Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f69346df-03dd-36c7-913b-c2f96bc60de7.roa
File:                     f69346df-03dd-36c7-913b-c2f96bc60de7.roa (raw, json)
Hash identifier:          zSXoPvebowC518LkPktnoFuQEj9151+fREa+Hy35M+A=
Subject key identifier:   53:4C:0D:20:F2:49:63:DF:20:A6:C7:C4:2E:43:4F:26:D7:88:17:B8
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584E0A700C4FE51F17D3FCD62720
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f69346df-03dd-36c7-913b-c2f96bc60de7.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     36734
IP address blocks:        204.10.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:0c:4f:e5:1f:17:d3:fc:d6:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=c6e3ce96-04a9-45cc-bb67-0b81e392f8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:51:7b:8b:ae:a4:57:86:6c:d5:76:94:d6:
                    44:03:77:8f:b3:74:5f:48:6d:0c:db:ec:d0:cb:bd:
                    88:28:d1:61:55:26:a9:dd:f7:ae:28:d2:81:5d:13:
                    df:79:e6:31:eb:b5:07:6f:85:cf:26:cb:37:4f:68:
                    cf:1a:b5:da:cf:04:41:78:f1:30:d5:b0:65:9d:cc:
                    81:91:ea:4d:d0:2f:79:83:8f:c6:d9:0b:08:6c:a4:
                    cb:6c:25:74:29:e0:11:62:15:2b:a3:79:4e:d1:f2:
                    03:cd:07:53:63:e2:d5:15:51:ed:ad:98:6b:8d:0e:
                    32:27:a6:4e:6a:05:d8:25:ff:32:44:96:7d:08:fd:
                    95:66:7d:a3:69:32:2f:d7:f7:5e:b9:9c:bd:17:e0:
                    56:6f:c0:e4:9b:43:7b:98:1b:29:7a:10:70:f4:b4:
                    96:5f:8f:88:ba:5a:33:63:86:ed:20:37:95:d4:95:
                    09:e9:a1:94:71:15:01:28:7c:a0:31:ad:e8:ed:32:
                    79:ca:38:54:4c:97:9f:6b:8d:da:3d:bd:47:17:d9:
                    d5:59:bd:13:76:02:b9:80:05:26:e9:10:fa:3b:85:
                    ff:07:9c:c9:cc:ab:bc:94:bc:a4:54:05:46:e5:15:
                    40:1a:a7:be:cf:05:d8:ba:cb:49:af:c6:0a:f5:7a:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4C:0D:20:F2:49:63:DF:20:A6:C7:C4:2E:43:4F:26:D7:88:17:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f69346df-03dd-36c7-913b-c2f96bc60de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:7e:a5:1f:2a:f0:00:44:8a:09:e2:04:d2:23:b4:97:d5:53:
         76:7c:66:fd:d6:5b:bc:9e:72:55:0a:6b:e0:f2:e8:5c:c2:07:
         68:c8:f5:0f:9b:e6:89:74:24:ce:df:fc:86:77:77:a5:c8:8e:
         24:9b:3e:82:f8:60:3d:bc:22:ac:ef:09:6e:05:5a:3d:f1:3d:
         d3:cf:7c:fc:2f:96:c2:3b:3a:66:87:5d:85:46:bf:f7:b5:0b:
         6a:b1:20:2f:d2:ad:c4:38:8e:2a:84:a2:48:ca:68:bc:8f:f2:
         1a:14:0b:b6:dd:d6:de:83:10:e7:16:cf:8a:a6:d9:99:03:0a:
         e0:d9:6f:63:3b:d8:37:fb:da:98:c6:93:a5:98:58:a3:4c:47:
         69:08:7a:87:7f:4e:55:58:67:d3:a0:5d:e6:b5:ea:99:a9:3a:
         03:f5:83:60:68:46:41:a2:ac:49:e9:a0:d4:53:90:4a:bc:1f:
         ef:c1:b1:ce:83:08:1c:6b:c4:c2:ca:51:92:f0:08:ae:97:39:
         5f:71:a5:ec:de:7e:71:21:f5:c1:35:1c:75:3d:5a:2b:60:aa:
         d1:93:22:f7:75:14:51:4d:1a:af:c9:a6:aa:c1:91:73:6b:b9:
         e9:34:57:e2:a2:d3:24:b5:a4:aa:fd:78:6f:62:fc:52:ea:f4:
         b0:e6:ba:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAxP5R8X0/zWJyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWNiZTJjYWYtYWZkMC00ZWRmLWE3NDMtYjM1MGMyM2Uz
MDdkMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
YzZlM2NlOTYtMDRhOS00NWNjLWJiNjctMGI4MWUzOTJmOGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2BRe4uupFeGbNV2lNZEA3ePs3RfSG0M2+zQ
y72IKNFhVSap3feuKNKBXRPfeeYx67UHb4XPJss3T2jPGrXazwRBePEw1bBlncyB
kepN0C95g4/G2QsIbKTLbCV0KeARYhUro3lO0fIDzQdTY+LVFVHtrZhrjQ4yJ6ZO
agXYJf8yRJZ9CP2VZn2jaTIv1/deuZy9F+BWb8Dkm0N7mBspehBw9LSWX4+Iuloz
Y4btIDeV1JUJ6aGUcRUBKHygMa3o7TJ5yjhUTJefa43aPb1HF9nVWb0TdgK5gAUm
6RD6O4X/B5zJzKu8lLykVAVG5RVAGqe+zwXYustJr8YK9XrtAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNMDSDySWPfIKbHxC5DTybXiBe4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2Jl
MmNhZi1hZmQwLTRlZGYtYTc0My1iMzUwYzIzZTMwN2QvZjY5MzQ2ZGYtMDNkZC0z
NmM3LTkxM2ItYzJmOTZiYzYwZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWNiZTJjYWYtYWZkMC00ZWRmLWE3
NDMtYjM1MGMyM2UzMDdkL2VjYmUyY2FmLWFmZDAtNGVkZi1hNzQzLWIzNTBjMjNl
MzA3ZC5jcmwwHwYDVR0jBBgwFoAUwnZy+KO6PDsEP1vhWw2QXNk6WFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2JlMmNhZi1hZmQwLTRlZGYtYTc0My1iMzUw
YzIzZTMwN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzApIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANx+pR8q8ABEigniBNIjtJfVU3Z8Zv3WW7yeclUKa+Dy6FzCB2jI9Q+b
5ol0JM7f/IZ3d6XIjiSbPoL4YD28IqzvCW4FWj3xPdPPfPwvlsI7OmaHXYVGv/e1
C2qxIC/SrcQ4jiqEokjKaLyP8hoUC7bd1t6DEOcWz4qm2ZkDCuDZb2M72Df72pjG
k6WYWKNMR2kIeod/TlVYZ9OgXea16pmpOgP1g2BoRkGirEnpoNRTkEq8H+/Bsc6D
CBxrxMLKUZLwCK6XOV9xpezefnEh9cE1HHU9WitgqtGTIvd1FFFNGq/JpqrBkXNr
uek0V+Ki0yS1pKr9eG9i/FLq9LDmupE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:59:38 2026 by rpki-client