Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa
File:                     ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa (raw, json)
Hash identifier:          W7HGv2raR44lXYuV/MOWVd504uugzbSlhlogRbYq61g=
Subject key identifier:   2D:07:2D:A9:37:50:D4:09:F5:56:D6:24:77:84:E6:28:09:B2:70:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EFCACD3EF7B1D7667C335DB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        72.104.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:d3:ef:7b:1d:76:67:c3:35:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=5e560432-7478-4f12-9248-5144658bf6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:ca:19:c6:5b:76:ce:f7:6b:c4:9b:b7:12:
                    97:c4:fe:fa:df:db:c1:6a:86:f9:c0:6f:89:90:91:
                    03:10:31:38:1a:57:a2:6d:c0:46:52:ea:6a:49:17:
                    aa:55:9f:1a:f0:00:f4:36:92:d3:c5:85:08:89:b9:
                    dc:e1:e3:19:33:e3:f2:9e:b4:73:3e:82:17:8f:2f:
                    f6:a8:38:1e:ac:4e:30:d3:d2:e4:de:4d:c1:67:91:
                    51:f4:64:d3:79:df:9e:b0:51:a7:f7:cf:2e:71:57:
                    a0:c8:fc:06:f4:a0:c1:d8:00:d4:5a:87:e4:01:4f:
                    2b:47:69:db:e2:41:e4:37:67:53:34:34:92:36:5b:
                    82:73:76:7d:57:cd:f8:74:93:06:d6:cd:2a:cf:ec:
                    58:86:1f:5a:c1:82:b4:f9:7e:b6:8d:a1:6a:95:b2:
                    3a:89:6e:3a:ea:aa:45:8d:85:34:7d:e8:43:4e:a2:
                    4f:ce:e3:b3:a9:a8:dc:0b:24:72:f0:fb:59:fc:40:
                    46:c1:4b:2e:a7:71:7f:16:bb:0d:1a:d0:cc:33:d6:
                    a4:2f:fe:de:65:4e:fb:4b:e4:d9:d2:a0:fd:a4:8e:
                    2b:ca:0a:e5:1e:df:a5:f2:49:26:9f:85:59:67:52:
                    87:f8:04:c8:0a:44:4e:f1:d5:b7:1a:a8:99:e5:5e:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:07:2D:A9:37:50:D4:09:F5:56:D6:24:77:84:E6:28:09:B2:70:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f1:89:86:92:db:94:75:ab:a6:29:29:04:e3:28:f0:97:c9:
         9c:da:e6:f7:46:08:35:ea:a1:a7:a2:f7:d5:1b:ce:68:e2:42:
         e2:0b:87:88:82:26:ce:42:cb:06:d9:72:78:ba:18:59:01:55:
         56:f0:1a:75:19:09:b7:51:f3:9c:2e:38:7f:65:b1:f5:68:77:
         a9:f5:c4:2e:9c:9d:15:41:62:c9:66:d3:9c:9f:90:d5:23:0d:
         ad:2f:f2:49:0c:ee:e6:13:ea:16:33:bc:87:2e:4f:6a:ef:06:
         3d:78:97:3f:18:69:79:31:ae:57:af:d8:7f:eb:85:8f:cc:4f:
         5a:eb:94:01:6f:82:f6:77:08:e8:04:1d:7f:8c:a6:bd:33:be:
         5e:dc:97:4a:43:fa:50:c5:80:60:bc:0a:73:f4:81:62:e3:8a:
         87:31:18:68:25:f3:e4:3a:b6:f6:0b:64:fc:ea:9f:5d:0c:8f:
         17:a2:72:dc:0b:3e:0b:43:d1:58:2d:df:0d:83:29:89:0e:18:
         f3:82:ef:d4:7c:f3:54:29:75:01:04:30:e1:72:22:1c:62:57:
         55:97:48:43:4b:7e:09:ef:20:b4:e8:b4:5d:24:83:a8:d7:4a:
         b3:2e:63:3e:10:76:b2:d3:9f:04:5d:43:98:2d:3d:11:72:5e:
         c0:9e:11:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rNPvex12Z8M12wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
NWU1NjA0MzItNzQ3OC00ZjEyLTkyNDgtNTE0NDY1OGJmNmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ezKGcZbds73a8SbtxKXxP7639vBaob5wG+J
kJEDEDE4GleibcBGUupqSReqVZ8a8AD0NpLTxYUIibnc4eMZM+PynrRzPoIXjy/2
qDgerE4w09Lk3k3BZ5FR9GTTed+esFGn988ucVegyPwG9KDB2ADUWofkAU8rR2nb
4kHkN2dTNDSSNluCc3Z9V834dJMG1s0qz+xYhh9awYK0+X62jaFqlbI6iW466qpF
jYU0fehDTqJPzuOzqajcCyRy8PtZ/EBGwUsup3F/FrsNGtDMM9akL/7eZU77S+TZ
0qD9pI4rygrlHt+l8kkmn4VZZ1KH+ATICkRO8dW3GqiZ5V6/UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0HLak3UNQJ9VbWJHeE5igJsnB7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmEwMzAwN2UtY2ExYS0z
ZmM1LTgyNmItNGZlOWRlZDY4YzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGgQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzxiYaS25R1q6YpKQTjKPCXyZza5vdGCDXqoaei99UbzmjiQuILh4iC
Js5CywbZcni6GFkBVVbwGnUZCbdR85wuOH9lsfVod6n1xC6cnRVBYslm05yfkNUj
Da0v8kkM7uYT6hYzvIcuT2rvBj14lz8YaXkxrlev2H/rhY/MT1rrlAFvgvZ3COgE
HX+Mpr0zvl7cl0pD+lDFgGC8CnP0gWLjiocxGGgl8+Q6tvYLZPzqn10MjxeictwL
PgtD0Vgt3w2DKYkOGPOC79R881QpdQEEMOFyIhxiV1WXSENLfgnvILTotF0kg6jX
SrMuYz4QdrLTnwRdQ5gtPRFyXsCeEcY=
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:14:40 2026 by rpki-client