Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d2a47544-ffb0-399b-a27a-824a67f28ae2.roa
File:                     d2a47544-ffb0-399b-a27a-824a67f28ae2.roa (raw, json)
Hash identifier:          GThoFNVInVQSLYmhuDj8qXUuYsDuriWlDnyxbnkS/mc=
Subject key identifier:   04:74:7D:C0:70:E5:F9:E7:27:49:13:2B:AF:D3:57:0B:47:FA:C8:1E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584DCC605DD06EBFB7ED3456C700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d2a47544-ffb0-399b-a27a-824a67f28ae2.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     26778
IP address blocks:        75.112.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:5d:d0:6e:bf:b7:ed:34:56:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=6af4b205-e694-4fb7-bf4b-3170b1aa9017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:29:5f:5b:fc:9d:ee:53:e4:1f:e1:8d:c7:
                    c3:7b:79:7f:0b:ec:a6:83:4d:ff:b0:33:5e:67:f8:
                    1a:a3:12:04:da:f9:f1:ca:7c:fd:15:f1:0c:87:11:
                    89:04:8e:0e:2b:a2:5c:03:ca:9c:4d:57:7e:e0:5b:
                    0e:b5:b3:9d:a7:e0:b2:13:e8:86:1c:75:a8:be:ee:
                    76:5e:68:59:39:a3:65:ac:48:ec:e3:cd:12:ac:eb:
                    8c:57:4f:7f:05:11:26:4b:52:97:e8:2d:a0:5a:d2:
                    e5:58:05:b4:41:75:fe:a0:d0:17:99:c1:fe:69:f0:
                    91:c5:fc:e4:86:a7:57:37:ee:97:1e:20:1b:e4:33:
                    d0:66:fe:09:73:bf:5b:c5:7e:75:7e:a1:ec:d1:df:
                    af:65:ec:86:26:8a:0c:15:8d:82:94:49:9a:a4:6c:
                    75:8d:42:ad:5a:0f:a5:33:7c:5c:a2:77:e6:76:45:
                    0f:91:f4:1e:00:e1:58:8d:28:f8:df:54:47:dd:99:
                    52:92:56:66:b8:0e:55:07:c4:c3:b9:ce:7d:0e:c2:
                    4f:42:4b:3a:66:63:e2:b2:e1:96:55:19:2e:89:f2:
                    a2:af:a0:a6:74:5b:71:19:4f:1c:f4:ae:17:2b:1a:
                    05:48:c8:2e:da:5c:cf:9d:c2:dc:b7:44:30:4d:93:
                    55:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:74:7D:C0:70:E5:F9:E7:27:49:13:2B:AF:D3:57:0B:47:FA:C8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d2a47544-ffb0-399b-a27a-824a67f28ae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.112.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:93:6a:81:89:f6:dc:ad:74:ed:d7:e2:b6:15:2c:ac:40:d7:
         40:18:46:df:6f:12:ea:9b:8d:e4:ce:82:ff:76:d4:72:ec:b7:
         55:7d:75:de:4e:e1:ba:70:35:ac:18:fc:67:88:76:07:f5:8c:
         28:77:c8:a8:1c:31:48:40:cb:17:bf:3d:01:d5:48:59:4c:b2:
         34:17:4d:06:08:7d:16:c9:f7:d5:9d:fd:01:99:bb:05:d2:c2:
         70:c2:f9:c9:46:87:8d:fc:6e:48:d1:62:42:fa:94:9f:93:41:
         58:4f:da:48:b7:3a:29:0c:97:d7:5b:5d:40:19:31:28:73:b9:
         db:b8:83:41:69:c3:dc:43:b8:66:db:68:56:95:00:b7:d8:ac:
         cc:78:13:10:b0:17:17:2d:ca:cc:22:af:c7:01:c1:29:16:69:
         80:ef:c1:e4:0a:05:85:14:f4:f4:a3:4c:f2:45:d0:57:ed:d7:
         fd:6c:4f:c5:f3:26:f4:ad:d8:b2:2a:76:5f:60:9e:9c:1e:ed:
         3f:a8:72:b2:4d:b4:06:22:34:68:6c:d4:12:82:26:3a:25:01:
         ee:38:eb:fb:90:da:7b:4f:cd:95:33:c6:3d:00:51:c1:37:d5:
         6f:51:72:3a:6c:4f:65:1e:c1:d0:d3:68:3e:f4:9a:db:8d:91:
         97:76:9f:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYF3Qbr+37TRWxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk
NmFmNGIyMDUtZTY5NC00ZmI3LWJmNGItMzE3MGIxYWE5MDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOMpX1v8ne5T5B/hjcfDe3l/C+ymg03/sDNe
Z/gaoxIE2vnxynz9FfEMhxGJBI4OK6JcA8qcTVd+4FsOtbOdp+CyE+iGHHWovu52
XmhZOaNlrEjs480SrOuMV09/BREmS1KX6C2gWtLlWAW0QXX+oNAXmcH+afCRxfzk
hqdXN+6XHiAb5DPQZv4Jc79bxX51fqHs0d+vZeyGJooMFY2ClEmapGx1jUKtWg+l
M3xconfmdkUPkfQeAOFYjSj431RH3ZlSklZmuA5VB8TDuc59DsJPQks6ZmPisuGW
VRkuifKir6CmdFtxGU8c9K4XKxoFSMgu2lzPncLct0QwTZNVyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAR0fcBw5fnnJ0kTK6/TVwtH+sgeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDJhNDc1NDQtZmZiMC0z
OTliLWEyN2EtODI0YTY3ZjI4YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3BEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSTaoGJ9tytdO3X4rYVLKxA10AYRt9vEuqbjeTOgv921HLst1V9dd5O
4bpwNawY/GeIdgf1jCh3yKgcMUhAyxe/PQHVSFlMsjQXTQYIfRbJ99Wd/QGZuwXS
wnDC+clGh438bkjRYkL6lJ+TQVhP2ki3OikMl9dbXUAZMShzudu4g0Fpw9xDuGbb
aFaVALfYrMx4ExCwFxctyswir8cBwSkWaYDvweQKBYUU9PSjTPJF0Fft1/1sT8Xz
JvSt2LIqdl9gnpwe7T+ocrJNtAYiNGhs1BKCJjolAe446/uQ2ntPzZUzxj0AUcE3
1W9RcjpsT2UewdDTaD70mtuNkZd2n/8=
-----END CERTIFICATE-----
Generated at Wed May 13 09:07:53 2026 by rpki-client