Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16be3853-b064-342d-93eb-a00fe73a5b33.roa
File:                     16be3853-b064-342d-93eb-a00fe73a5b33.roa (raw, json)
Hash identifier:          yHIrPHFq9DXJMAtDCoaNExW6y6ZNitbFi4wJy0weZgM=
Subject key identifier:   31:7C:A6:3B:D0:03:1F:16:8C:75:D4:E3:BD:54:79:42:14:58:C4:14
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA0151E6B3D9EE0BF21FED800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16be3853-b064-342d-93eb-a00fe73a5b33.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        72.206.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:1e:6b:3d:9e:e0:bf:21:fe:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=5c55ef31-7f8d-4c03-b04d-fdf058b44946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:2b:88:fb:00:6e:bd:32:a6:43:50:50:4c:
                    71:29:58:a4:c5:3c:63:0b:66:99:b2:5d:7e:de:33:
                    26:44:dd:33:1d:fe:95:88:c5:f3:8d:b8:09:d0:58:
                    cd:c7:65:c2:47:6b:73:e1:00:8f:b2:68:f7:3d:d9:
                    ee:8e:65:02:77:61:33:03:ab:8b:9d:7f:db:5f:09:
                    11:b6:50:f8:07:25:84:fc:d2:9c:61:cc:9a:b2:64:
                    5a:32:b7:69:7c:d2:47:59:4d:79:02:fb:07:7f:4b:
                    8b:9f:b6:31:d3:a5:22:9f:d4:dd:1e:0f:2b:d6:ec:
                    c0:d1:13:df:ff:42:54:23:6c:63:e2:d3:ac:0e:30:
                    7b:8f:5f:30:c3:90:9b:0d:c6:78:8c:77:a3:f4:22:
                    29:31:c4:39:8b:42:6b:43:bb:60:9c:a2:ea:72:35:
                    19:d5:6e:aa:3d:68:fa:51:01:6d:5a:81:ca:a9:8b:
                    7a:4c:04:8a:77:07:9f:12:de:08:76:dc:d3:de:5b:
                    9c:4f:ea:02:25:dc:1b:c6:ca:68:74:d9:6b:93:9e:
                    3a:de:0b:09:64:cc:68:7d:e0:9a:3f:fc:0d:47:31:
                    e3:83:82:c5:49:68:2d:a0:24:2e:f7:a5:f4:08:eb:
                    bc:3c:59:e8:76:a5:97:f7:a7:e0:4a:ab:cc:3f:aa:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7C:A6:3B:D0:03:1F:16:8C:75:D4:E3:BD:54:79:42:14:58:C4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16be3853-b064-342d-93eb-a00fe73a5b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.206.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e8:de:7d:a1:c2:db:70:f3:8b:b2:3f:16:75:12:b5:ad:a9:
         68:86:b8:3e:65:ae:ad:f5:08:b2:0d:6d:61:2d:be:d8:36:a9:
         fa:12:49:58:3b:6f:15:db:0f:09:47:70:81:47:8a:6e:1d:83:
         a0:eb:12:b9:ee:b8:07:ca:55:3b:4f:da:5b:da:84:b7:90:0f:
         2d:1b:1e:f9:03:0e:ce:d5:c0:4b:a7:b1:99:a8:e9:bb:be:14:
         61:e2:6e:de:0a:46:dd:fd:40:2e:cf:d1:e7:17:bb:73:f8:37:
         3b:10:90:d0:2a:ae:09:b3:0b:5d:11:c8:50:2a:c0:c1:ef:a1:
         cf:f6:05:ba:50:1a:ab:0d:f4:0c:99:6e:40:46:8d:55:3a:06:
         28:ca:10:94:70:53:97:9b:0a:ff:3b:66:d6:73:5b:9b:ff:71:
         ed:c7:a1:8c:b6:0f:63:e6:2a:bb:4c:19:d9:63:f8:3f:63:65:
         68:b9:e7:09:58:3c:60:9b:1c:9c:0c:7c:11:02:dd:f1:9a:6a:
         0c:df:30:f4:c6:0d:13:99:75:31:22:7c:d5:96:26:4a:63:09:
         db:d3:0c:25:c9:92:9d:ee:fc:b8:9a:7e:d2:6b:ec:b2:d1:a5:
         aa:ad:54:a0:93:79:26:cf:be:11:40:4d:39:78:bf:65:16:c7:
         39:e0:48:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFR5rPZ7gvyH+2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
NWM1NWVmMzEtN2Y4ZC00YzAzLWIwNGQtZmRmMDU4YjQ0OTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf8riPsAbr0ypkNQUExxKVikxTxjC2aZsl1+
3jMmRN0zHf6ViMXzjbgJ0FjNx2XCR2tz4QCPsmj3PdnujmUCd2EzA6uLnX/bXwkR
tlD4ByWE/NKcYcyasmRaMrdpfNJHWU15AvsHf0uLn7Yx06Uin9TdHg8r1uzA0RPf
/0JUI2xj4tOsDjB7j18ww5CbDcZ4jHej9CIpMcQ5i0JrQ7tgnKLqcjUZ1W6qPWj6
UQFtWoHKqYt6TASKdwefEt4IdtzT3lucT+oCJdwbxspodNlrk5463gsJZMxofeCa
P/wNRzHjg4LFSWgtoCQu96X0COu8PFnodqWX96fgSqvMP6pHHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDF8pjvQAx8WjHXU471UeUIUWMQUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTZiZTM4NTMtYjA2NC0z
NDJkLTkzZWItYTAwZmU3M2E1YjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjo3n2hwttw84uyPxZ1ErWtqWiGuD5lrq31CLINbWEtvtg2qfoSSVg7
bxXbDwlHcIFHim4dg6DrErnuuAfKVTtP2lvahLeQDy0bHvkDDs7VwEunsZmo6bu+
FGHibt4KRt39QC7P0ecXu3P4NzsQkNAqrgmzC10RyFAqwMHvoc/2BbpQGqsN9AyZ
bkBGjVU6BijKEJRwU5ebCv87ZtZzW5v/ce3HoYy2D2PmKrtMGdlj+D9jZWi55wlY
PGCbHJwMfBEC3fGaagzfMPTGDROZdTEifNWWJkpjCdvTDCXJkp3u/LiaftJr7LLR
paqtVKCTeSbPvhFATTl4v2UWxzngSEc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:31:41 2026 by rpki-client