Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f7e4363-eec8-3645-9d94-538f063eb257.roa
File:                     9f7e4363-eec8-3645-9d94-538f063eb257.roa (raw, json)
Hash identifier:          dpmBQRAvmU39ymSfeHfd19Y2u95gywMF3e+eU9enyN8=
Subject key identifier:   C2:47:D1:4C:B7:21:3C:F2:7E:E2:BB:B3:C0:85:30:EF:CB:18:7F:2B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4AD55324989276C8B3D41BF0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f7e4363-eec8-3645-9d94-538f063eb257.roa
Signing time:             Fri 25 Sep 2026 12:55:05 +0000
ROA not before:           Fri 25 Sep 2026 12:55:05 +0000
ROA not after:            Thu 24 Dec 2026 13:55:05 +0000
asID:                     6079
IP address blocks:        72.244.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d5:53:24:98:92:76:c8:b3:d4:1b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 12:55:05 2026 GMT
            Not After : Dec 24 13:55:05 2026 GMT
        Subject: CN=ecbfeda9-59c8-4533-b8df-9a4263f5b853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:db:01:fc:9e:c0:98:0c:7c:44:d1:75:a0:
                    bc:7e:72:d5:1d:6a:02:04:40:33:fb:2a:b3:dd:18:
                    8e:5e:b2:93:da:34:12:f4:fa:8e:84:c8:16:48:30:
                    13:de:e1:24:05:31:0c:99:aa:eb:68:10:13:45:05:
                    bd:11:4f:75:e9:1e:89:e3:77:41:25:4a:37:63:cc:
                    7b:a9:60:0c:74:f7:82:7d:a7:af:b3:fb:a5:f7:54:
                    ed:82:a4:2b:e8:8a:fb:1f:df:ad:bb:64:80:a4:ee:
                    82:ed:5a:af:fe:d7:fc:ad:80:d3:c3:20:17:36:f4:
                    95:9f:b7:d2:e0:00:26:b1:26:e0:14:53:a6:ef:dd:
                    a7:5f:04:ac:bc:0a:c7:96:13:0f:53:45:a3:0e:99:
                    7c:6a:d5:f0:2a:2b:63:78:2b:11:2a:0f:f9:a4:c2:
                    5c:d3:10:e3:d1:9b:f9:84:bb:2a:a5:81:d2:39:5e:
                    fa:e4:0c:f5:f3:6c:9e:31:7c:7a:39:fc:e3:5c:4c:
                    1a:1c:77:ae:b7:12:3c:83:5f:13:6c:a0:f8:98:51:
                    b0:30:0a:af:e8:75:49:d6:04:08:55:e4:04:67:87:
                    31:59:b8:b2:5c:a8:ad:59:8c:a3:ba:7c:b2:a3:5f:
                    a7:e0:dc:62:0f:d5:3e:77:f4:0a:65:20:ab:31:dd:
                    e0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:47:D1:4C:B7:21:3C:F2:7E:E2:BB:B3:C0:85:30:EF:CB:18:7F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f7e4363-eec8-3645-9d94-538f063eb257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:c9:75:20:f1:45:fd:81:d5:aa:cc:40:9f:92:f7:03:cb:
         20:bc:af:9c:3d:ad:8a:bd:82:dc:9c:d6:54:89:fa:90:7b:b0:
         ed:17:6a:d3:d5:ad:ae:ab:5e:3e:48:c4:5c:d6:09:f7:ea:5a:
         1f:d1:d5:bb:e0:78:14:f1:2e:4f:35:31:84:83:fa:22:24:ff:
         1c:c6:a1:36:9b:68:f9:1c:1d:d5:a3:c5:26:68:77:1a:46:e5:
         42:9c:72:99:5e:18:0f:55:6f:46:f0:b1:53:96:44:3f:aa:63:
         d0:57:96:6e:18:6d:6b:40:30:4b:d9:3f:0c:b4:57:7f:da:87:
         80:14:91:cf:ed:2b:3b:83:88:ca:7b:21:0d:98:14:6f:87:d0:
         22:e8:3d:e1:86:13:05:88:57:a0:61:ef:cf:76:05:56:a8:94:
         6a:8c:61:fa:48:c9:c7:10:3b:b7:37:08:7a:3e:41:8d:bc:25:
         66:3d:c9:6e:e4:c7:b1:df:b1:9b:2f:be:b5:7b:88:b0:b5:c6:
         14:61:9e:ea:30:57:4a:e5:a8:6e:a4:c7:47:a1:ca:d8:c5:60:
         51:cf:e3:27:e4:e6:2e:a6:87:a3:0c:4d:a4:b9:2f:bc:c2:c5:
         fe:15:6b:46:c0:1f:30:f8:60:4a:48:91:22:c6:5d:5a:7c:1d:
         d8:18:f5:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1VMkmJJ2yLPUG/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyNTEyNTUwNVoXDTI2MTIyNDEzNTUwNVowLzEtMCsGA1UEAxMk
ZWNiZmVkYTktNTljOC00NTMzLWI4ZGYtOWE0MjYzZjViODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRfbAfyewJgMfETRdaC8fnLVHWoCBEAz+yqz
3RiOXrKT2jQS9PqOhMgWSDAT3uEkBTEMmarraBATRQW9EU916R6J43dBJUo3Y8x7
qWAMdPeCfaevs/ul91TtgqQr6Ir7H9+tu2SApO6C7Vqv/tf8rYDTwyAXNvSVn7fS
4AAmsSbgFFOm792nXwSsvArHlhMPU0WjDpl8atXwKitjeCsRKg/5pMJc0xDj0Zv5
hLsqpYHSOV765Az182yeMXx6OfzjXEwaHHeutxI8g18TbKD4mFGwMAqv6HVJ1gQI
VeQEZ4cxWbiyXKitWYyjunyyo1+n4NxiD9U+d/QKZSCrMd3gEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJH0Uy3ITzyfuK7s8CFMO/LGH8rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWY3ZTQzNjMtZWVjOC0z
NjQ1LTlkOTQtNTM4ZjA2M2ViMjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPR3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXwyXUg8UX9gdWqzECfkvcDyyC8r5w9rYq9gtyc1lSJ+pB7sO0XatPV
ra6rXj5IxFzWCffqWh/R1bvgeBTxLk81MYSD+iIk/xzGoTabaPkcHdWjxSZodxpG
5UKccpleGA9Vb0bwsVOWRD+qY9BXlm4YbWtAMEvZPwy0V3/ah4AUkc/tKzuDiMp7
IQ2YFG+H0CLoPeGGEwWIV6Bh7892BVaolGqMYfpIyccQO7c3CHo+QY28JWY9yW7k
x7HfsZsvvrV7iLC1xhRhnuowV0rlqG6kx0ehytjFYFHP4yfk5i6mh6MMTaS5L7zC
xf4Va0bAHzD4YEpIkSLGXVp8HdgY9T4=
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:03:55 2026 by rpki-client