Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75d15f4b-7cf2-3a45-ba05-a6f27300ae81.roa
File:                     75d15f4b-7cf2-3a45-ba05-a6f27300ae81.roa (raw, json)
Hash identifier:          WyKhwNxZJCFqBsgj/tgcD+h7ZOfBjaqPGFemA+vo+qg=
Subject key identifier:   23:EB:18:23:03:47:87:72:62:85:9E:F1:1F:F2:B4:7D:1D:0B:68:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C5492E9B67A413269EC54F4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75d15f4b-7cf2-3a45-ba05-a6f27300ae81.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        72.73.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:92:e9:b6:7a:41:32:69:ec:54:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=51ec896d-6b87-465a-8eb0-38273d6eff51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3f:29:95:56:31:1e:af:9d:6b:1e:89:c4:05:
                    bb:bf:4f:0b:dc:65:2b:5e:fb:8d:22:90:28:9c:3c:
                    33:b0:09:96:30:58:e3:05:d5:85:9d:80:e0:47:ac:
                    22:c0:c0:7f:e4:51:04:c1:b5:66:b6:18:8e:cb:3b:
                    21:f3:01:a8:34:c0:b3:50:a3:c4:f4:51:8b:dc:22:
                    54:8e:12:f6:6e:c0:11:c8:b0:b2:34:9e:e3:2b:c2:
                    1b:af:41:6a:84:49:67:a0:6d:56:f6:db:54:2a:17:
                    3b:dd:01:ca:c5:d8:0d:d0:3b:9b:0d:4c:e9:44:92:
                    02:14:b7:60:a6:b6:3f:f4:d9:1b:b8:fe:f8:64:10:
                    ca:b7:fc:2a:c7:23:b4:27:35:1b:6e:c7:4b:16:98:
                    9f:6e:b5:d7:7e:3a:ed:fe:22:5d:32:2f:ec:19:0d:
                    62:b4:b8:ec:64:c0:5c:34:f0:77:6f:10:f7:32:ee:
                    b3:32:7a:16:cd:1e:6d:83:b2:57:f8:5d:3f:1c:77:
                    69:88:ee:91:a4:7e:26:fb:bb:c6:f2:a4:8b:c6:49:
                    73:11:9a:a4:a9:0d:b1:72:16:9f:03:a0:ec:44:80:
                    bf:ea:2d:28:75:1d:38:27:49:0b:33:fd:64:01:a4:
                    4f:94:b4:f4:97:6a:2d:21:17:f2:00:54:84:22:dc:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EB:18:23:03:47:87:72:62:85:9E:F1:1F:F2:B4:7D:1D:0B:68:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75d15f4b-7cf2-3a45-ba05-a6f27300ae81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.73.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:38:f4:ae:65:c0:8b:1d:5a:89:20:f0:83:e0:a6:37:fd:
         c5:f1:62:41:2d:42:54:be:b5:c7:97:8d:1b:58:c6:b4:90:d6:
         a8:a4:9a:9b:6c:6b:e6:4e:e7:f2:3a:d2:5e:a7:b8:5c:fe:ab:
         d0:21:51:bb:92:79:f2:b0:0a:16:2c:b8:7b:61:f5:48:bb:45:
         06:35:85:02:57:11:1b:bd:b4:76:b1:48:53:3c:1d:c1:ef:e9:
         e5:31:35:36:ad:59:fc:1a:69:2e:81:53:2d:eb:c2:9b:af:a2:
         10:19:29:c4:82:a2:a0:69:37:3e:41:d8:a7:54:f4:14:7a:63:
         10:92:33:e5:98:f9:bf:88:b9:7f:45:52:0a:eb:9c:70:25:44:
         c6:28:46:fc:95:87:de:e9:e9:4e:80:0b:c7:30:03:93:a1:5c:
         55:ab:ec:29:12:6b:71:fe:e1:80:c2:64:44:bc:f1:e9:54:34:
         50:21:b0:3d:47:05:44:1a:3b:25:89:fa:2e:0d:f2:51:6a:f9:
         52:8f:16:9b:fa:04:58:e1:0b:64:10:b4:44:9c:b5:ff:38:2b:
         d5:c8:2e:6c:0f:5f:b0:a1:59:39:ed:94:ff:ed:45:ae:6f:06:
         3a:0f:4c:f8:4f:1f:84:22:a7:2f:de:3c:20:a6:e3:72:8a:0a:
         8f:e2:bf:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVJLptnpBMmnsVPQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
NTFlYzg5NmQtNmI4Ny00NjVhLThlYjAtMzgyNzNkNmVmZjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT8plVYxHq+dax6JxAW7v08L3GUrXvuNIpAo
nDwzsAmWMFjjBdWFnYDgR6wiwMB/5FEEwbVmthiOyzsh8wGoNMCzUKPE9FGL3CJU
jhL2bsARyLCyNJ7jK8Ibr0FqhElnoG1W9ttUKhc73QHKxdgN0DubDUzpRJICFLdg
prY/9NkbuP74ZBDKt/wqxyO0JzUbbsdLFpifbrXXfjrt/iJdMi/sGQ1itLjsZMBc
NPB3bxD3Mu6zMnoWzR5tg7JX+F0/HHdpiO6RpH4m+7vG8qSLxklzEZqkqQ2xchaf
A6DsRIC/6i0odR04J0kLM/1kAaRPlLT0l2otIRfyAFSEItx0BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPrGCMDR4dyYoWe8R/ytH0dC2hKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzVkMTVmNGItN2NmMi0z
YTQ1LWJhMDUtYTZmMjczMDBhZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESEkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPUOPSuZcCLHVqJIPCD4KY3/cXxYkEtQlS+tceXjRtYxrSQ1qikmpts
a+ZO5/I60l6nuFz+q9AhUbuSefKwChYsuHth9Ui7RQY1hQJXERu9tHaxSFM8HcHv
6eUxNTatWfwaaS6BUy3rwpuvohAZKcSCoqBpNz5B2KdU9BR6YxCSM+WY+b+IuX9F
UgrrnHAlRMYoRvyVh97p6U6AC8cwA5OhXFWr7CkSa3H+4YDCZES88elUNFAhsD1H
BUQaOyWJ+i4N8lFq+VKPFpv6BFjhC2QQtESctf84K9XILmwPX7ChWTntlP/tRa5v
BjoPTPhPH4Qipy/ePCCm43KKCo/iv7I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:45 2026 by rpki-client