Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa
File:                     87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa (raw, json)
Hash identifier:          KobxFgHaaZarTBFvjIk9e00mUh5M41Uz3qIu7THn/Y4=
Subject key identifier:   88:18:C5:D0:E4:89:26:CF:F6:28:93:AF:8A:AD:1A:35:F2:07:59:60
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584CCD0C935380BC4B7B4515A900
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     36407
IP address blocks:        147.72.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:93:53:80:bc:4b:7b:45:15:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=2893651d-d674-498a-aa10-37e07fbe5977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:a1:ab:a3:5a:ba:3d:ed:42:bc:77:5d:36:
                    0b:f9:5f:78:ed:da:3d:78:c2:c3:9b:ea:30:08:03:
                    b3:81:05:27:4f:1b:2a:0d:8e:1a:58:d2:05:4f:63:
                    0e:4f:03:59:80:1b:54:3a:e4:8a:24:f5:4e:1e:64:
                    96:d6:ec:41:d9:4e:57:ba:f0:b0:51:53:17:03:f6:
                    7a:8e:d6:a9:00:71:39:41:7c:aa:8b:87:9a:7c:be:
                    e6:86:3a:77:d9:e1:bc:7e:b2:83:a2:08:62:5e:e9:
                    a5:57:4a:74:fb:4b:8e:66:70:c4:68:b1:9d:d3:86:
                    7c:ee:8e:30:5d:12:9a:cf:f4:31:e9:c2:d1:be:c0:
                    ef:e2:fe:d6:76:4d:15:ed:e8:d6:59:9b:b6:e4:27:
                    65:5d:e5:23:63:2c:4f:67:0f:75:84:df:31:6a:49:
                    fd:9f:01:d0:59:93:1e:10:f1:fd:7d:b1:11:8e:30:
                    10:30:95:2f:b3:77:69:f2:da:4e:9a:13:96:5d:66:
                    d6:a9:76:fb:2b:83:85:15:8c:0b:a2:98:93:3c:09:
                    ff:2a:63:74:12:17:12:c2:fe:2f:a9:ea:a4:a8:e3:
                    1e:92:2c:3e:95:07:cf:35:31:0d:93:01:4d:69:80:
                    d9:0e:87:e9:d1:b5:52:04:bf:7b:e1:ff:ac:70:36:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:18:C5:D0:E4:89:26:CF:F6:28:93:AF:8A:AD:1A:35:F2:07:59:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.72.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:42:15:ae:db:f4:bf:34:bc:e4:57:a3:dd:06:2e:22:b5:7d:
         c0:fb:77:f6:f2:3a:70:20:f8:a9:0b:fa:1f:a4:f7:0f:15:28:
         2f:1a:bc:aa:8a:37:df:99:4d:77:72:3c:83:51:72:33:81:fc:
         ab:35:cc:c7:9d:06:f2:bd:4e:6d:72:b3:1b:14:b2:02:53:5f:
         c9:9e:0d:83:65:13:52:0b:c7:4e:47:c2:82:46:1b:f4:a2:49:
         13:1c:20:2d:c7:97:9d:ce:ab:a8:8b:2c:43:22:92:1f:29:f4:
         e6:20:f4:7a:c6:e4:a7:59:5e:83:97:38:31:85:5c:09:9f:9d:
         77:53:3f:4e:a1:1c:53:71:59:0a:04:18:94:29:a2:9e:01:77:
         56:44:69:aa:13:a5:68:92:07:2d:00:f2:5a:87:69:0b:a2:9d:
         e4:df:48:08:b3:c8:b5:5d:56:74:13:29:e2:de:51:8b:cc:dd:
         53:87:f7:bd:dc:17:4b:7b:e0:b6:76:81:e8:f4:76:c6:f3:29:
         12:4e:59:a9:68:20:d5:0c:f4:3d:cd:87:b8:5b:de:7f:09:2b:
         6b:78:7f:d1:1a:e3:47:4e:e1:e6:38:ab:51:8a:63:7c:8b:fd:
         03:b4:21:26:78:80:31:38:2a:15:33:b0:61:1b:38:5b:1f:e1:
         9f:20:54:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJNTgLxLe0UVqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz
MGQyMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
Mjg5MzY1MWQtZDY3NC00OThhLWFhMTAtMzdlMDdmYmU1OTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypWhq6Nauj3tQrx3XTYL+V947do9eMLDm+ow
CAOzgQUnTxsqDY4aWNIFT2MOTwNZgBtUOuSKJPVOHmSW1uxB2U5XuvCwUVMXA/Z6
jtapAHE5QXyqi4eafL7mhjp32eG8frKDoghiXumlV0p0+0uOZnDEaLGd04Z87o4w
XRKaz/Qx6cLRvsDv4v7Wdk0V7ejWWZu25CdlXeUjYyxPZw91hN8xakn9nwHQWZMe
EPH9fbERjjAQMJUvs3dp8tpOmhOWXWbWqXb7K4OFFYwLopiTPAn/KmN0EhcSwv4v
qeqkqOMekiw+lQfPNTENkwFNaYDZDofp0bVSBL974f+scDaUmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgYxdDkiSbP9iiTr4qtGjXyB1lgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4
YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvODdhNWY1NzEtM2NmYS0z
NGM2LThlYzItMTEwZWU3MTQwZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0
OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz
MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw
MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdCFa7b9L80vORXo90GLiK1fcD7d/byOnAg+KkL+h+k9w8VKC8avKqK
N9+ZTXdyPINRcjOB/Ks1zMedBvK9Tm1ysxsUsgJTX8meDYNlE1ILx05HwoJGG/Si
SRMcIC3Hl53Oq6iLLEMikh8p9OYg9HrG5KdZXoOXODGFXAmfnXdTP06hHFNxWQoE
GJQpop4Bd1ZEaaoTpWiSBy0A8lqHaQuineTfSAizyLVdVnQTKeLeUYvM3VOH973c
F0t74LZ2gej0dsbzKRJOWaloINUM9D3Nh7hb3n8JK2t4f9Ea40dO4eY4q1GKY3yL
/QO0ISZ4gDE4KhUzsGEbOFsf4Z8gVIE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:26 2026 by rpki-client