1kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ZWQ1OTQ0OWMtZDIzOC00ZDU2LWE1Y2MtZDAwZGE3YzFkMjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbBF1deh1OAEb8Bk6zuIm8dz1/l7+HfokC8C
NgCLSJl1JdWyq98PWlaSGqZWdGnJZMTzphshva32UvZzgbyovpuDP48Y+Bl9KZ7W
mlyApyjIJZi0Ohx6JF6/IfYut1wVA+tQX5Hy7s2rQ0eD4/NHIylKeDhE6Tjf3wEG
GEDh9EgsfeU7HiSxR8GV2U+LJOKp1yA0Ay5Xs6e6Nrv47+pXa/UyVu8GsrTaollh
VxjiUxRcvvEx5aT4TVUrMi+7qxR5W36+Hl5zlTNohRMHDWyH3b68mjMUVVlATvug
rTlGm/9V6V0QGdJ3SqM0N+ibnT6hQvIVUmxHM1dj+r/ucZsGRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK2w6lAhfGtaniqCcR3l67g4hm1WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMmNjNGVjYTgtYzg4Zi0z
NTMzLThmYTAtZDViNWQ0YjhmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSIcAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANHYWe5Yyat0Ufnr4n4qV2b3bdSrvxXwDcZlt+ooUqzqT5xUBP7qpal
/pLDf901OP4xmlpxFOlZn7YjzSGIwvsBa5TO9MyVYavIp9Tpkyr7gExh+bOKluUU
3gXsbUf5O5J8lfszpQd2uU6Q1Bhh8RlZqesbySGkBfY+UbJX+t6Moky3LOKAoiYG
x7gH6Obw7jO0iFC9sEo+IIW7Wu2bCemYIgnHqCdD4HkJEv8i66nj7OsJcZZiRL3h
jmOOQimPeDI/rbCX25eyoly6wwgPJ+NAMjPRyg825druXj3061s/564sAq/bwEMU
TqM6N3Ie+/lW4Cl+CVd5ruGMb1AJpGU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:40 2026 by rpki-client