Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f53971f0-265b-3fdb-8558-93fc75755329.roa
File:                     f53971f0-265b-3fdb-8558-93fc75755329.roa (raw, json)
Hash identifier:          aBSwqy+LPNoADX6AXrzxgAHPF05CRoMig9XygJzA+R4=
Subject key identifier:   AE:C9:84:61:AF:3C:40:5B:66:90:B4:D8:1F:2A:B6:A2:E5:05:67:6A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292E6693E4AC14CE3B16D30
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f53971f0-265b-3fdb-8558-93fc75755329.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        72.31.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e6:69:3e:4a:c1:4c:e3:b1:6d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=ca65f2b0-6c97-4327-9b88-541484549797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:73:47:79:46:b8:ad:95:d7:e0:f0:9e:6d:
                    64:e3:33:3a:79:24:79:83:3f:31:c6:54:1c:c4:58:
                    fc:28:62:d3:ff:85:f6:90:c8:8c:ef:83:ea:c4:b5:
                    14:28:ca:20:1b:26:bb:8e:8d:7a:63:68:19:d2:94:
                    e4:9e:86:3b:e4:78:56:53:ed:62:e9:d2:b4:c7:9b:
                    f4:dc:86:66:e1:24:1c:f6:f3:ae:73:50:2d:f5:40:
                    43:ef:00:1f:e1:4c:b6:84:36:cd:67:b2:22:d0:1e:
                    0b:ee:82:e4:db:4f:91:5e:10:1b:16:49:2f:57:fd:
                    84:98:c0:0c:ba:07:c1:c5:92:40:c1:97:85:56:95:
                    d9:c5:e6:90:1c:43:4d:5f:83:9d:24:ad:57:c2:32:
                    1f:3c:a0:24:9d:d2:d8:28:69:8f:86:4c:b5:db:bc:
                    cd:9a:54:e0:30:19:44:d9:ad:4e:16:1a:b4:fa:bd:
                    9c:ac:be:8d:86:3c:cf:03:1e:23:ce:c5:83:cf:a5:
                    16:16:d1:58:ab:ef:4c:93:14:62:80:4c:06:1c:4a:
                    8f:38:60:52:c8:be:da:b7:22:ce:9a:d2:59:11:b8:
                    6f:cb:a7:69:92:52:17:65:0b:10:5d:65:e2:a3:b8:
                    75:5f:7e:17:20:ba:04:eb:d8:a2:e4:87:f8:35:7a:
                    34:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C9:84:61:AF:3C:40:5B:66:90:B4:D8:1F:2A:B6:A2:E5:05:67:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f53971f0-265b-3fdb-8558-93fc75755329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b6:4d:25:80:0e:1b:00:62:14:0b:05:6a:be:f2:4e:58:41:
         73:25:4d:40:2e:49:3b:a3:df:8e:db:86:6a:48:e1:51:26:4a:
         fe:7e:af:2f:fe:06:71:c7:89:b6:b8:4b:17:d0:54:e5:e9:76:
         40:fb:f3:31:17:05:a0:9d:af:72:be:80:d2:56:bf:07:40:81:
         1b:6b:aa:82:76:f2:55:58:64:ff:fa:0c:aa:c4:c4:ee:c9:33:
         ff:f0:b4:ae:b8:90:ad:50:84:d7:15:cb:f1:fd:b8:0b:a8:0d:
         1c:45:5b:25:c6:45:26:b2:f1:fb:3c:30:06:a4:4c:e0:6b:24:
         63:6f:55:84:56:fd:97:e3:4a:22:60:a8:a5:00:0e:29:b6:69:
         48:5c:6c:de:63:f0:1b:52:07:93:99:3b:53:fb:e6:cc:0f:9a:
         6d:ad:54:66:10:0a:0f:06:ed:24:77:fd:cd:bc:12:65:b8:ba:
         7b:80:3e:83:44:d6:0d:81:f4:1f:2a:6b:d5:17:c2:aa:d7:98:
         dc:cb:89:91:f3:1f:87:c6:ea:4c:eb:76:ad:ad:76:a5:59:aa:
         0b:00:3b:e0:50:1f:f8:f3:ce:18:68:68:52:db:f7:52:45:3f:
         a0:7b:41:4c:0d:f4:11:56:f3:f8:85:48:22:19:ac:aa:4a:99:
         cf:5b:61:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuZpPkrBTOOxbTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
Y2E2NWYyYjAtNmM5Ny00MzI3LTliODgtNTQxNDg0NTQ5Nzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzedzR3lGuK2V1+Dwnm1k4zM6eSR5gz8xxlQc
xFj8KGLT/4X2kMiM74PqxLUUKMogGya7jo16Y2gZ0pTknoY75HhWU+1i6dK0x5v0
3IZm4SQc9vOuc1At9UBD7wAf4Uy2hDbNZ7Ii0B4L7oLk20+RXhAbFkkvV/2EmMAM
ugfBxZJAwZeFVpXZxeaQHENNX4OdJK1XwjIfPKAkndLYKGmPhky127zNmlTgMBlE
2a1OFhq0+r2crL6NhjzPAx4jzsWDz6UWFtFYq+9MkxRigEwGHEqPOGBSyL7atyLO
mtJZEbhvy6dpklIXZQsQXWXio7h1X34XILoE69ii5If4NXo0FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK7JhGGvPEBbZpC02B8qtqLlBWdqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjUzOTcxZjAtMjY1Yi0z
ZmRiLTg1NTgtOTNmYzc1NzU1MzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIO2TSWADhsAYhQLBWq+8k5YQXMlTUAuSTuj347bhmpI4VEmSv5+ry/+
BnHHiba4SxfQVOXpdkD78zEXBaCdr3K+gNJWvwdAgRtrqoJ28lVYZP/6DKrExO7J
M//wtK64kK1QhNcVy/H9uAuoDRxFWyXGRSay8fs8MAakTOBrJGNvVYRW/ZfjSiJg
qKUADim2aUhcbN5j8BtSB5OZO1P75swPmm2tVGYQCg8G7SR3/c28EmW4unuAPoNE
1g2B9B8qa9UXwqrXmNzLiZHzH4fG6kzrdq2tdqVZqgsAO+BQH/jzzhhoaFLb91JF
P6B7QUwN9BFW8/iFSCIZrKpKmc9bYXc=
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:28:52 2026 by rpki-client