Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/61728861-6ac9-3771-9842-d618d9a7a6fa.roa
File:                     61728861-6ac9-3771-9842-d618d9a7a6fa.roa (raw, json)
Hash identifier:          azzq73ARMDECTdQQXuYDQp3sRA02aWyjcOqKlebRsEI=
Subject key identifier:   DF:3C:5F:B5:5C:18:2A:0B:4E:9B:01:BF:5E:8F:6E:E5:8F:04:99:22
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584D143D482EE02BDE7BD0C55900
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/61728861-6ac9-3771-9842-d618d9a7a6fa.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     835
IP address blocks:        207.174.105.0/24 maxlen: 24
                          2602:fd50:2::/48 maxlen: 48
                          2602:fd50:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:48:2e:e0:2b:de:7b:d0:c5:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=382477bf-1c94-42e8-b94b-c59aae2c46a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:b6:2e:b8:b0:fe:f3:4d:c4:5b:38:de:7e:
                    32:e0:fd:c8:4f:7c:5f:f7:80:0d:77:96:aa:c5:2f:
                    9e:9d:0d:3c:15:d0:fc:3e:95:6f:84:4a:b3:c1:e0:
                    26:bd:ac:d2:3e:ce:99:29:ff:2f:33:91:ff:e4:e5:
                    b0:58:c4:f0:b9:9e:c1:34:d0:98:46:34:84:df:2f:
                    89:ab:12:dd:6b:45:18:4e:3a:de:c6:16:e8:fd:ce:
                    15:db:14:44:ae:cc:87:6c:e7:0e:ee:10:92:6c:57:
                    7b:a0:50:c7:11:36:66:50:c1:f8:e5:41:c6:c9:c7:
                    83:81:d6:3c:4b:bb:c6:bd:f9:e4:d4:93:41:18:c0:
                    6b:a4:32:bf:24:58:4c:11:00:7b:3a:fb:20:1e:bb:
                    d9:06:96:a5:e5:e9:22:1f:fc:40:03:a9:21:85:08:
                    be:6b:20:3d:cb:b6:31:b0:aa:e8:d8:13:cc:fb:f4:
                    c2:ef:41:ee:5e:69:8f:f1:5c:d2:31:ec:a1:3c:31:
                    f6:bf:62:9a:2b:af:f8:81:a7:3e:bd:a4:e7:81:eb:
                    d4:a1:71:cf:e7:05:fa:11:c5:f5:a7:37:f9:92:17:
                    7a:99:89:9b:51:b4:e8:d4:82:79:7e:71:1c:9b:fc:
                    3f:3f:88:f6:a1:f1:6e:35:5a:ba:e5:5c:c5:c0:0b:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3C:5F:B5:5C:18:2A:0B:4E:9B:01:BF:5E:8F:6E:E5:8F:04:99:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/61728861-6ac9-3771-9842-d618d9a7a6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.105.0/24
                IPv6:
                  2602:fd50:2::/48
                  2602:fd50:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:6e:c5:b1:4e:19:0e:8b:bb:24:4c:ce:21:6d:70:db:06:
         44:85:71:c1:f7:09:1c:23:a3:94:28:a2:fc:ee:81:4d:d0:29:
         5c:8f:07:eb:42:26:37:b9:f3:0c:47:d3:df:e9:8e:39:8e:dd:
         4d:b2:f9:5d:f6:11:4d:06:94:40:50:15:cb:81:db:86:17:d1:
         ac:19:97:de:c5:59:5c:3b:39:19:f7:8e:09:63:70:35:6d:8d:
         ba:4a:eb:8b:34:30:a2:ad:1a:10:f6:30:91:9a:63:6d:7d:33:
         da:a9:48:e5:7e:6f:a7:63:8b:f1:b0:c6:e4:69:fa:e7:76:61:
         93:1e:b8:0f:51:bb:16:07:d9:c5:ab:b5:c5:ad:38:2d:eb:7f:
         36:2d:07:2c:e2:88:f7:e3:5a:c4:fc:21:3c:cd:73:a8:67:fc:
         e6:42:c8:45:8d:b0:dd:17:9b:75:bf:40:c5:76:29:25:c7:27:
         57:36:bf:34:7f:31:46:2c:84:a1:12:65:d5:71:e6:6f:f4:fb:
         79:86:9d:68:c8:62:40:05:86:c7:4b:3f:63:d5:a2:c4:ce:bf:
         dd:2b:ab:d3:7c:df:8a:70:4b:0b:7b:b1:4b:01:ee:c1:5e:c5:
         04:09:8f:9a:eb:6b:72:da:6a:2e:83:fc:23:d2:47:43:09:e7:
         78:be:36:3f
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0UPUgu4Cvee9DFWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
MzgyNDc3YmYtMWM5NC00MmU4LWI5NGItYzU5YWFlMmM0NmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq+2Lriw/vNNxFs43n4y4P3IT3xf94ANd5aq
xS+enQ08FdD8PpVvhEqzweAmvazSPs6ZKf8vM5H/5OWwWMTwuZ7BNNCYRjSE3y+J
qxLda0UYTjrexhbo/c4V2xRErsyHbOcO7hCSbFd7oFDHETZmUMH45UHGyceDgdY8
S7vGvfnk1JNBGMBrpDK/JFhMEQB7OvsgHrvZBpal5ekiH/xAA6khhQi+ayA9y7Yx
sKro2BPM+/TC70HuXmmP8VzSMeyhPDH2v2KaK6/4gac+vaTngevUoXHP5wX6EcX1
pzf5khd6mYmbUbTo1IJ5fnEcm/w/P4j2ofFuNVq65VzFwAtWgQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFN88X7VcGCoLTpsBv16PbuWPBJkiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvNjE3Mjg4NjEtNmFjOS0z
NzcxLTk4NDItZDYxOGQ5YTdhNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAz65pMBcE
AgACMBEDBwAmAv1QAAIDBgAmAv1QAzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7Lm7FsU4ZDou7JEzOIW1w
2wZEhXHB9wkcI6OUKKL87oFN0ClcjwfrQiY3ufMMR9Pf6Y45jt1Nsvld9hFNBpRA
UBXLgduGF9GsGZfexVlcOzkZ944JY3A1bY26SuuLNDCirRoQ9jCRmmNtfTPaqUjl
fm+nY4vxsMbkafrndmGTHrgPUbsWB9nFq7XFrTgt6382LQcs4oj341rE/CE8zXOo
Z/zmQshFjbDdF5t1v0DFdiklxydXNr80fzFGLIShEmXVceZv9Pt5hp1oyGJABYbH
Sz9j1aLEzr/dK6vTfN+KcEsLe7FLAe7BXsUECY+a62ty2moug/wj0kdDCed4vjY/
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:28 2026 by rpki-client