Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa
File:                     1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa (raw, json)
Hash identifier:          Bc34aJUEjE7FreXFjmSkHtAUQFVfJC9OpjAEVBhwDWY=
Subject key identifier:   CE:9E:F4:C7:AA:D2:ED:73:DD:13:0C:70:6E:DC:81:94:5C:22:F3:7F
Certificate issuer:       /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f
Certificate serial:       010D0C9F4328584E7204D826EEE8920711D23FE0
Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     398781
IP address blocks:        165.140.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d8:26:ee:e8:92:07:11:d2:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=0ca9991f-ca36-4ba2-8abd-fe0ee5a32312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a7:9b:75:be:ca:07:41:db:83:cd:d4:ae:97:
                    1b:42:d6:ad:ea:ec:ae:dd:e9:d5:da:28:68:d9:0c:
                    cc:a5:5f:3b:8c:e3:e1:fb:f0:0a:a8:1f:fb:1d:63:
                    71:48:10:be:cf:63:18:df:a2:90:d3:32:67:7f:e4:
                    47:dd:c2:25:eb:0b:63:70:30:d0:15:ec:17:d8:1a:
                    21:88:19:1a:cb:52:a5:ff:68:35:33:8f:c4:95:9b:
                    83:ec:bd:b1:e1:ae:1c:8a:d0:3c:2b:e9:2f:1f:de:
                    22:ed:eb:80:c1:d1:73:64:b7:da:3e:2c:51:0c:eb:
                    4c:d2:59:34:e2:e5:ab:31:09:54:30:2a:eb:63:e1:
                    7d:4c:28:30:dd:ba:8c:82:c6:2f:e6:30:de:12:77:
                    38:ef:e6:62:a0:16:d0:c2:1d:00:27:f6:25:f7:39:
                    71:0b:0a:6f:9b:84:fd:b5:e0:61:02:74:3c:5c:f1:
                    88:74:55:29:f5:d5:61:27:7f:96:16:90:fa:b3:72:
                    0d:b0:cf:cb:c8:36:1e:5a:a5:35:bf:33:c6:d4:ba:
                    0d:d1:67:eb:85:fd:be:0b:e4:a0:36:b3:e0:3f:a1:
                    59:c1:17:49:7b:f1:1c:db:e2:c4:3c:d9:bf:3a:e2:
                    22:5f:77:43:af:fd:1a:d5:be:ba:9e:c8:68:17:3b:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9E:F4:C7:AA:D2:ED:73:DD:13:0C:70:6E:DC:81:94:5C:22:F3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:c2:ab:e9:14:23:d4:f1:fd:81:4e:ce:83:9c:70:2a:b3:41:
         09:d6:c4:71:e2:ab:9c:27:96:92:7d:05:e3:29:7a:99:d2:51:
         77:e4:b0:bb:26:16:93:e3:79:0f:5e:d9:06:38:58:8d:65:f6:
         44:50:39:72:69:86:7a:48:89:23:75:61:62:e2:2d:68:98:eb:
         c3:34:69:69:48:f7:8c:0b:23:5d:0b:c6:da:eb:73:2d:b7:90:
         18:cc:16:4c:72:76:8a:31:d1:2e:f7:45:b8:bc:a7:4c:f3:98:
         2a:0a:05:8c:29:0a:95:d8:e9:b5:16:f7:b5:f4:4b:05:96:2e:
         8b:95:df:f1:74:23:89:7d:13:95:6c:11:ab:7f:19:15:11:69:
         a2:c0:b0:a4:9d:3e:af:ae:e6:4a:30:71:b2:e5:c6:b0:51:e2:
         2d:14:a6:43:62:f7:96:d8:e3:af:2b:b5:50:6a:6f:06:3c:3d:
         db:3f:cf:ac:90:88:8c:b1:a2:08:38:42:49:a1:28:e3:f1:ee:
         6f:f0:76:af:a3:80:e4:24:1e:ce:5a:a6:80:99:99:4b:a3:e1:
         f2:c0:30:8e:6f:70:7b:3f:63:c1:57:82:7f:cc:41:65:f7:33:
         24:f3:5f:4e:10:ea:8f:4c:1d:c7:b8:ff:68:7b:9f:e9:22:4a:
         cf:6c:78:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNgm7uiSBxHSP+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl
NjFmMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
MGNhOTk5MWYtY2EzNi00YmEyLThhYmQtZmUwZWU1YTMyMzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aebdb7KB0Hbg83UrpcbQtat6uyu3enV2iho
2QzMpV87jOPh+/AKqB/7HWNxSBC+z2MY36KQ0zJnf+RH3cIl6wtjcDDQFewX2Boh
iBkay1Kl/2g1M4/ElZuD7L2x4a4citA8K+kvH94i7euAwdFzZLfaPixRDOtM0lk0
4uWrMQlUMCrrY+F9TCgw3bqMgsYv5jDeEnc47+ZioBbQwh0AJ/Yl9zlxCwpvm4T9
teBhAnQ8XPGIdFUp9dVhJ3+WFpD6s3INsM/LyDYeWqU1vzPG1LoN0Wfrhf2+C+Sg
NrPgP6FZwRdJe/Ec2+LEPNm/OuIiX3dDr/0a1b66nshoFzuk0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM6e9Meq0u1z3RMMcG7cgZRcIvN/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4
YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvMWFjYjNlMTctYjJhMi0z
MmRlLWE1YjEtZmJkN2JmYTU2ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1
OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi
ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk
ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMXCq+kUI9Tx/YFOzoOccCqzQQnWxHHiq5wnlpJ9BeMpepnSUXfksLsm
FpPjeQ9e2QY4WI1l9kRQOXJphnpIiSN1YWLiLWiY68M0aWlI94wLI10Lxtrrcy23
kBjMFkxydoox0S73Rbi8p0zzmCoKBYwpCpXY6bUW97X0SwWWLouV3/F0I4l9E5Vs
Eat/GRURaaLAsKSdPq+u5kowcbLlxrBR4i0UpkNi95bY468rtVBqbwY8Pds/z6yQ
iIyxogg4QkmhKOPx7m/wdq+jgOQkHs5apoCZmUuj4fLAMI5vcHs/Y8FXgn/MQWX3
MyTzX04Q6o9MHce4/2h7n+kiSs9seAM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:52 2026 by rpki-client