Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f6a9e206-4f53-37a1-af90-2d5d3d49ec71.roa
File:                     f6a9e206-4f53-37a1-af90-2d5d3d49ec71.roa (raw, json)
Hash identifier:          luhpyQ1gYaP5yTcKwKRE7uWDKjAEDjjiIVzunwc7GSM=
Subject key identifier:   B2:D6:DE:D3:89:CC:1A:41:7F:2B:C6:63:75:F3:5F:5C:52:57:D4:89
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584D2A74FD022EBE18C368D94A00
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f6a9e206-4f53-37a1-af90-2d5d3d49ec71.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        72.0.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:fd:02:2e:be:18:c3:68:d9:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=80e7aef5-78ca-4ad2-a7df-e2897cad7e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:89:da:86:1e:ea:c7:4a:3c:42:1c:db:48:
                    e1:67:6d:6c:0c:2d:d4:63:c7:5f:32:b4:f0:31:94:
                    91:c2:b6:ed:f3:70:17:5c:e3:85:34:e9:c8:59:40:
                    be:96:e9:05:02:3b:c8:9a:db:dd:d6:d5:65:3a:d3:
                    f2:c4:a3:a3:5c:12:f3:95:91:13:9b:4c:6f:cc:a8:
                    26:33:64:03:e0:16:d5:dd:f7:77:1a:e2:cb:14:c9:
                    cc:cf:43:c0:44:8e:b6:21:93:bb:3e:13:9a:38:ac:
                    d4:cb:d4:83:d1:58:b2:11:d6:b8:b9:58:64:de:67:
                    7f:5b:83:7e:a3:a0:1a:f0:73:ea:dc:6f:ef:1c:b4:
                    9a:ed:16:de:a9:c6:d6:f1:e8:3c:5b:1a:87:70:5d:
                    0b:c2:fc:b9:39:88:cd:ab:a6:09:8a:d2:9b:45:97:
                    1a:30:a6:7a:05:b5:da:ed:ea:9b:59:82:e5:5f:99:
                    e7:32:17:05:6a:1a:d5:27:13:94:89:c5:f5:c9:49:
                    8b:e9:38:af:ea:47:3e:85:fe:ae:27:a3:98:a3:74:
                    83:70:cf:87:6f:12:4d:64:2e:2b:19:a9:b1:01:cc:
                    c5:d2:1c:b3:86:95:58:fb:2d:9d:34:9d:9c:57:dd:
                    d7:68:c4:99:13:65:98:69:0e:a2:ae:46:79:bf:74:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:DE:D3:89:CC:1A:41:7F:2B:C6:63:75:F3:5F:5C:52:57:D4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f6a9e206-4f53-37a1-af90-2d5d3d49ec71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.0.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:c7:98:f7:b8:6c:1e:6e:af:b9:7c:17:8e:71:44:82:c4:
         c0:b6:eb:c7:68:b9:cd:c2:e7:31:3a:9e:df:19:39:7e:1f:26:
         de:f2:4f:89:3c:3c:c4:01:44:63:9a:56:64:60:f0:00:2d:a7:
         d1:4b:a4:2d:0f:80:74:9e:22:b9:a5:18:20:d1:e4:88:33:50:
         a7:41:7a:16:1d:32:6c:88:1c:10:5e:a2:7e:05:23:41:37:fb:
         fb:8a:56:07:4b:a9:9e:33:4a:c5:db:fa:4e:7b:07:49:32:c4:
         63:f8:48:86:21:db:d0:15:ba:ee:00:2e:c2:c5:3d:bb:c2:dd:
         b8:16:73:c1:70:32:9e:33:b0:9c:16:3e:2e:f5:72:0a:52:c5:
         96:a6:33:e2:42:28:ca:5c:f4:93:d7:47:4f:12:93:5a:3b:19:
         b9:e1:52:a0:38:59:b8:0b:a5:69:db:10:e9:ea:95:0d:2e:0b:
         c0:dc:c7:83:f0:fe:61:94:5b:a3:1e:f6:5f:ad:f5:e7:a5:0e:
         6f:96:c5:61:59:08:61:53:bc:b3:99:6d:83:1f:82:88:bc:70:
         67:e0:b5:69:b7:41:ef:7e:17:30:ed:e5:3a:73:04:95:7d:7e:
         aa:1a:6c:28:f6:75:d3:cc:fc:a5:18:17:c5:a5:3f:4c:c6:ad:
         a2:e6:3b:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdP0CLr4Yw2jZSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5
OTg4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
ODBlN2FlZjUtNzhjYS00YWQyLWE3ZGYtZTI4OTdjYWQ3ZTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NyJ2oYe6sdKPEIc20jhZ21sDC3UY8dfMrTw
MZSRwrbt83AXXOOFNOnIWUC+lukFAjvImtvd1tVlOtPyxKOjXBLzlZETm0xvzKgm
M2QD4BbV3fd3GuLLFMnMz0PARI62IZO7PhOaOKzUy9SD0ViyEda4uVhk3md/W4N+
o6Aa8HPq3G/vHLSa7RbeqcbW8eg8WxqHcF0Lwvy5OYjNq6YJitKbRZcaMKZ6BbXa
7eqbWYLlX5nnMhcFahrVJxOUicX1yUmL6Tiv6kc+hf6uJ6OYo3SDcM+HbxJNZC4r
GamxAczF0hyzhpVY+y2dNJ2cV93XaMSZE2WYaQ6irkZ5v3S5LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLLW3tOJzBpBfyvGY3XzX1xSV9SJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2
NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvZjZhOWUyMDYtNGY1My0z
N2ExLWFmOTAtMmQ1ZDNkNDllYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz
ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3
OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm
N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASADtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHi4x5j3uGwebq+5fBeOcUSCxMC268douc3C5zE6nt8ZOX4fJt7yT4k8
PMQBRGOaVmRg8AAtp9FLpC0PgHSeIrmlGCDR5IgzUKdBehYdMmyIHBBeon4FI0E3
+/uKVgdLqZ4zSsXb+k57B0kyxGP4SIYh29AVuu4ALsLFPbvC3bgWc8FwMp4zsJwW
Pi71cgpSxZamM+JCKMpc9JPXR08Sk1o7GbnhUqA4WbgLpWnbEOnqlQ0uC8Dcx4Pw
/mGUW6Me9l+t9eelDm+WxWFZCGFTvLOZbYMfgoi8cGfgtWm3Qe9+FzDt5TpzBJV9
fqoabCj2ddPM/KUYF8WlP0zGraLmOww=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:57 2026 by rpki-client