Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/767dcc9f-4d41-3dc2-8c16-517741247519.roa
File:                     767dcc9f-4d41-3dc2-8c16-517741247519.roa (raw, json)
Hash identifier:          DU7/anDeCv6Z96Nr56ByPDfnH3XE+eramqCHkZwt0+8=
Subject key identifier:   AD:56:65:BF:17:A3:A9:20:A1:AB:44:98:8B:9E:D6:C2:72:11:58:A8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB57664FEE39B4157FC6A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/767dcc9f-4d41-3dc2-8c16-517741247519.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.108.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:76:64:fe:e3:9b:41:57:fc:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=905392c8-c8f4-44f6-baf8-08a50f896975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:ca:5e:e2:75:48:33:2a:11:2e:19:8a:63:
                    53:1f:13:5d:ad:4e:21:05:24:cc:50:25:46:9b:39:
                    54:7a:4b:97:96:0e:8e:67:f9:d4:d8:57:6e:34:a8:
                    bd:c7:c3:e7:94:07:ec:ef:e8:d5:a2:93:d2:ac:ad:
                    82:d0:b5:57:48:ca:7a:f4:7a:25:06:3a:28:06:b0:
                    f0:d2:c1:07:df:75:ee:1f:81:4b:95:da:4a:e9:4b:
                    06:57:0a:4f:67:ab:d8:fa:12:c4:53:99:5b:81:17:
                    27:b5:b5:bc:af:93:a5:8a:77:ad:0d:fc:af:23:5d:
                    99:b3:49:9d:d1:67:5e:41:89:bd:7e:c6:6f:31:32:
                    f3:5c:25:39:f3:76:81:40:dc:9d:35:14:f0:08:bf:
                    fd:6f:a1:43:72:49:a7:9e:1b:7a:46:5d:c4:48:b0:
                    9b:83:be:c5:4a:6c:98:74:e1:5f:04:86:df:ac:c8:
                    7e:82:ee:50:d4:d0:c9:71:9c:7d:9e:94:cb:31:b2:
                    67:48:f4:d9:80:f7:9d:e4:96:20:18:7d:bb:cc:59:
                    15:43:f8:d3:55:05:3f:ab:db:7a:35:57:70:63:df:
                    f3:ad:d2:0a:f1:9a:da:81:2b:49:1c:cc:37:8c:ea:
                    d5:46:5c:02:64:4c:ea:bb:83:29:36:bb:d1:ae:4d:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:56:65:BF:17:A3:A9:20:A1:AB:44:98:8B:9E:D6:C2:72:11:58:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/767dcc9f-4d41-3dc2-8c16-517741247519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:11:9f:65:35:22:8a:5c:a9:c3:db:e6:e0:37:9d:da:fe:f7:
         5b:44:a3:c3:29:ee:49:44:cc:21:c9:47:dc:a8:07:1c:02:fd:
         9c:c9:1c:30:76:96:df:b8:ed:e8:32:94:69:05:84:1f:7d:a5:
         62:ad:3c:d3:48:fb:d2:4b:08:8e:1a:0d:5a:57:da:37:a4:70:
         32:0d:1c:4e:5c:bf:d9:6a:0e:db:23:b6:38:71:66:84:08:8a:
         10:1a:c4:1c:67:49:df:6a:28:a4:2d:b9:f2:1e:22:b1:7a:af:
         e1:a2:75:e2:28:1a:37:cf:ca:08:15:df:6d:0d:c9:70:68:0d:
         ff:25:22:96:d9:8e:28:3a:34:e7:f0:26:30:e4:79:a7:e7:57:
         fc:a8:69:15:63:f2:96:85:e7:b2:a9:6d:ce:f2:2c:2a:2e:86:
         8b:1e:92:4a:fe:d6:16:46:af:03:c1:ce:23:2a:ca:8e:dc:10:
         37:95:17:01:b1:65:7d:a3:d7:25:f5:9c:bf:19:a4:3f:ea:c0:
         1e:73:bd:17:f2:7a:d4:34:a4:21:54:cc:b5:4d:8e:ea:e5:ab:
         b3:56:76:71:2a:80:f0:76:f7:0a:c5:71:a3:56:f7:e9:2c:fd:
         f7:46:c7:b9:0e:fc:e0:01:f3:21:91:09:80:7a:e3:11:6c:c0:
         cc:66:e1:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXZk/uObQVf8aoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
OTA1MzkyYzgtYzhmNC00NGY2LWJhZjgtMDhhNTBmODk2OTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj43KXuJ1SDMqES4ZimNTHxNdrU4hBSTMUCVG
mzlUekuXlg6OZ/nU2FduNKi9x8PnlAfs7+jVopPSrK2C0LVXSMp69HolBjooBrDw
0sEH33XuH4FLldpK6UsGVwpPZ6vY+hLEU5lbgRcntbW8r5OlinetDfyvI12Zs0md
0WdeQYm9fsZvMTLzXCU583aBQNydNRTwCL/9b6FDckmnnht6Rl3ESLCbg77FSmyY
dOFfBIbfrMh+gu5Q1NDJcZx9npTLMbJnSPTZgPed5JYgGH27zFkVQ/jTVQU/q9t6
NVdwY9/zrdIK8ZragStJHMw3jOrVRlwCZEzqu4MpNrvRrk2+vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK1WZb8Xo6kgoatEmIue1sJyEVioMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzY3ZGNjOWYtNGQ0MS0z
ZGMyLThjMTYtNTE3NzQxMjQ3NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGxtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIURn2U1IopcqcPb5uA3ndr+91tEo8Mp7klEzCHJR9yoBxwC/ZzJHDB2
lt+47egylGkFhB99pWKtPNNI+9JLCI4aDVpX2jekcDINHE5cv9lqDtsjtjhxZoQI
ihAaxBxnSd9qKKQtufIeIrF6r+GideIoGjfPyggV320NyXBoDf8lIpbZjig6NOfw
JjDkeafnV/yoaRVj8paF57Kpbc7yLCouhosekkr+1hZGrwPBziMqyo7cEDeVFwGx
ZX2j1yX1nL8ZpD/qwB5zvRfyetQ0pCFUzLVNjurlq7NWdnEqgPB29wrFcaNW9+ks
/fdGx7kO/OAB8yGRCYB64xFswMxm4R4=
-----END CERTIFICATE-----
Generated at Wed May 13 13:36:11 2026 by rpki-client