Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa
File:                     9ded18be-1aa1-3992-8d45-fc366627f4ae.roa (raw, json)
Hash identifier:          xlT/VgwN3Mw1yQs4B3HGgktCXgaWXF3T136mp1Sa+c0=
Subject key identifier:   26:78:62:54:A6:25:BF:39:A2:47:07:09:E5:73:A9:9A:67:C6:7B:E0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D0EA7B80A6821A5F048A71B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     9304
IP address blocks:        72.244.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:b8:0a:68:21:a5:f0:48:a7:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=15dababd-fa23-4704-bbf7-23e4827b0ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:d5:ce:df:cf:4b:38:a4:39:54:dc:c4:13:
                    c2:25:4d:bf:13:ac:11:04:0e:ad:93:e8:69:73:1c:
                    3d:49:f7:33:e1:e6:da:b4:1e:3e:03:46:49:67:54:
                    32:13:f3:fd:e4:af:f9:6a:b7:60:9c:05:b9:48:df:
                    5d:df:08:60:d2:bf:c1:78:f7:d5:01:35:86:8b:4c:
                    36:a1:2d:b6:8f:31:65:cf:33:5c:91:5b:90:1a:3a:
                    92:8b:ca:23:00:35:7d:50:f2:70:d7:d8:78:3f:f8:
                    b6:b0:01:71:56:21:7b:61:cc:81:18:d0:96:c1:ef:
                    57:81:3d:32:bf:b1:07:41:49:1a:1b:e7:3d:91:05:
                    6a:36:b0:31:85:c2:e8:d1:3b:d9:41:fd:18:b2:60:
                    d9:47:3a:d2:2e:35:59:e5:f5:b9:7b:9a:f7:df:06:
                    71:7b:a2:2c:6e:6b:74:78:2f:8d:90:89:4a:24:c6:
                    14:28:78:ab:93:75:3c:52:53:66:2e:63:fd:f6:02:
                    80:92:8f:a1:03:75:e8:90:d8:aa:bf:07:ab:22:1b:
                    c6:99:e8:0a:4d:a4:3d:64:5b:3d:be:c6:1f:6b:35:
                    71:e5:c8:70:85:76:9e:d3:f7:a1:e1:bf:8b:c3:e2:
                    bf:47:a3:bd:f5:85:7e:b4:4e:ec:9f:2e:ca:13:5b:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:78:62:54:A6:25:BF:39:A2:47:07:09:E5:73:A9:9A:67:C6:7B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:af:5e:32:bf:61:b5:fc:71:5c:8c:e3:b3:9b:e2:8c:1b:e7:
         37:e2:ff:1e:bc:a4:66:8a:3e:09:e0:79:24:c9:fb:93:65:59:
         c6:b9:e3:80:c2:23:b0:b0:2a:56:b5:7c:6e:63:8e:fc:ea:8a:
         2a:28:14:7d:b3:19:90:a3:5c:1c:01:49:68:8a:8b:3d:12:36:
         0b:dd:3e:5a:f9:ec:ce:1d:60:a1:4d:df:3f:f0:f5:35:f0:f3:
         e3:0e:52:4f:b5:78:49:81:50:72:c1:e1:43:3f:5e:ae:ed:84:
         3a:39:40:2a:c7:07:76:43:b3:9a:bd:52:08:3e:a3:b4:32:9b:
         33:44:6e:c1:0b:d1:b8:81:90:7b:5d:60:5b:19:6b:92:35:91:
         ba:e7:0b:04:97:e3:c8:d5:cf:00:90:23:39:46:7c:a5:32:18:
         ed:c4:ff:2e:d7:69:e7:3b:91:b3:34:c8:89:48:84:59:f9:5b:
         ad:25:88:3b:49:58:5b:50:97:1c:bd:51:c2:03:87:11:90:2a:
         a1:89:2a:23:88:77:dd:af:3f:d9:61:8f:ee:c6:aa:92:10:a5:
         5f:14:73:f9:f1:e3:8b:35:71:34:6d:89:ad:43:2b:76:48:55:
         d8:35:d7:38:22:ea:b4:e2:6b:a1:8c:d8:57:39:14:e2:e6:d6:
         83:d5:82:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op7gKaCGl8EinGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk
MTVkYWJhYmQtZmEyMy00NzA0LWJiZjctMjNlNDgyN2IwZWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisDVzt/PSzikOVTcxBPCJU2/E6wRBA6tk+hp
cxw9Sfcz4ebatB4+A0ZJZ1QyE/P95K/5ardgnAW5SN9d3whg0r/BePfVATWGi0w2
oS22jzFlzzNckVuQGjqSi8ojADV9UPJw19h4P/i2sAFxViF7YcyBGNCWwe9XgT0y
v7EHQUkaG+c9kQVqNrAxhcLo0TvZQf0YsmDZRzrSLjVZ5fW5e5r33wZxe6Isbmt0
eC+NkIlKJMYUKHirk3U8UlNmLmP99gKAko+hA3XokNiqvwerIhvGmegKTaQ9ZFs9
vsYfazVx5chwhXae0/eh4b+Lw+K/R6O99YV+tE7sny7KE1s+iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZ4YlSmJb85okcHCeVzqZpnxnvgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWRlZDE4YmUtMWFhMS0z
OTkyLThkNDUtZmMzNjY2MjdmNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEavXjK/YbX8cVyM47Ob4owb5zfi/x68pGaKPgngeSTJ+5NlWca544DC
I7CwKla1fG5jjvzqiiooFH2zGZCjXBwBSWiKiz0SNgvdPlr57M4dYKFN3z/w9TXw
8+MOUk+1eEmBUHLB4UM/Xq7thDo5QCrHB3ZDs5q9Ugg+o7QymzNEbsEL0biBkHtd
YFsZa5I1kbrnCwSX48jVzwCQIzlGfKUyGO3E/y7Xaec7kbM0yIlIhFn5W60liDtJ
WFtQlxy9UcIDhxGQKqGJKiOId92vP9lhj+7GqpIQpV8Uc/nx44s1cTRtia1DK3ZI
Vdg11zgi6rTia6GM2Fc5FOLm1oPVgis=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:24 2026 by rpki-client