Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa
File:                     2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa (raw, json)
Hash identifier:          VSAZ7KS9+8qMSZE4TDjlHq8F4uO2hZTQKyi9t3mRCLw=
Subject key identifier:   3B:71:F9:5A:C7:86:CD:D0:E8:AF:FE:E3:D7:E0:1E:C3:75:16:77:EC
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584DFBD5E813B146EE4D967C4400
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     394437
IP address blocks:        72.20.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:e8:13:b1:46:ee:4d:96:7c:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=549bf6c6-fa59-40eb-bf6b-4ac7d29f7121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2e:e1:fd:b6:9b:53:e6:cc:c5:02:18:e0:47:
                    2d:23:8e:82:a4:49:e6:d3:92:9d:55:7e:36:20:9f:
                    91:2f:05:f8:2a:03:de:b4:69:f5:b2:31:90:09:21:
                    19:9b:08:54:ab:e4:20:35:9d:c4:ec:31:dd:5d:90:
                    c7:d4:27:7c:e1:54:3d:82:d3:df:78:40:54:c4:20:
                    36:d3:de:cc:41:a2:94:8f:85:47:ff:41:65:a4:02:
                    cf:b1:cf:2c:37:5e:3c:c4:72:81:89:27:83:0b:7a:
                    e2:1b:dd:a9:f6:6a:b6:55:d2:0e:71:c3:a8:c4:d8:
                    81:7f:a9:70:bb:cb:73:9c:0a:47:40:b1:d8:75:13:
                    b0:e8:b3:87:d0:f6:70:e0:42:45:60:52:25:df:69:
                    1d:9e:e7:02:02:36:e7:e9:0f:71:0f:a8:02:27:7a:
                    3d:65:ed:35:55:13:f8:4f:a7:15:5b:9a:e6:6f:d4:
                    c1:32:6c:c7:9f:04:8a:39:80:60:15:d5:85:7a:88:
                    3d:fc:44:b7:e3:85:9a:52:d9:70:33:75:5d:fc:c9:
                    12:fc:75:02:14:22:3b:0b:5b:78:e4:68:23:52:13:
                    ff:12:7c:75:da:e3:d8:75:87:70:00:cf:e6:c6:c4:
                    93:3d:4d:da:6b:66:2e:dc:ae:3a:16:21:e5:06:e8:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:71:F9:5A:C7:86:CD:D0:E8:AF:FE:E3:D7:E0:1E:C3:75:16:77:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:98:6f:1c:17:a3:0b:48:29:1c:73:b5:fb:91:92:ec:8b:c8:
         7f:5b:16:a9:e5:83:e0:f8:4f:0e:2e:fd:35:f2:e2:40:f8:a7:
         14:e6:01:53:5c:ab:38:6b:b5:5a:c6:a5:bd:2c:05:2d:86:10:
         9d:f7:1b:18:93:1d:6e:f0:76:69:53:a2:a4:3a:21:b1:fa:69:
         78:19:48:70:68:fb:2c:28:6d:f9:82:f4:62:87:28:4a:84:12:
         d9:cf:bb:35:01:1e:fa:24:ee:fd:bc:47:b4:fc:3b:44:13:e5:
         c2:97:a8:38:da:13:08:9b:29:ec:9b:6f:97:02:33:a5:14:29:
         c7:ba:68:61:b2:ac:5f:59:b7:92:c1:cc:e9:15:8b:c5:f8:e0:
         4e:b1:e4:f8:54:04:12:98:30:70:52:b8:f9:2c:46:c1:27:0a:
         48:96:8f:d1:ee:e5:52:e1:8d:e9:fc:e6:c7:53:e7:ad:a6:00:
         b3:77:da:01:8d:2e:03:d7:02:31:0a:03:ea:b5:fd:14:ed:9d:
         e1:f4:93:94:a8:f1:7f:4b:d2:b1:6d:fb:98:37:d3:f2:b6:61:
         94:9b:c1:21:68:e2:de:ee:47:1e:02:b6:8c:73:91:c1:2a:86:
         24:e0:20:90:81:32:f7:b1:b5:8a:14:24:20:1d:36:13:a7:58:
         6a:d6:67:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371egTsUbuTZZ8RAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
NTQ5YmY2YzYtZmE1OS00MGViLWJmNmItNGFjN2QyOWY3MTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky7h/babU+bMxQIY4EctI46CpEnm05KdVX42
IJ+RLwX4KgPetGn1sjGQCSEZmwhUq+QgNZ3E7DHdXZDH1Cd84VQ9gtPfeEBUxCA2
097MQaKUj4VH/0FlpALPsc8sN148xHKBiSeDC3riG92p9mq2VdIOccOoxNiBf6lw
u8tznApHQLHYdROw6LOH0PZw4EJFYFIl32kdnucCAjbn6Q9xD6gCJ3o9Ze01VRP4
T6cVW5rmb9TBMmzHnwSKOYBgFdWFeog9/ES344WaUtlwM3Vd/MkS/HUCFCI7C1t4
5GgjUhP/Enx12uPYdYdwAM/mxsSTPU3aa2Yu3K46FiHlBujoowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtx+VrHhs3Q6K/+49fgHsN1FnfsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMmUwMDQwNGMtNmYwZS0z
OTZjLWFkM2EtYzAwYWU3OGY3ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGYbxwXowtIKRxztfuRkuyLyH9bFqnlg+D4Tw4u/TXy4kD4pxTmAVNc
qzhrtVrGpb0sBS2GEJ33GxiTHW7wdmlToqQ6IbH6aXgZSHBo+ywobfmC9GKHKEqE
EtnPuzUBHvok7v28R7T8O0QT5cKXqDjaEwibKeybb5cCM6UUKce6aGGyrF9Zt5LB
zOkVi8X44E6x5PhUBBKYMHBSuPksRsEnCkiWj9Hu5VLhjen85sdT562mALN32gGN
LgPXAjEKA+q1/RTtneH0k5So8X9L0rFt+5g30/K2YZSbwSFo4t7uRx4CtoxzkcEq
hiTgIJCBMvextYoUJCAdNhOnWGrWZy0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:01 2026 by rpki-client