Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09e77efd-2836-37ab-b485-e24e8cd59e22.roa
File:                     09e77efd-2836-37ab-b485-e24e8cd59e22.roa (raw, json)
Hash identifier:          NP/lwseV1QTxt5wY2MS86pb63DkmPVgTVsEtEy67lWY=
Subject key identifier:   B3:11:81:AB:AE:2C:79:0C:76:EA:09:DC:53:94:F8:70:B3:91:27:24
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CD4074C899752A15441AAAE00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09e77efd-2836-37ab-b485-e24e8cd59e22.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     834
IP address blocks:        72.244.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:4c:89:97:52:a1:54:41:aa:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=74d2bc51-ac3d-494a-bd55-21d173f82eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:23:52:58:5a:2e:47:4e:76:a9:76:25:f4:10:
                    f4:3f:bc:69:bd:5d:a9:7f:29:c8:bf:db:0c:5d:4b:
                    20:1f:17:4a:04:5d:31:3a:1f:6d:c6:38:62:e6:a0:
                    f5:08:76:3b:e8:ee:e6:90:ac:7a:c7:63:06:c8:23:
                    d3:bb:64:f7:e4:85:2e:7f:91:72:1e:ae:51:91:17:
                    4e:5d:c1:43:93:b9:de:7d:78:be:ba:8e:9c:e6:9a:
                    b3:2a:84:b9:f0:6d:ce:07:13:79:81:a7:e6:33:fc:
                    b7:8d:bd:c9:ce:87:9c:fc:6e:7f:3a:82:f8:93:6a:
                    e7:59:e3:5b:aa:97:85:73:8a:6b:12:90:f4:ea:03:
                    51:92:c7:ec:74:ff:e1:78:8e:0e:36:4e:1d:5f:e5:
                    31:ad:4c:22:29:92:cd:b4:1f:8d:8f:f5:5a:c8:ca:
                    e9:b4:f3:67:82:06:7d:47:6a:53:2b:9d:f3:2e:1b:
                    d6:f8:3f:3b:23:03:9a:c9:9e:15:d0:51:2c:2d:4b:
                    a0:de:14:80:35:c7:44:18:fe:c6:22:05:99:94:3d:
                    8e:ea:e8:46:77:54:47:d7:64:63:d7:11:b7:2f:7f:
                    78:c1:f5:29:ff:d4:30:92:0f:30:c6:f4:fb:93:29:
                    77:6f:b3:02:1d:5b:b6:aa:4a:00:d8:b5:a2:05:9f:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:81:AB:AE:2C:79:0C:76:EA:09:DC:53:94:F8:70:B3:91:27:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09e77efd-2836-37ab-b485-e24e8cd59e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:27:05:27:75:2d:b9:87:cc:86:15:d6:7e:06:c7:07:ef:72:
         bc:0e:5f:96:fe:ab:47:42:64:a5:1b:f7:eb:2f:41:d5:cc:7f:
         28:2d:5f:91:28:21:e5:63:4b:98:a0:27:b2:80:e3:ea:97:f9:
         65:f2:c8:24:48:d5:42:ed:15:bf:c1:e2:5e:b5:ba:14:59:f6:
         6b:a7:5a:c2:ba:23:38:ae:42:63:c2:8a:92:ea:47:29:1c:73:
         84:0d:66:ed:d6:e8:83:55:6b:0e:dc:14:a2:f1:2c:52:00:fb:
         e4:d9:b0:bd:6c:dc:88:e1:18:5e:59:b1:77:d8:3d:6b:e4:40:
         09:d9:6a:d6:17:5c:e0:a0:5b:9c:3e:9d:89:ac:f5:9c:dc:bf:
         ff:21:db:e0:35:0b:e0:71:b4:5d:2c:a3:bc:ae:9f:7c:00:f4:
         46:0b:21:6d:07:ba:53:27:bf:b0:8d:35:1c:3a:ec:f1:87:8f:
         ab:b8:ac:08:cf:82:77:98:b4:b5:2c:66:53:77:1d:64:45:e4:
         70:0a:cf:e8:35:b3:55:f6:d9:c9:fa:58:20:fb:44:09:c7:fa:
         f1:f3:37:ea:c2:71:bf:29:41:c4:2d:10:7f:db:79:07:ca:3f:
         a1:a4:3b:8c:e7:32:58:e9:1a:e0:0c:6d:ef:9f:54:88:ea:11:
         11:17:90:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB0yJl1KhVEGqrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
NzRkMmJjNTEtYWMzZC00OTRhLWJkNTUtMjFkMTczZjgyZWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyNSWFouR052qXYl9BD0P7xpvV2pfynIv9sM
XUsgHxdKBF0xOh9txjhi5qD1CHY76O7mkKx6x2MGyCPTu2T35IUuf5FyHq5RkRdO
XcFDk7nefXi+uo6c5pqzKoS58G3OBxN5gafmM/y3jb3Jzoec/G5/OoL4k2rnWeNb
qpeFc4prEpD06gNRksfsdP/heI4ONk4dX+UxrUwiKZLNtB+Nj/VayMrptPNnggZ9
R2pTK53zLhvW+D87IwOayZ4V0FEsLUug3hSANcdEGP7GIgWZlD2O6uhGd1RH12Rj
1xG3L394wfUp/9Qwkg8wxvT7kyl3b7MCHVu2qkoA2LWiBZ/+awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMRgauuLHkMduoJ3FOU+HCzkSckMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDllNzdlZmQtMjgzNi0z
N2FiLWI0ODUtZTI0ZThjZDU5ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0nBSd1LbmHzIYV1n4GxwfvcrwOX5b+q0dCZKUb9+svQdXMfygtX5Eo
IeVjS5igJ7KA4+qX+WXyyCRI1ULtFb/B4l61uhRZ9munWsK6IziuQmPCipLqRykc
c4QNZu3W6INVaw7cFKLxLFIA++TZsL1s3IjhGF5ZsXfYPWvkQAnZatYXXOCgW5w+
nYms9Zzcv/8h2+A1C+BxtF0so7yun3wA9EYLIW0HulMnv7CNNRw67PGHj6u4rAjP
gneYtLUsZlN3HWRF5HAKz+g1s1X22cn6WCD7RAnH+vHzN+rCcb8pQcQtEH/beQfK
P6GkO4znMljpGuAMbe+fVIjqEREXkDc=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:01 2026 by rpki-client