Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/73e070ad-ae12-346b-bf5e-06f581d4e225.roa
File:                     73e070ad-ae12-346b-bf5e-06f581d4e225.roa (raw, json)
Hash identifier:          A4fzLNZ+eGK3FGeiK2a3Se/h1HYIYfHvWe5VahhkGrU=
Subject key identifier:   0E:97:66:59:B1:20:DA:4A:4C:E9:40:40:67:66:E9:F5:03:5B:B1:EB
Certificate issuer:       /CN=41810617-fa0e-48cc-badf-1b017add1f3e
Certificate serial:       010D0C9F4328584CEBC22AB2135BBC8EB624C100
Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/73e070ad-ae12-346b-bf5e-06f581d4e225.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     23471
IP address blocks:        67.219.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:2a:b2:13:5b:bc:8e:b6:24:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=72f5c30f-49a9-44a3-a0c9-474dd7106ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:bf:66:23:7c:a7:a3:1a:a6:40:9a:77:be:
                    67:8f:a2:90:6d:bf:49:3e:54:99:af:dd:79:46:78:
                    53:e8:bc:22:ce:d8:6d:56:0a:5b:b0:5c:19:17:90:
                    56:1c:4d:1c:cb:b7:d5:d3:2c:66:bd:a7:ad:f3:ce:
                    79:c7:66:83:7c:4c:78:dc:92:0c:dc:6d:0f:04:22:
                    36:22:36:ec:aa:47:dd:08:f1:7a:3e:b8:ec:05:5d:
                    56:60:e2:ff:98:a3:cd:3b:a7:b7:cb:b4:90:b9:2b:
                    88:8c:bf:84:ef:36:44:73:5c:10:a5:a3:a2:46:69:
                    34:be:9b:94:89:f5:f0:a8:89:00:6c:1e:fe:81:2e:
                    6d:45:26:d6:30:0e:2d:01:0f:bc:50:48:b4:29:48:
                    1d:a0:e5:ab:7f:4e:92:8b:f8:cf:0d:b0:ac:15:94:
                    03:c4:65:1b:5e:78:40:37:3f:14:7c:40:bf:47:7d:
                    06:20:03:4a:9a:74:97:dd:13:80:d1:00:b4:78:42:
                    9f:41:10:b6:7a:a7:32:42:21:53:76:c4:c4:ad:14:
                    93:60:88:41:a7:f7:6d:b9:f2:55:8a:78:f4:42:5e:
                    4a:d6:80:5e:70:aa:ec:4e:ba:37:f7:b6:97:a3:c8:
                    a8:cc:a0:7d:51:c2:d9:08:b3:84:5a:2f:2b:49:10:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:97:66:59:B1:20:DA:4A:4C:E9:40:40:67:66:E9:F5:03:5B:B1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/73e070ad-ae12-346b-bf5e-06f581d4e225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6c:a1:ac:5a:c1:f1:d7:53:04:98:2d:40:fc:59:5a:e6:df:
         2d:d8:b8:64:6b:f8:da:9a:22:fa:05:91:80:55:7d:ca:26:47:
         3a:05:da:03:9c:2f:61:b4:71:22:a2:5b:b1:e3:5e:1d:57:ab:
         d8:32:ba:f9:06:e9:c6:93:f8:2d:c4:4f:27:be:21:57:d5:70:
         da:1b:f7:58:25:2e:4f:0a:d1:8f:9f:f6:26:b5:ea:c3:c8:50:
         de:58:33:80:a9:20:52:38:14:b0:13:d9:96:9d:63:4d:7a:20:
         c4:da:8d:5b:fe:12:a6:64:3e:0e:73:c4:aa:bb:26:ac:34:c6:
         4c:64:de:e0:ed:14:d1:6a:28:ef:71:61:ec:ab:82:37:cf:5c:
         f4:cf:24:dd:a9:3c:a9:53:62:b1:bb:a6:e9:e5:8f:13:fb:be:
         03:2f:f1:b5:22:09:33:25:d3:88:f0:e4:05:f6:5b:86:5d:17:
         c5:f5:2e:ed:12:3c:ec:b7:30:01:f4:ea:d0:77:2a:6c:55:8a:
         c3:f1:c9:2c:2a:0d:e8:60:71:4b:bb:b1:d5:cb:cc:f5:8d:94:
         f2:f8:91:59:79:51:3f:fd:43:25:44:ce:b9:4b:ac:b4:0d:24:
         bd:d6:48:e6:16:2f:f7:8a:88:15:89:50:59:d6:9f:c8:e4:80:
         c7:f7:93:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwiqyE1u8jrYkwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE4MTA2MTctZmEwZS00OGNjLWJhZGYtMWIwMTdhZGQx
ZjNlMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
NzJmNWMzMGYtNDlhOS00NGEzLWEwYzktNDc0ZGQ3MTA2ZGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6O/ZiN8p6MapkCad75nj6KQbb9JPlSZr915
RnhT6LwizthtVgpbsFwZF5BWHE0cy7fV0yxmvaet8855x2aDfEx43JIM3G0PBCI2
IjbsqkfdCPF6PrjsBV1WYOL/mKPNO6e3y7SQuSuIjL+E7zZEc1wQpaOiRmk0vpuU
ifXwqIkAbB7+gS5tRSbWMA4tAQ+8UEi0KUgdoOWrf06Si/jPDbCsFZQDxGUbXnhA
Nz8UfEC/R30GIANKmnSX3ROA0QC0eEKfQRC2eqcyQiFTdsTErRSTYIhBp/dtufJV
inj0Ql5K1oBecKrsTro397aXo8iozKB9UcLZCLOEWi8rSRDtuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA6XZlmxINpKTOlAQGdm6fUDW7HrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MTgx
MDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAxN2FkZDFmM2UvNzNlMDcwYWQtYWUxMi0z
NDZiLWJmNWUtMDZmNTgxZDRlMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDE4MTA2MTctZmEwZS00OGNjLWJh
ZGYtMWIwMTdhZGQxZjNlLzQxODEwNjE3LWZhMGUtNDhjYy1iYWRmLTFiMDE3YWRk
MWYzZS5jcmwwHwYDVR0jBBgwFoAUeiaByQnxzDi33/6h0CBtTQq8+HowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80MTgxMDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAx
N2FkZDFmM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9uKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNsoaxawfHXUwSYLUD8WVrm3y3YuGRr+NqaIvoFkYBVfcomRzoF2gOc
L2G0cSKiW7HjXh1Xq9gyuvkG6caT+C3ETye+IVfVcNob91glLk8K0Y+f9ia16sPI
UN5YM4CpIFI4FLAT2ZadY016IMTajVv+EqZkPg5zxKq7Jqw0xkxk3uDtFNFqKO9x
YeyrgjfPXPTPJN2pPKlTYrG7punljxP7vgMv8bUiCTMl04jw5AX2W4ZdF8X1Lu0S
POy3MAH06tB3KmxVisPxySwqDehgcUu7sdXLzPWNlPL4kVl5UT/9QyVEzrlLrLQN
JL3WSOYWL/eKiBWJUFnWn8jkgMf3k0c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:42 2026 by rpki-client