Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67752497-0fe4-36c2-8471-2399d4711200.roa
File:                     67752497-0fe4-36c2-8471-2399d4711200.roa (raw, json)
Hash identifier:          o8QUt9HlhtGIagdchBf2/RJ0eT98wNPuK58gmQ0VKdA=
Subject key identifier:   7B:B7:70:B5:18:F5:16:F4:A1:2C:37:34:5A:7D:F5:04:53:77:19:19
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFE5E10B2C4B52DD75F6C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67752497-0fe4-36c2-8471-2399d4711200.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     11505
IP address blocks:        97.71.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:e5:e1:0b:2c:4b:52:dd:75:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=93af5ab6-77cf-47f6-a5bb-d819a937815e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:07:f7:bc:03:62:ae:ea:51:f3:6d:96:a7:
                    3d:22:e4:92:34:9f:a7:32:c6:49:79:60:32:7a:17:
                    fd:bc:34:a9:e1:89:22:b3:2c:63:b3:c7:91:a2:98:
                    fe:ea:a8:bb:f6:36:83:2d:36:0a:d8:c5:4d:2b:2a:
                    47:ff:41:5f:6e:99:55:1d:1f:42:51:18:3e:85:8e:
                    f0:cb:c0:77:ba:f1:84:cb:dc:2b:1b:22:9e:47:88:
                    94:b1:11:d6:14:e3:13:74:37:ca:a1:4a:64:5c:80:
                    62:48:4b:55:1c:a2:68:f9:7e:f8:8f:fd:ff:2e:47:
                    62:b9:02:97:4b:be:09:c0:f0:34:eb:30:55:53:7b:
                    3c:9d:7a:fb:fa:99:b2:62:e7:b8:2e:ee:a8:8a:eb:
                    ef:2f:0d:7d:1a:93:ba:c6:51:5f:2a:e3:7e:a9:90:
                    65:28:f9:11:e8:e4:4b:82:bf:e8:34:02:fa:78:2d:
                    82:cc:17:3c:69:62:fc:ae:4f:ff:64:72:c4:bf:ef:
                    e9:54:2f:e1:f1:3d:dd:21:6f:8f:a4:52:e8:74:93:
                    b0:a1:5e:2b:75:34:7c:54:c1:d7:d5:c8:b2:5c:67:
                    65:cc:76:1c:06:ab:21:24:e1:fe:fc:48:de:ac:c0:
                    86:a1:84:ac:ab:97:a9:3a:5c:88:5c:e6:33:08:f2:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B7:70:B5:18:F5:16:F4:A1:2C:37:34:5A:7D:F5:04:53:77:19:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67752497-0fe4-36c2-8471-2399d4711200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cc:f3:fa:35:d2:0d:ba:8d:3f:5b:ae:1a:39:96:7d:36:75:
         fb:d4:b4:f0:ed:c1:bf:d0:13:af:dd:6d:9c:b0:16:17:c1:5c:
         45:29:fa:c0:83:37:6b:9f:0b:0b:46:5b:7e:a6:f5:d4:91:1d:
         a4:af:64:42:56:7b:d6:54:6d:15:6d:ca:50:80:c1:41:8a:7d:
         a2:f2:7f:68:4b:8d:a0:19:33:b9:d1:16:43:4e:b5:90:5c:f6:
         f0:34:f7:5b:ce:91:da:15:13:08:e7:da:23:d6:65:77:1f:e4:
         87:89:5a:0f:f6:9c:7b:db:f2:7b:fb:57:af:8c:9f:2f:2c:59:
         72:e4:f1:ab:fa:2c:fb:b4:3f:a1:70:51:45:fd:89:57:95:34:
         02:13:2c:99:a3:42:1c:d9:f2:23:90:78:c2:30:a1:3e:4a:a3:
         6c:34:6e:6d:b7:90:aa:15:56:83:7d:64:70:d3:ac:58:b6:8e:
         aa:86:53:41:a9:6b:35:b7:ab:1a:03:43:34:c6:c6:69:af:45:
         b8:0c:b6:63:47:76:b6:d7:85:4a:4b:7c:3c:c5:6f:1c:b4:d2:
         14:05:fd:52:9a:5e:30:37:a1:cd:f7:7b:2e:2e:e3:26:e7:59:
         49:74:59:64:44:b4:4d:80:92:62:14:e1:77:af:8d:80:68:51:
         3c:2c:8a:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+XhCyxLUt119sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
OTNhZjVhYjYtNzdjZi00N2Y2LWE1YmItZDgxOWE5Mzc4MTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHIH97wDYq7qUfNtlqc9IuSSNJ+nMsZJeWAy
ehf9vDSp4Ykisyxjs8eRopj+6qi79jaDLTYK2MVNKypH/0FfbplVHR9CURg+hY7w
y8B3uvGEy9wrGyKeR4iUsRHWFOMTdDfKoUpkXIBiSEtVHKJo+X74j/3/LkdiuQKX
S74JwPA06zBVU3s8nXr7+pmyYue4Lu6oiuvvLw19GpO6xlFfKuN+qZBlKPkR6ORL
gr/oNAL6eC2CzBc8aWL8rk//ZHLEv+/pVC/h8T3dIW+PpFLodJOwoV4rdTR8VMHX
1ciyXGdlzHYcBqshJOH+/EjerMCGoYSsq5epOlyIXOYzCPLr5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHu3cLUY9Rb0oSw3NFp99QRTdxkZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjc3NTI0OTctMGZlNC0z
NmMyLTg0NzEtMjM5OWQ0NzExMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUeXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXM8/o10g26jT9brho5ln02dfvUtPDtwb/QE6/dbZywFhfBXEUp+sCD
N2ufCwtGW36m9dSRHaSvZEJWe9ZUbRVtylCAwUGKfaLyf2hLjaAZM7nRFkNOtZBc
9vA091vOkdoVEwjn2iPWZXcf5IeJWg/2nHvb8nv7V6+Mny8sWXLk8av6LPu0P6Fw
UUX9iVeVNAITLJmjQhzZ8iOQeMIwoT5Ko2w0bm23kKoVVoN9ZHDTrFi2jqqGU0Gp
azW3qxoDQzTGxmmvRbgMtmNHdrbXhUpLfDzFbxy00hQF/VKaXjA3oc33ey4u4ybn
WUl0WWREtE2AkmIU4XevjYBoUTwsioM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:16 2026 by rpki-client