Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/00d642e6-8939-3d28-90ef-153eb29f6d12.roa
File:                     00d642e6-8939-3d28-90ef-153eb29f6d12.roa (raw, json)
Hash identifier:          auX6utmrLOYXpEiofNvdIJ+BLQROeyzrH9udhfa1WSQ=
Subject key identifier:   02:07:04:92:31:6E:22:C8:1B:48:56:80:DB:3A:B4:89:07:36:47:94
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D290F57AF20F8CBCA4E663CC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/00d642e6-8939-3d28-90ef-153eb29f6d12.roa
Signing time:             Sat 14 Mar 2026 01:00:31 +0000
ROA not before:           Sat 14 Mar 2026 01:00:31 +0000
ROA not after:            Fri 12 Jun 2026 01:00:31 +0000
asID:                     22677
IP address blocks:        71.15.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:0f:57:af:20:f8:cb:ca:4e:66:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 14 01:00:31 2026 GMT
            Not After : Jun 12 01:00:31 2026 GMT
        Subject: CN=53f8d83b-23e7-4cae-a2b6-9cb615829bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c3:36:fb:ea:b3:26:1f:58:5d:5f:c4:1c:ad:
                    9b:a0:42:c0:70:4c:3e:65:86:ed:f6:37:36:df:9b:
                    70:d0:7c:be:05:48:0a:e7:46:db:f7:bb:8d:44:32:
                    58:0f:f3:f5:82:f5:57:aa:7d:a6:d7:dc:e8:fe:e1:
                    24:22:07:64:d6:c2:8d:f0:35:f4:89:ff:8e:37:f3:
                    c1:ee:31:4d:88:ce:93:c1:6d:2d:a8:38:df:09:22:
                    cb:e3:d0:56:83:86:02:cd:e7:ef:c6:6e:59:1a:bf:
                    9b:ff:0d:03:0c:c7:df:c0:0b:91:5f:ea:03:26:29:
                    01:20:f4:51:f6:5e:ed:79:81:ed:09:bf:4d:98:cd:
                    45:fb:b5:e2:71:58:f2:e4:7b:87:35:7a:fb:ed:15:
                    70:fa:83:87:a4:08:d1:cc:ee:a4:ba:b0:ab:ff:44:
                    10:48:b8:ae:7c:55:a9:b1:2c:28:d2:b0:77:85:f8:
                    1e:cb:12:fd:e9:a5:eb:fb:ae:31:a2:f1:2a:7a:fb:
                    63:38:55:48:96:01:7f:8e:05:20:28:a7:40:8a:18:
                    02:57:bc:79:a2:49:54:52:67:18:fc:63:b6:20:41:
                    0c:0e:4b:05:19:be:b4:95:b9:e7:61:f9:17:fc:46:
                    4e:18:12:72:9d:d7:03:e2:55:80:8d:42:fe:82:ec:
                    39:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:07:04:92:31:6E:22:C8:1B:48:56:80:DB:3A:B4:89:07:36:47:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/00d642e6-8939-3d28-90ef-153eb29f6d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.15.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:f5:41:34:ed:77:2b:4a:23:f3:4f:3a:d6:b3:04:af:fb:5a:
         f8:96:b4:d8:a9:67:59:e0:2d:13:83:03:44:db:57:64:9d:f4:
         e0:6f:ef:5e:2b:4d:0d:b1:ad:2b:30:14:1e:06:7c:a9:4a:6b:
         80:02:f6:a8:65:c5:cd:19:6b:dd:69:9d:90:f7:c9:26:69:23:
         43:87:ec:5a:cb:1c:46:00:8f:56:5d:87:f6:4b:0a:7a:3d:ee:
         42:ee:4d:38:e2:87:56:b0:ed:27:c8:7f:d7:57:a8:e8:9b:4b:
         67:fc:41:35:b9:a1:59:7d:2c:16:cc:df:45:54:13:bb:3d:19:
         a6:e4:5c:4b:dc:92:79:00:be:c4:c5:92:9e:6e:f4:15:3c:4d:
         02:82:03:8a:99:55:7e:8e:07:db:5d:91:a0:5f:5b:05:09:7a:
         b3:fe:b2:a9:8c:b9:95:a0:b2:9e:eb:af:3c:31:94:ab:72:b5:
         2f:ef:e7:a4:6d:2e:3e:b5:2c:42:fa:98:70:c8:9d:ee:cc:28:
         29:36:d4:e5:6f:d4:37:d2:3f:d0:a5:3f:87:58:e5:42:82:2f:
         ea:41:20:9d:89:e0:22:11:99:fa:34:47:8b:10:7f:67:d5:98:
         4d:3d:f7:00:32:b9:ee:e8:72:ef:2b:28:2a:ca:cf:80:eb:b0:
         b1:c8:ce:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0pD1evIPjLyk5mPMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMxNDAxMDAzMVoXDTI2MDYxMjAxMDAzMVowLzEtMCsGA1UEAxMk
NTNmOGQ4M2ItMjNlNy00Y2FlLWEyYjYtOWNiNjE1ODI5YmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8M2++qzJh9YXV/EHK2boELAcEw+ZYbt9jc2
35tw0Hy+BUgK50bb97uNRDJYD/P1gvVXqn2m19zo/uEkIgdk1sKN8DX0if+ON/PB
7jFNiM6TwW0tqDjfCSLL49BWg4YCzefvxm5ZGr+b/w0DDMffwAuRX+oDJikBIPRR
9l7teYHtCb9NmM1F+7XicVjy5HuHNXr77RVw+oOHpAjRzO6kurCr/0QQSLiufFWp
sSwo0rB3hfgeyxL96aXr+64xovEqevtjOFVIlgF/jgUgKKdAihgCV7x5oklUUmcY
/GO2IEEMDksFGb60lbnnYfkX/EZOGBJyndcD4lWAjUL+guw5QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIHBJIxbiLIG0hWgNs6tIkHNkeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDBkNjQyZTYtODkzOS0z
ZDI4LTkwZWYtMTUzZWIyOWY2ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRw9IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALz1QTTtdytKI/NPOtazBK/7WviWtNipZ1ngLRODA0TbV2Sd9OBv714r
TQ2xrSswFB4GfKlKa4AC9qhlxc0Za91pnZD3ySZpI0OH7FrLHEYAj1Zdh/ZLCno9
7kLuTTjih1aw7SfIf9dXqOibS2f8QTW5oVl9LBbM30VUE7s9GabkXEvcknkAvsTF
kp5u9BU8TQKCA4qZVX6OB9tdkaBfWwUJerP+sqmMuZWgsp7rrzwxlKtytS/v56Rt
Lj61LEL6mHDIne7MKCk21OVv1DfSP9ClP4dY5UKCL+pBIJ2J4CIRmfo0R4sQf2fV
mE099wAyue7ocu8rKCrKz4DrsLHIzuc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:32 2026 by rpki-client