Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/820014e1-ebcc-3b3d-a548-ab8c08ed765d.roa
File:                     820014e1-ebcc-3b3d-a548-ab8c08ed765d.roa (raw, json)
Hash identifier:          hejCv9KjOMvukVxy9hqR1YtrnhtkmSKH6HDlVLfggiM=
Subject key identifier:   BB:AC:83:5E:00:CD:19:9D:1E:EE:31:27:E8:6F:FF:15:3F:EC:25:CF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFBB27A11002A246FE3180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/820014e1-ebcc-3b3d-a548-ab8c08ed765d.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        72.31.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:bb:27:a1:10:02:a2:46:fe:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=b5521031-e73b-45c2-8ef4-148c3825c77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:de:41:51:f3:31:06:e8:62:72:ca:c2:21:6c:
                    92:d2:72:1b:b9:66:4d:63:9f:a9:9f:c4:8e:da:fa:
                    ef:0f:01:6d:72:14:a2:6c:54:b0:20:55:b3:fe:69:
                    4a:0a:5e:c6:da:1b:23:6a:19:09:d3:af:9d:a0:40:
                    f4:4b:d6:bb:ce:4b:70:7f:68:a9:01:4a:84:9f:d1:
                    26:6b:78:a3:8f:74:0b:c2:b5:9e:72:a4:13:b9:db:
                    b5:9e:01:31:a6:23:2d:fb:32:7c:c5:c5:ba:ea:ff:
                    48:e4:5f:43:f7:08:1f:34:e9:15:e3:84:ea:21:b7:
                    3f:65:de:2e:2c:f6:e4:ce:6e:a8:c5:c1:2d:ef:60:
                    3c:20:87:74:e2:7e:ef:3b:73:66:84:15:7e:ef:17:
                    07:4a:9f:32:5b:65:81:48:a4:5f:f6:0d:05:ad:b8:
                    b5:57:24:89:53:88:a9:0c:1e:63:b1:ec:8f:ed:91:
                    ae:cc:8d:b5:0a:81:53:93:ed:8e:be:17:b7:54:a0:
                    f0:2f:aa:fa:28:a6:53:a7:ae:d4:94:0b:ce:cd:ac:
                    42:79:45:ee:26:34:13:79:a1:cf:8d:f0:ab:56:34:
                    08:1c:17:b2:27:63:02:8b:bb:9f:0a:45:c9:6c:3b:
                    4d:40:ad:20:24:7b:dd:4c:f0:f7:3b:fb:c3:14:5c:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AC:83:5E:00:CD:19:9D:1E:EE:31:27:E8:6F:FF:15:3F:EC:25:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/820014e1-ebcc-3b3d-a548-ab8c08ed765d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8c:40:4e:95:23:9e:dc:ac:de:f8:d4:fe:e4:c4:c4:54:79:
         d4:6f:34:2f:94:c0:a6:26:48:c9:2e:25:72:25:c7:e5:b3:be:
         d1:4b:f2:0b:b4:26:7b:fe:5d:3d:d0:84:7d:d5:c0:fa:42:9b:
         bd:0c:38:51:50:77:03:4e:b9:f4:c1:93:ac:3d:c1:78:ef:65:
         4d:bd:44:af:0a:f1:19:f3:ea:f0:42:c3:d7:13:9f:fc:92:52:
         08:6b:6c:c5:5d:59:69:a4:1e:ce:1e:eb:ca:a6:80:22:06:19:
         f3:0f:0e:46:e4:47:c5:d7:57:e1:42:01:18:a9:05:55:54:c9:
         b7:ec:4f:58:7b:6b:6b:d9:60:6e:18:17:78:56:e8:26:5f:78:
         50:0a:8d:70:99:ac:35:ca:54:fd:58:6f:69:ee:6a:36:11:af:
         cc:a3:38:ce:99:82:a8:bb:59:8b:8b:4c:60:80:47:bb:db:7f:
         fa:85:53:c5:d4:9f:1a:00:94:32:ed:92:63:18:44:c1:c0:01:
         42:f8:dc:9b:4a:5f:9f:b0:9a:7f:47:f3:ac:5c:6d:be:f5:b6:
         fe:bc:bf:38:4b:cf:53:39:89:4f:a2:08:88:44:78:01:9e:6a:
         60:15:09:b2:72:af:f6:98:cb:a5:2b:8a:61:63:ed:51:6c:0d:
         07:28:1c:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7snoRACokb+MYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
YjU1MjEwMzEtZTczYi00NWMyLThlZjQtMTQ4YzM4MjVjNzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk95BUfMxBuhicsrCIWyS0nIbuWZNY5+pn8SO
2vrvDwFtchSibFSwIFWz/mlKCl7G2hsjahkJ06+doED0S9a7zktwf2ipAUqEn9Em
a3ijj3QLwrWecqQTudu1ngExpiMt+zJ8xcW66v9I5F9D9wgfNOkV44TqIbc/Zd4u
LPbkzm6oxcEt72A8IId04n7vO3NmhBV+7xcHSp8yW2WBSKRf9g0Frbi1VySJU4ip
DB5jseyP7ZGuzI21CoFTk+2Ovhe3VKDwL6r6KKZTp67UlAvOzaxCeUXuJjQTeaHP
jfCrVjQIHBeyJ2MCi7ufCkXJbDtNQK0gJHvdTPD3O/vDFFzyhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLusg14AzRmdHu4xJ+hv/xU/7CXPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODIwMDE0ZTEtZWJjYy0z
YjNkLWE1NDgtYWI4YzA4ZWQ3NjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6MQE6VI57crN741P7kxMRUedRvNC+UwKYmSMkuJXIlx+WzvtFL8gu0
Jnv+XT3QhH3VwPpCm70MOFFQdwNOufTBk6w9wXjvZU29RK8K8Rnz6vBCw9cTn/yS
UghrbMVdWWmkHs4e68qmgCIGGfMPDkbkR8XXV+FCARipBVVUybfsT1h7a2vZYG4Y
F3hW6CZfeFAKjXCZrDXKVP1Yb2nuajYRr8yjOM6Zgqi7WYuLTGCAR7vbf/qFU8XU
nxoAlDLtkmMYRMHAAUL43JtKX5+wmn9H86xcbb71tv68vzhLz1M5iU+iCIhEeAGe
amAVCbJyr/aYy6UrimFj7VFsDQcoHE0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:42 2026 by rpki-client