Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6959f10b-8c6e-36da-92ac-959804532193.roa
File:                     6959f10b-8c6e-36da-92ac-959804532193.roa (raw, json)
Hash identifier:          nfOl+6UqkIE7J+9WxtWyOvtJfI/qdi1+uW9Tr9oLzVs=
Subject key identifier:   53:B5:33:FB:90:09:F2:43:2C:D1:63:D0:80:08:59:99:BB:22:72:86
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6293024F75117F3A28068F80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6959f10b-8c6e-36da-92ac-959804532193.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        72.31.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:02:4f:75:11:7f:3a:28:06:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=d6cebdf0-00d4-4026-8947-22e9a76578a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e0:37:0d:6f:4b:0b:85:57:70:01:c9:20:fe:
                    b4:f7:ab:42:2a:9e:7d:5b:ab:e3:55:c2:ae:a1:4e:
                    b0:a6:ef:f5:1c:f6:48:89:8b:6b:87:4d:44:c5:e8:
                    98:b1:82:05:69:6c:b1:cb:ee:87:18:1a:e4:57:a3:
                    9a:01:bd:fc:de:a5:20:0a:18:c2:fc:d6:d0:16:f1:
                    ae:a8:92:d3:8b:7e:b7:c2:a9:63:30:e5:0c:0b:b4:
                    36:5a:b6:28:52:32:e8:80:86:3e:46:13:d2:ad:97:
                    77:75:4d:af:f8:23:cc:19:42:bc:0e:aa:c7:ec:bc:
                    87:09:44:f3:8f:1a:5c:d4:c0:80:a4:4f:4e:91:c7:
                    99:ac:ba:76:9e:5b:e9:45:ed:95:8b:d9:59:e0:d5:
                    2f:a5:e1:23:ed:88:5e:a4:b5:24:f2:9b:ff:c5:df:
                    d8:e4:44:f2:6b:cc:7a:02:b2:11:04:01:90:07:a1:
                    71:09:6d:e2:f3:d3:50:fc:de:28:9d:63:22:41:ac:
                    47:13:af:4a:97:55:54:a5:51:93:97:0f:16:33:e9:
                    b6:45:38:6f:0d:4f:3a:a4:1e:e7:79:af:8d:9c:62:
                    5e:33:5a:4c:fb:c8:be:b1:7c:b7:4a:d9:d1:fc:ee:
                    61:6a:98:8f:4b:ad:74:0e:9f:95:da:fa:e0:7b:5a:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B5:33:FB:90:09:F2:43:2C:D1:63:D0:80:08:59:99:BB:22:72:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6959f10b-8c6e-36da-92ac-959804532193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:74:99:e6:72:22:74:6b:ea:d1:31:a0:dd:7f:3d:1c:b2:98:
         58:9e:b9:d1:b7:ee:8c:cd:d0:4d:23:04:71:9e:33:b8:0a:48:
         f4:3b:c3:4e:97:14:a9:c7:5b:2b:d1:e6:14:a2:f3:a0:6d:a0:
         d3:8d:2a:89:d9:65:cd:e9:bd:82:b4:dd:0c:42:ff:cd:1f:b4:
         1a:e8:d0:ed:9d:3a:7d:53:54:4f:5b:6d:0e:6b:50:f8:ad:e3:
         04:4c:d0:97:f4:39:d3:ef:1b:65:70:40:15:59:62:c7:bb:8b:
         f4:8d:d3:c0:84:24:77:d5:fb:79:3a:83:b7:24:c7:33:bf:37:
         64:94:94:7d:09:5b:4b:d3:33:45:e6:95:70:4f:4d:9e:79:34:
         30:ae:9c:0b:69:73:6d:60:59:4f:54:7d:de:f0:d1:be:06:ac:
         42:60:98:b6:ef:6f:52:af:9e:0d:91:8a:28:ee:08:92:6c:65:
         e0:37:05:1a:c6:aa:a2:db:32:85:e9:2a:83:3c:31:5d:2b:f7:
         0a:13:dc:0d:6a:aa:a8:ff:99:06:85:98:20:b6:0d:82:1a:8c:
         3d:b7:4b:66:29:fa:bd:9f:0d:29:4c:4c:a7:ba:d1:c1:78:86:
         4a:96:d5:fb:80:04:1a:8c:7e:c1:0e:43:7a:9f:cf:d0:b7:48:
         9c:b6:e1:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwJPdRF/OigGj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZDZjZWJkZjAtMDBkNC00MDI2LTg5NDctMjJlOWE3NjU3OGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+A3DW9LC4VXcAHJIP6096tCKp59W6vjVcKu
oU6wpu/1HPZIiYtrh01ExeiYsYIFaWyxy+6HGBrkV6OaAb383qUgChjC/NbQFvGu
qJLTi363wqljMOUMC7Q2WrYoUjLogIY+RhPSrZd3dU2v+CPMGUK8DqrH7LyHCUTz
jxpc1MCApE9OkceZrLp2nlvpRe2Vi9lZ4NUvpeEj7YhepLUk8pv/xd/Y5ETya8x6
ArIRBAGQB6FxCW3i89NQ/N4onWMiQaxHE69Kl1VUpVGTlw8WM+m2RThvDU86pB7n
ea+NnGJeM1pM+8i+sXy3StnR/O5hapiPS610Dp+V2vrge1onmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFO1M/uQCfJDLNFj0IAIWZm7InKGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjk1OWYxMGItOGM2ZS0z
NmRhLTkyYWMtOTU5ODA0NTMyMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSB9gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIN0meZyInRr6tExoN1/PRyymFieudG37ozN0E0jBHGeM7gKSPQ7w06X
FKnHWyvR5hSi86BtoNONKonZZc3pvYK03QxC/80ftBro0O2dOn1TVE9bbQ5rUPit
4wRM0Jf0OdPvG2VwQBVZYse7i/SN08CEJHfV+3k6g7ckxzO/N2SUlH0JW0vTM0Xm
lXBPTZ55NDCunAtpc21gWU9Ufd7w0b4GrEJgmLbvb1Kvng2RiijuCJJsZeA3BRrG
qqLbMoXpKoM8MV0r9woT3A1qqqj/mQaFmCC2DYIajD23S2Yp+r2fDSlMTKe60cF4
hkqW1fuABBqMfsEOQ3qfz9C3SJy24Y4=
-----END CERTIFICATE-----
Generated at Fri Oct 9 08:13:26 2026 by rpki-client