Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa
File:                     507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa (raw, json)
Hash identifier:          IyqcTFoOC/070GNDSGzpoleFGa2LSlWW8Gt+9yErd0k=
Subject key identifier:   AF:30:74:B9:D2:1B:D1:03:B8:63:7A:05:F6:ED:BC:BB:B7:2B:11:DB
Certificate issuer:       /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
Certificate serial:       010D0C9F4328584F4975F3CCAB686A873142E100
Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10753
IP address blocks:        66.128.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:f3:cc:ab:68:6a:87:31:42:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b9930af1-e2d6-40fe-96ae-3f563a6717db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:01:b3:9e:9f:61:47:c2:dc:24:94:44:50:
                    7f:fc:c6:4c:38:70:83:1f:4c:a7:5b:cb:86:d2:16:
                    ca:38:24:0b:82:8a:b5:02:1e:08:f7:67:de:bd:d9:
                    38:40:53:2c:2b:0b:6e:c9:92:23:62:72:a9:ea:11:
                    23:f1:fe:ea:0a:49:f2:69:77:91:7a:13:8f:09:4d:
                    42:fd:88:9f:59:68:b2:3c:25:94:c8:b9:cd:5e:d7:
                    49:74:78:2e:2e:db:c0:ba:cb:fe:8a:6e:51:c1:b3:
                    d8:34:41:33:d2:cd:bb:f1:05:a8:4b:e0:e3:7b:a5:
                    d2:c2:c5:ff:65:e4:59:b3:e8:3a:9d:1c:8e:2d:02:
                    8d:50:95:56:3a:6f:16:cf:a4:af:15:26:3c:36:4d:
                    e3:cc:14:d5:ca:61:af:f2:fa:10:88:1e:fd:71:bd:
                    0d:f7:3e:7c:5b:d6:27:c6:81:5a:5d:1b:d1:4b:bb:
                    c5:60:de:c9:c7:81:97:62:24:04:09:2e:e5:90:d6:
                    36:6c:97:35:97:cf:b9:a3:57:f1:78:40:6d:5c:da:
                    47:a2:ce:6f:6a:29:a2:bd:e7:be:7a:c5:6d:d7:4b:
                    fe:76:56:5c:d1:6a:57:17:25:53:10:f4:af:e6:33:
                    73:2d:ba:12:98:a7:99:d2:90:20:21:b0:7e:d6:f7:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:30:74:B9:D2:1B:D1:03:B8:63:7A:05:F6:ED:BC:BB:B7:2B:11:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/507878bb-ce4f-3f0b-a5d0-3521d271d6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl

            X509v3 Authority Key Identifier:
                keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:44:71:bb:cf:fe:56:7e:21:65:ff:f0:a2:3e:58:0f:cc:b5:
         b7:51:72:59:f7:7b:23:0e:b4:30:ca:a3:6c:c7:64:90:6c:90:
         99:5b:0d:9b:35:50:76:1c:10:27:e0:d3:73:12:41:f1:08:4c:
         30:ba:75:38:d8:db:0f:62:08:d2:c1:fe:f4:43:ca:1a:9e:d6:
         94:39:7b:65:21:c7:17:2d:22:84:76:98:df:af:bf:61:1b:15:
         35:13:2c:67:51:7c:01:21:f2:f7:83:79:74:db:f6:cc:3b:90:
         80:f5:e0:63:8c:6a:75:28:88:ca:68:b0:42:22:fd:59:f9:7a:
         f2:e1:67:fc:68:8d:cf:7e:0b:7b:d5:30:c7:d6:0d:d9:98:79:
         e2:5a:4d:f0:b6:bf:87:c7:31:14:87:94:e4:f7:1f:e9:ed:7c:
         13:d6:9c:da:4e:34:e7:4a:3e:8b:2e:e2:e3:ec:b9:51:d6:53:
         82:af:74:24:54:d1:57:44:dd:cc:b4:a1:c6:1e:5b:12:4b:d5:
         43:69:7c:2f:f9:f8:d8:1a:7a:c0:45:b9:60:3f:d0:f3:28:ec:
         7c:af:0c:3e:42:74:a5:dc:30:06:ac:50:c9:6a:c0:5b:2d:46:
         7d:6b:42:f7:fb:4d:32:4f:7c:09:12:20:94:27:cb:2f:cb:ac:
         bd:36:45:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdfPMq2hqhzFC4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJhMzkyOTMtNWRkYi00Y2MwLTgzNTMtMmIyNThlMmU3
OGVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Yjk5MzBhZjEtZTJkNi00MGZlLTk2YWUtM2Y1NjNhNjcxN2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAQBs56fYUfC3CSURFB//MZMOHCDH0ynW8uG
0hbKOCQLgoq1Ah4I92fevdk4QFMsKwtuyZIjYnKp6hEj8f7qCknyaXeRehOPCU1C
/YifWWiyPCWUyLnNXtdJdHguLtvAusv+im5RwbPYNEEz0s278QWoS+Dje6XSwsX/
ZeRZs+g6nRyOLQKNUJVWOm8Wz6SvFSY8Nk3jzBTVymGv8voQiB79cb0N9z58W9Yn
xoFaXRvRS7vFYN7Jx4GXYiQECS7lkNY2bJc1l8+5o1fxeEBtXNpHos5vaimivee+
esVt10v+dlZc0WpXFyVTEPSv5jNzLboSmKeZ0pAgIbB+1vdfcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8wdLnSG9EDuGN6BfbtvLu3KxHbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MmEz
OTI5My01ZGRiLTRjYzAtODM1My0yYjI1OGUyZTc4ZWEvNTA3ODc4YmItY2U0Zi0z
ZjBiLWE1ZDAtMzUyMWQyNzFkNmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzJhMzkyOTMtNWRkYi00Y2MwLTgz
NTMtMmIyNThlMmU3OGVhLzcyYTM5MjkzLTVkZGItNGNjMC04MzUzLTJiMjU4ZTJl
NzhlYS5jcmwwHwYDVR0jBBgwFoAUVOojygUguMpCgH0pZ/g+ofnu28MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MmEzOTI5My01ZGRiLTRjYzAtODM1My0yYjI1
OGUyZTc4ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQoDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhEcbvP/lZ+IWX/8KI+WA/MtbdRcln3eyMOtDDKo2zHZJBskJlbDZs1
UHYcECfg03MSQfEITDC6dTjY2w9iCNLB/vRDyhqe1pQ5e2UhxxctIoR2mN+vv2Eb
FTUTLGdRfAEh8veDeXTb9sw7kID14GOManUoiMposEIi/Vn5evLhZ/xojc9+C3vV
MMfWDdmYeeJaTfC2v4fHMRSHlOT3H+ntfBPWnNpONOdKPosu4uPsuVHWU4KvdCRU
0VdE3cy0ocYeWxJL1UNpfC/5+NgaesBFuWA/0PMo7HyvDD5CdKXcMAasUMlqwFst
Rn1rQvf7TTJPfAkSIJQnyy/LrL02RXI=
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:22:45 2026 by rpki-client