Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa
File:                     0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa (raw, json)
Hash identifier:          i9nVenzK0BGlrTBrWIUW19pAHKaUdEEUFDE3YLPNp8E=
Subject key identifier:   68:9E:AD:B1:D2:A5:1E:3C:17:72:61:55:0A:0B:B4:7C:70:1F:BC:10
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFBC6F9AE62A92089E18C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        72.31.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:bc:6f:9a:e6:2a:92:08:9e:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=2d0cd687-76b4-47ff-8a79-315b154c13c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:b6:fe:c7:fa:87:36:bb:2c:41:fe:29:6d:
                    a0:d4:33:ca:c8:29:ec:1f:53:32:2b:a0:df:a5:87:
                    06:93:4b:0d:68:4b:56:46:0f:ee:b3:fd:91:80:5f:
                    4e:a7:db:5b:70:b9:a3:40:65:53:b1:b2:00:7d:bb:
                    64:b0:9f:21:bc:db:0e:6b:37:39:fa:ba:09:c3:80:
                    d9:c5:27:48:76:07:62:a0:8d:54:18:a4:96:b7:87:
                    a3:28:6f:52:a9:a7:c5:dd:f9:c8:28:55:68:14:db:
                    d3:cc:14:78:f0:06:44:fa:3d:92:17:52:63:b1:5f:
                    7c:f6:9e:af:b4:cf:49:08:41:b3:f9:ab:74:49:1c:
                    d2:5a:d7:a2:9d:9d:5d:32:76:d1:00:80:25:6e:0b:
                    95:9e:0f:2f:69:01:61:ec:db:71:2c:5f:50:dd:81:
                    de:c8:cd:58:fa:02:d6:38:20:cc:f6:36:91:a4:f3:
                    d3:57:33:ee:e8:91:17:df:ac:ee:21:9f:f3:7e:16:
                    fd:d0:33:7d:ce:31:91:e7:8d:8e:eb:e3:49:0f:2f:
                    c9:59:a4:6e:60:64:8e:ca:77:7d:39:76:7a:19:bf:
                    2a:7d:cf:dc:a8:ef:13:50:45:a2:e5:d9:e9:3e:2d:
                    69:02:68:f9:51:f4:81:b8:8e:9d:59:a6:a7:93:d2:
                    b5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:AD:B1:D2:A5:1E:3C:17:72:61:55:0A:0B:B4:7C:70:1F:BC:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:27:07:c7:c2:e9:38:67:e6:f3:63:c9:47:40:65:c6:82:
         db:d1:d0:87:21:9a:28:87:80:01:38:90:5b:62:d6:51:aa:ec:
         ee:c8:48:47:5f:ff:35:31:32:61:86:f2:af:ce:4d:6b:a7:c7:
         dd:a7:30:a1:c1:1d:30:9e:64:12:04:d9:e0:6b:2e:db:aa:aa:
         12:79:1b:2c:d4:71:95:30:05:e9:88:ae:36:5d:7f:90:32:c0:
         52:ae:cd:ba:61:9e:0f:b1:1e:b8:64:bc:74:8e:29:e8:76:b3:
         b1:5f:f0:57:9a:f2:e6:e3:a8:27:6e:20:59:24:d1:ed:2a:18:
         08:a5:d8:7a:30:76:56:ca:5f:a9:7e:f5:eb:1e:e0:82:f2:15:
         26:fe:e9:5b:f1:c6:da:cc:a3:61:f7:85:86:17:cc:3d:7c:93:
         6c:8b:d2:8f:c9:c4:11:3f:21:5d:49:84:67:d6:7a:c1:90:a4:
         dd:49:01:9c:07:7e:a8:11:c0:13:54:36:e8:21:7f:a1:2f:da:
         60:d6:06:ba:53:39:02:61:cc:6e:4f:72:e6:9c:93:60:a6:56:
         d1:fa:ab:1f:ea:55:c2:9f:7b:f2:7d:4f:94:bb:4c:25:4b:f7:
         cf:9a:3b:33:19:dc:53:98:c8:ed:ea:ae:55:02:91:51:24:5a:
         16:a9:b7:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7xvmuYqkgieGMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MmQwY2Q2ODctNzZiNC00N2ZmLThhNzktMzE1YjE1NGMxM2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAG2/sf6hza7LEH+KW2g1DPKyCnsH1MyK6Df
pYcGk0sNaEtWRg/us/2RgF9Op9tbcLmjQGVTsbIAfbtksJ8hvNsOazc5+roJw4DZ
xSdIdgdioI1UGKSWt4ejKG9SqafF3fnIKFVoFNvTzBR48AZE+j2SF1JjsV989p6v
tM9JCEGz+at0SRzSWteinZ1dMnbRAIAlbguVng8vaQFh7NtxLF9Q3YHeyM1Y+gLW
OCDM9jaRpPPTVzPu6JEX36zuIZ/zfhb90DN9zjGR542O6+NJDy/JWaRuYGSOynd9
OXZ6Gb8qfc/cqO8TUEWi5dnpPi1pAmj5UfSBuI6dWaank9K1twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGierbHSpR48F3JhVQoLtHxwH7wQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMGE1OTZlMjMtMGViYi0z
YjBmLThiZWEtY2EwOTUzZjAwOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIsVJwfHwuk4Z+bzY8lHQGXGgtvR0IchmiiHgAE4kFti1lGq7O7ISEdf
/zUxMmGG8q/OTWunx92nMKHBHTCeZBIE2eBrLtuqqhJ5GyzUcZUwBemIrjZdf5Ay
wFKuzbphng+xHrhkvHSOKeh2s7Ff8Fea8ubjqCduIFkk0e0qGAil2HowdlbKX6l+
9ese4ILyFSb+6VvxxtrMo2H3hYYXzD18k2yL0o/JxBE/IV1JhGfWesGQpN1JAZwH
fqgRwBNUNughf6Ev2mDWBrpTOQJhzG5Pcuack2CmVtH6qx/qVcKfe/J9T5S7TCVL
98+aOzMZ3FOYyO3qrlUCkVEkWhapt4M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:44 2026 by rpki-client