Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/68b50fb3-4621-32d3-becb-1b9b6e5389be.roa
File:                     68b50fb3-4621-32d3-becb-1b9b6e5389be.roa (raw, json)
Hash identifier:          ZxVmzn+aph0x1zk4p/geHTx0lM+p9uMg9/Z7ULMkCLE=
Subject key identifier:   B3:23:91:4E:16:A5:4B:AE:BD:8E:98:4B:3E:3D:AD:19:96:04:9D:E5
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F4328584DBA3AF07896347940ED7043C0
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/68b50fb3-4621-32d3-becb-1b9b6e5389be.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        72.162.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f0:78:96:34:79:40:ed:70:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=a1b759cf-61d0-46c8-bda3-d653f67ba582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:5e:bd:e6:05:e3:bc:97:2a:4a:4e:a9:f3:
                    ad:be:82:79:66:3f:01:9f:37:b3:5d:bc:15:2a:11:
                    95:70:e7:f1:c0:ef:2d:44:d5:06:cf:33:fb:7d:0a:
                    c7:ed:60:5c:0c:a7:3d:eb:cd:86:fc:9f:b7:13:04:
                    e8:04:67:81:0a:59:d3:01:55:4b:67:70:f1:b5:cb:
                    ab:e9:89:43:47:64:08:53:5b:72:2d:36:e4:6c:08:
                    c4:82:04:09:a8:1c:28:e6:f3:53:7b:1d:9a:53:fe:
                    10:b5:21:1f:2e:ee:ad:b5:c9:eb:22:a9:16:8e:0d:
                    1a:3b:dc:67:49:b0:28:88:67:9c:f9:af:ea:8b:09:
                    a2:e8:f0:48:c6:4c:af:fc:23:ef:61:75:2f:23:da:
                    c5:2a:63:ea:2f:b5:fa:10:c6:70:f6:71:44:b5:be:
                    16:8f:14:8d:18:74:cc:42:c8:16:a7:86:fe:77:bc:
                    fe:fa:b5:32:0e:47:7c:0e:c8:f3:aa:a8:ce:1d:17:
                    02:8a:2e:eb:4a:1d:bf:4d:fe:6e:1f:cf:52:fd:61:
                    99:3f:7d:f6:46:56:3d:03:87:79:cc:75:51:85:02:
                    1f:42:fe:7d:78:ba:41:2d:6d:c3:0d:eb:a4:01:9f:
                    7c:f0:3f:ed:5b:40:97:14:31:89:d2:a4:01:d5:21:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:23:91:4E:16:A5:4B:AE:BD:8E:98:4B:3E:3D:AD:19:96:04:9D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/68b50fb3-4621-32d3-becb-1b9b6e5389be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:dd:2f:64:02:cc:72:62:e2:77:e5:50:31:99:b1:96:ee:37:
         93:ae:04:3b:6e:f3:ec:79:4b:04:fb:dd:2f:c5:7b:c3:f1:22:
         87:b5:65:9e:93:e1:56:db:75:34:49:61:10:02:b3:d6:ae:56:
         18:ba:bd:75:26:f6:f2:2a:2d:1b:f9:0c:82:13:db:ba:b5:6f:
         be:e5:30:7c:36:a7:bd:52:4c:7d:e6:d6:e9:34:01:ca:2f:ba:
         c7:ea:77:b0:87:ef:d7:88:d6:1a:0e:54:81:d0:94:d4:89:39:
         d6:15:95:25:80:c7:81:dd:bd:bd:26:2f:6b:08:78:6c:6e:5a:
         74:03:9c:8e:05:6c:07:eb:bf:dd:26:6a:63:72:f3:29:86:20:
         34:c0:ff:10:a8:b1:b5:56:a0:ae:d7:5d:23:bd:e3:a2:f6:58:
         bb:b4:e0:e6:97:b7:db:d9:d7:4c:83:47:17:78:17:35:c0:83:
         34:02:fe:ac:12:39:71:4c:5f:2f:e1:80:1a:91:f9:b5:e6:e7:
         6c:b3:74:98:b8:c9:df:b7:75:32:9f:73:b2:c0:3e:7b:83:54:
         8f:98:76:ff:62:a5:55:ca:52:b3:0f:55:0e:ec:58:b3:9f:6e:
         4e:7c:52:56:89:70:3a:37:39:c3:04:b4:3e:b8:97:06:9a:2c:
         c4:f6:7c:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OvB4ljR5QO1wQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQyNDdhNzAtYzkzZC00MDY1LTk1NDgtNzYyZGE1YTM4
NmJhMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
YTFiNzU5Y2YtNjFkMC00NmM4LWJkYTMtZDY1M2Y2N2JhNTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCheveYF47yXKkpOqfOtvoJ5Zj8BnzezXbwV
KhGVcOfxwO8tRNUGzzP7fQrH7WBcDKc9682G/J+3EwToBGeBClnTAVVLZ3Dxtcur
6YlDR2QIU1tyLTbkbAjEggQJqBwo5vNTex2aU/4QtSEfLu6ttcnrIqkWjg0aO9xn
SbAoiGec+a/qiwmi6PBIxkyv/CPvYXUvI9rFKmPqL7X6EMZw9nFEtb4WjxSNGHTM
QsgWp4b+d7z++rUyDkd8DsjzqqjOHRcCii7rSh2/Tf5uH89S/WGZP332RlY9A4d5
zHVRhQIfQv59eLpBLW3DDeukAZ988D/tW0CXFDGJ0qQB1SGmZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMjkU4WpUuuvY6YSz49rRmWBJ3lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0
N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJkYTVhMzg2YmEvNjhiNTBmYjMtNDYyMS0z
MmQzLWJlY2ItMWI5YjZlNTM4OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzQyNDdhNzAtYzkzZC00MDY1LTk1
NDgtNzYyZGE1YTM4NmJhLzM0MjQ3YTcwLWM5M2QtNDA2NS05NTQ4LTc2MmRhNWEz
ODZiYS5jcmwwHwYDVR0jBBgwFoAUpsEb1rclWtCkwZuf94Ui0ZNhSYIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJk
YTVhMzg2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASKIGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHLdL2QCzHJi4nflUDGZsZbuN5OuBDtu8+x5SwT73S/Fe8PxIoe1ZZ6T
4VbbdTRJYRACs9auVhi6vXUm9vIqLRv5DIIT27q1b77lMHw2p71STH3m1uk0Acov
usfqd7CH79eI1hoOVIHQlNSJOdYVlSWAx4Hdvb0mL2sIeGxuWnQDnI4FbAfrv90m
amNy8ymGIDTA/xCosbVWoK7XXSO946L2WLu04OaXt9vZ10yDRxd4FzXAgzQC/qwS
OXFMXy/hgBqR+bXm52yzdJi4yd+3dTKfc7LAPnuDVI+Ydv9ipVXKUrMPVQ7sWLOf
bk58UlaJcDo3OcMEtD64lwaaLMT2fI0=
-----END CERTIFICATE-----
Generated at Wed May 13 15:01:42 2026 by rpki-client