Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa
File:                     ce773cd7-a29f-364b-b715-1a31d4511544.roa (raw, json)
Hash identifier:          dXTEfb8n3h7s/DGgUmACidiMYQovJqWt4RXFpMAAX4A=
Subject key identifier:   83:3B:DC:E2:6F:FE:FA:FE:36:7B:33:9F:C1:13:09:FA:2E:8B:F5:E7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447F6A4F73A7CB12677778
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        72.31.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7f:6a:4f:73:a7:cb:12:67:77:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=364c086c-65c7-48b0-aca1-ab247744bb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e3:d8:d1:be:84:f7:05:ae:54:f0:f6:94:58:
                    50:76:cf:27:51:e8:dc:86:e4:e7:28:70:59:ca:5c:
                    a6:fd:fe:47:17:11:27:04:c0:41:f9:88:a2:ba:20:
                    fb:ac:a1:5d:b1:dd:75:b3:99:3f:5e:31:58:07:38:
                    c8:91:d0:eb:4e:d8:a2:1a:5f:79:e3:6a:29:4a:02:
                    f9:40:fa:4f:ce:09:b3:f5:6a:56:81:71:a8:ba:4d:
                    ef:0f:3b:10:bf:06:d0:46:6d:8b:0f:87:8f:cb:63:
                    09:5e:52:c8:89:05:4d:b6:19:23:d7:21:aa:0c:6d:
                    96:7d:93:bc:cc:1d:3f:8d:62:46:57:c3:b3:bd:c4:
                    3c:30:28:76:30:91:30:73:a0:27:ef:80:06:c4:28:
                    4a:76:f6:fd:cf:64:60:1b:d2:77:73:21:3b:0a:63:
                    bd:88:07:f3:7a:04:c8:bd:0f:f9:5e:da:87:26:d5:
                    18:2e:2a:07:58:62:93:ff:b0:06:6d:40:af:c4:aa:
                    da:b9:f8:95:b6:c3:2c:46:34:e4:d7:7f:85:01:49:
                    62:e7:8b:69:44:03:e2:6f:5e:99:33:c3:eb:45:2a:
                    25:de:9b:da:d8:fb:72:40:84:6d:f3:c9:f1:43:8d:
                    25:35:ac:81:ed:71:15:51:dd:be:37:43:7f:85:8a:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3B:DC:E2:6F:FE:FA:FE:36:7B:33:9F:C1:13:09:FA:2E:8B:F5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3a:5e:d9:3f:57:60:7c:0d:3a:40:2a:9d:ad:6d:69:ec:ff:
         7e:5e:87:af:34:ac:6b:a4:0d:a7:10:07:c1:ed:66:cc:62:26:
         56:5b:b3:c5:04:eb:b6:de:cc:5d:c0:19:88:05:5a:7d:ba:7f:
         67:ee:f3:d9:46:5b:03:a8:09:a9:a9:81:89:ce:2e:65:0d:8f:
         c2:c7:e9:dc:6f:89:2c:65:23:78:20:8d:14:7a:4a:79:3c:1d:
         f5:a6:57:10:65:1b:a2:56:d0:69:5c:d9:51:4e:04:db:15:48:
         4e:43:ec:fd:63:54:50:06:89:5e:00:e7:ae:c5:a9:25:1d:5d:
         77:9e:b8:3f:60:23:d7:0e:b9:0b:e1:47:20:ad:89:ee:17:25:
         d0:61:b5:fb:4a:e6:29:21:03:bb:56:7d:85:4e:75:c9:80:1a:
         fe:0f:02:53:66:d0:8e:c1:78:2e:74:78:fc:10:77:0c:63:e8:
         1a:78:b3:d2:50:52:69:62:2d:17:04:1d:f2:ca:27:64:bd:61:
         e0:d1:75:04:3c:c6:b3:73:f8:e0:25:58:54:5e:e1:bb:5e:63:
         50:3b:a3:4b:1a:ea:7d:02:1a:f6:ee:0d:a1:3e:dd:b9:2a:a2:
         33:4b:e6:ef:4d:c4:a7:97:d9:64:2f:81:09:ef:69:58:4a:34:
         31:4e:47:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRH9qT3OnyxJnd3gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
MzY0YzA4NmMtNjVjNy00OGIwLWFjYTEtYWIyNDc3NDRiYjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ePY0b6E9wWuVPD2lFhQds8nUejchuTnKHBZ
ylym/f5HFxEnBMBB+YiiuiD7rKFdsd11s5k/XjFYBzjIkdDrTtiiGl9542opSgL5
QPpPzgmz9WpWgXGouk3vDzsQvwbQRm2LD4ePy2MJXlLIiQVNthkj1yGqDG2WfZO8
zB0/jWJGV8OzvcQ8MCh2MJEwc6An74AGxChKdvb9z2RgG9J3cyE7CmO9iAfzegTI
vQ/5XtqHJtUYLioHWGKT/7AGbUCvxKraufiVtsMsRjTk13+FAUli54tpRAPib16Z
M8PrRSol3pva2PtyQIRt88nxQ40lNayB7XEVUd2+N0N/hYrFPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIM73OJv/vr+Nnszn8ETCfoui/XnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2U3NzNjZDctYTI5Zi0z
NjRiLWI3MTUtMWEzMWQ0NTExNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGk6Xtk/V2B8DTpAKp2tbWns/35eh680rGukDacQB8HtZsxiJlZbs8UE
67bezF3AGYgFWn26f2fu89lGWwOoCampgYnOLmUNj8LH6dxviSxlI3ggjRR6Snk8
HfWmVxBlG6JW0Glc2VFOBNsVSE5D7P1jVFAGiV4A567FqSUdXXeeuD9gI9cOuQvh
RyCtie4XJdBhtftK5ikhA7tWfYVOdcmAGv4PAlNm0I7BeC50ePwQdwxj6Bp4s9JQ
UmliLRcEHfLKJ2S9YeDRdQQ8xrNz+OAlWFRe4bteY1A7o0sa6n0CGvbuDaE+3bkq
ojNL5u9NxKeX2WQvgQnvaVhKNDFORyI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:40:20 2026 by rpki-client