Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08a4063c-1765-3d85-8a28-f4e6bd3657f7.roa
File:                     08a4063c-1765-3d85-8a28-f4e6bd3657f7.roa (raw, json)
Hash identifier:          cI+g++gXksGlnUmaLHizqNFA6cCGDSNHJAneUAyStwg=
Subject key identifier:   3E:69:5F:8F:2E:FF:91:AF:E3:91:0F:0C:6E:78:3E:23:5F:24:FC:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB58096153DF36992AECC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08a4063c-1765-3d85-8a28-f4e6bd3657f7.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.106.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:80:96:15:3d:f3:69:92:ae:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=7b8d160d-72fc-46a4-bd39-6372f0f78c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:1f:e2:5c:1e:41:00:a4:23:99:4a:d4:40:
                    ae:b4:c9:90:f4:70:3c:ab:ea:b5:7d:87:ab:08:88:
                    9a:41:71:80:59:a5:77:18:8d:c3:41:61:87:e8:21:
                    34:1d:7f:2b:e1:e6:09:57:b7:da:8c:d2:bd:e5:72:
                    79:aa:98:d4:29:26:93:ed:fc:9f:bd:d9:ce:fa:94:
                    ab:ec:02:cf:59:34:28:94:25:59:d0:3d:1f:ec:66:
                    26:1f:b3:4f:08:3c:a4:42:6f:eb:a1:46:60:13:2e:
                    a4:e9:8a:93:48:bb:09:52:37:11:d6:81:87:ad:20:
                    44:fa:1f:98:69:d6:e1:00:2b:e3:d3:17:3e:b9:a1:
                    36:b1:7b:36:aa:af:96:a0:d3:7b:96:8d:e7:2f:63:
                    cc:2c:72:a7:92:6c:92:f0:7e:b5:e8:fd:09:18:7a:
                    94:f4:6a:a0:4c:f9:ab:b7:42:a4:3b:02:cb:cb:90:
                    76:7a:d7:b2:b7:32:75:a1:8f:86:d7:5f:cf:27:7f:
                    3a:cb:cd:9a:2c:33:84:f0:50:ca:ea:1d:56:53:24:
                    90:48:a4:e6:33:3b:9d:52:5f:5f:53:e9:be:09:18:
                    7c:d1:ea:52:8f:d4:37:96:79:7f:11:1e:39:a5:2f:
                    4b:48:99:be:42:b9:46:6a:cb:12:92:91:ae:f5:11:
                    a9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:69:5F:8F:2E:FF:91:AF:E3:91:0F:0C:6E:78:3E:23:5F:24:FC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08a4063c-1765-3d85-8a28-f4e6bd3657f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f7:8f:0d:8c:fe:8f:b9:24:2c:6c:f6:d1:20:e1:44:70:f2:
         52:47:f0:10:6a:3f:01:25:aa:a3:2f:50:59:4c:52:83:b6:7a:
         47:97:97:2d:5e:11:6a:af:99:a0:8b:5c:c7:37:38:11:cf:0e:
         a8:f8:6e:15:f0:bd:0c:6f:83:01:da:25:6e:d0:6d:c1:b1:bf:
         53:de:86:66:bb:64:85:96:a2:1e:ff:da:62:18:2b:43:bc:cc:
         33:2f:61:cb:4c:48:19:6d:bd:41:44:13:45:55:ea:e0:dd:00:
         fb:7c:0d:d0:7f:d8:54:68:33:33:5b:9f:ba:55:53:b0:13:31:
         4b:b6:d6:e9:e3:b8:e2:d3:d1:08:d7:65:2a:ce:fa:7e:3e:af:
         67:08:75:23:49:6b:63:14:87:14:ba:5e:4d:ea:43:bd:fb:55:
         f8:b2:e1:1b:2d:5e:c4:e6:a6:76:e5:29:23:da:db:8e:f9:0f:
         30:a0:6d:c6:07:35:45:9a:39:e5:66:80:cd:33:e2:59:84:41:
         56:6d:77:cd:f0:eb:ba:78:97:a1:75:74:1f:cc:11:b2:9c:58:
         7d:e9:dc:54:18:58:89:33:51:58:95:a8:db:b6:60:9d:f2:bd:
         d7:b8:f0:1d:b2:8f:33:bc:22:b0:f8:b6:90:29:bd:02:9d:e8:
         8f:9d:70:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYCWFT3zaZKuzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
N2I4ZDE2MGQtNzJmYy00NmE0LWJkMzktNjM3MmYwZjc4YzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRMf4lweQQCkI5lK1ECutMmQ9HA8q+q1fYer
CIiaQXGAWaV3GI3DQWGH6CE0HX8r4eYJV7fajNK95XJ5qpjUKSaT7fyfvdnO+pSr
7ALPWTQolCVZ0D0f7GYmH7NPCDykQm/roUZgEy6k6YqTSLsJUjcR1oGHrSBE+h+Y
adbhACvj0xc+uaE2sXs2qq+WoNN7lo3nL2PMLHKnkmyS8H616P0JGHqU9GqgTPmr
t0KkOwLLy5B2eteytzJ1oY+G11/PJ386y82aLDOE8FDK6h1WUySQSKTmMzudUl9f
U+m+CRh80epSj9Q3lnl/ER45pS9LSJm+QrlGassSkpGu9RGpbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5pX48u/5Gv45EPDG54PiNfJPwxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhhNDA2M2MtMTc2NS0z
ZDg1LThhMjgtZjRlNmJkMzY1N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGrIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH73jw2M/o+5JCxs9tEg4URw8lJH8BBqPwElqqMvUFlMUoO2ekeXly1e
EWqvmaCLXMc3OBHPDqj4bhXwvQxvgwHaJW7QbcGxv1Pehma7ZIWWoh7/2mIYK0O8
zDMvYctMSBltvUFEE0VV6uDdAPt8DdB/2FRoMzNbn7pVU7ATMUu21unjuOLT0QjX
ZSrO+n4+r2cIdSNJa2MUhxS6Xk3qQ737Vfiy4RstXsTmpnblKSPa2475DzCgbcYH
NUWaOeVmgM0z4lmEQVZtd83w67p4l6F1dB/MEbKcWH3p3FQYWIkzUViVqNu2YJ3y
vde48B2yjzO8IrD4tpApvQKd6I+dcAY=
-----END CERTIFICATE-----
Generated at Wed May 13 13:13:25 2026 by rpki-client