Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01df26f9-1ffb-3039-bc71-a8170026cddc.roa
File:                     01df26f9-1ffb-3039-bc71-a8170026cddc.roa (raw, json)
Hash identifier:          j0n/hM9YKHIVim0AIbjLiGlVMkkxAJ6ELnPan4XmtVI=
Subject key identifier:   D9:0B:41:42:B2:B0:E0:D6:27:2C:78:DC:19:77:F1:69:6F:11:57:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB58247C674B91E8CE08200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01df26f9-1ffb-3039-bc71-a8170026cddc.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.111.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:82:47:c6:74:b9:1e:8c:e0:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=4e19308d-5c19-442e-8717-a43f04892ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:54:c5:6b:e3:a9:c9:0e:f8:9c:5a:d1:10:
                    29:50:d2:52:db:42:41:41:05:bd:60:55:82:c5:1d:
                    2c:6b:1b:61:71:60:e2:7f:0d:b5:b8:37:6a:e0:d5:
                    d6:c4:26:f6:b8:08:43:06:1c:dc:d8:61:3d:c2:85:
                    94:cb:8c:75:26:69:59:db:e4:f0:9e:85:b8:bd:59:
                    ae:53:36:7a:5f:3e:d2:25:9d:73:3a:52:01:d3:75:
                    13:27:b2:d7:96:bc:7d:9a:8e:ba:f5:6b:a3:6f:35:
                    6c:d8:d0:73:db:ca:00:02:91:c3:c2:7e:f1:31:89:
                    58:1d:1b:35:7b:08:67:7d:37:1a:00:4f:b8:09:f0:
                    56:bb:24:62:f6:c6:f7:c6:63:c0:6c:45:da:bb:d4:
                    5d:32:de:d2:3c:d6:23:f4:b9:e7:47:e4:dd:be:39:
                    9d:64:25:4e:de:65:f0:8b:45:b9:02:20:21:7f:82:
                    6b:a9:df:b0:d0:3d:a6:df:06:94:bb:99:ff:32:25:
                    84:f5:04:18:a4:ee:97:bd:01:42:11:e3:fe:e0:f9:
                    be:b3:d0:6e:7b:ef:a9:23:c3:ba:8b:5d:32:72:da:
                    3d:bc:e1:38:04:1d:76:24:31:03:1e:82:99:ef:f8:
                    81:a6:f3:01:0b:9f:5a:d1:21:70:ae:35:68:1e:66:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0B:41:42:B2:B0:E0:D6:27:2C:78:DC:19:77:F1:69:6F:11:57:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01df26f9-1ffb-3039-bc71-a8170026cddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ac:93:97:05:53:41:3f:de:2a:5d:f8:9a:53:2e:7a:ea:21:
         e6:1a:70:2e:16:03:32:fd:eb:a1:57:f8:c8:b7:d9:20:2d:0b:
         9f:c2:86:2c:b9:22:21:a0:71:a9:34:12:af:1b:45:d1:5b:80:
         53:fc:3a:28:67:5f:f5:5e:a8:85:65:0a:d6:2c:d8:e1:66:a2:
         52:d5:0c:1b:28:fb:88:5d:3f:4c:f7:41:98:8c:16:b6:bf:64:
         82:23:7e:69:60:f6:4b:d2:0b:87:00:9d:da:1d:ed:1c:9c:27:
         44:a2:c8:be:4c:66:74:d1:45:79:25:23:6c:95:c3:cb:85:48:
         93:ba:90:6e:cf:2f:a1:e0:df:be:a4:7b:36:94:4c:8b:be:6d:
         e1:65:d7:4f:b1:59:c6:f8:94:78:c2:de:f0:49:6b:ce:f2:ed:
         9d:35:49:3c:c5:88:ab:9c:2a:d2:3b:e3:9e:20:a5:aa:4c:2a:
         1d:7b:14:49:e2:c4:ec:f2:de:27:c0:db:5c:fa:a1:04:7b:9b:
         ab:da:9c:5f:29:fe:17:8f:e8:4b:14:db:16:e4:2d:83:c4:19:
         48:c1:10:9b:be:3c:1f:92:f9:08:f6:55:08:34:e4:ea:73:b2:
         ef:d7:1b:f0:79:f3:16:ae:f4:ac:15:71:86:4c:1a:46:33:5a:
         59:ae:4b:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYJHxnS5HozgggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
NGUxOTMwOGQtNWMxOS00NDJlLTg3MTctYTQzZjA0ODkyY2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYdUxWvjqckO+Jxa0RApUNJS20JBQQW9YFWC
xR0saxthcWDifw21uDdq4NXWxCb2uAhDBhzc2GE9woWUy4x1JmlZ2+TwnoW4vVmu
UzZ6Xz7SJZ1zOlIB03UTJ7LXlrx9mo669WujbzVs2NBz28oAApHDwn7xMYlYHRs1
ewhnfTcaAE+4CfBWuyRi9sb3xmPAbEXau9RdMt7SPNYj9LnnR+TdvjmdZCVO3mXw
i0W5AiAhf4Jrqd+w0D2m3waUu5n/MiWE9QQYpO6XvQFCEeP+4Pm+s9Bue++pI8O6
i10ycto9vOE4BB12JDEDHoKZ7/iBpvMBC59a0SFwrjVoHmY/IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkLQUKysODWJyx43Bl38WlvEVcNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDFkZjI2ZjktMWZmYi0z
MDM5LWJjNzEtYTgxNzAwMjZjZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSG+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGsk5cFU0E/3ipd+JpTLnrqIeYacC4WAzL966FX+Mi32SAtC5/Chiy5
IiGgcak0Eq8bRdFbgFP8OihnX/VeqIVlCtYs2OFmolLVDBso+4hdP0z3QZiMFra/
ZIIjfmlg9kvSC4cAndod7RycJ0SiyL5MZnTRRXklI2yVw8uFSJO6kG7PL6Hg376k
ezaUTIu+beFl10+xWcb4lHjC3vBJa87y7Z01STzFiKucKtI7454gpapMKh17FEni
xOzy3ifA21z6oQR7m6vanF8p/heP6EsU2xbkLYPEGUjBEJu+PB+S+Qj2VQg05Opz
su/XG/B58xau9KwVcYZMGkYzWlmuS9Q=
-----END CERTIFICATE-----
Generated at Wed May 13 14:12:10 2026 by rpki-client