Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ccbeb48-a599-3a87-8b75-9e14b89ff344.roa
File:                     0ccbeb48-a599-3a87-8b75-9e14b89ff344.roa (raw, json)
Hash identifier:          8q7XTQE2k6G+oxbSWWRsvD0nd/n8CVlMmd6q2V/EJlE=
Subject key identifier:   70:A5:14:C5:E9:1C:06:7A:31:AA:D6:7F:32:82:71:01:A6:ED:A0:91
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB57DE9F426D45A3DE185A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ccbeb48-a599-3a87-8b75-9e14b89ff344.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.108.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:7d:e9:f4:26:d4:5a:3d:e1:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=31d4a303-4450-4400-9c56-2a8557197145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:11:9c:f8:fc:5b:5d:4e:68:52:56:31:c7:
                    10:8f:3a:19:94:cf:d4:8a:7b:77:16:0f:d3:6d:57:
                    82:92:7b:2a:12:20:cb:f7:f6:01:9a:b4:b3:cb:70:
                    f9:37:0b:3a:86:24:51:d3:8e:b3:3a:9a:57:c4:32:
                    d4:b0:c5:48:41:6d:ce:e4:ae:ed:39:e6:93:9c:85:
                    c4:e3:ad:96:73:3f:ed:47:97:ef:cf:85:6c:31:b4:
                    f5:95:ea:26:77:c1:9b:1e:f3:f8:03:38:91:a0:8f:
                    67:48:51:3b:4c:ce:85:e0:76:a0:47:1e:29:4a:db:
                    42:1f:a9:ac:c8:05:7b:bf:09:ac:e3:34:c0:c1:aa:
                    b2:74:85:9f:6d:96:a1:41:ae:fc:cf:ff:a8:88:23:
                    1d:d1:12:95:7f:61:06:40:4e:6d:1b:1a:3e:e7:d9:
                    a1:6c:e9:8e:b9:dc:d1:a1:eb:7f:e7:7e:2b:26:63:
                    d0:51:25:27:34:b0:21:03:63:cc:a9:ae:10:a0:d5:
                    ad:0e:a7:35:99:39:fc:23:15:04:11:46:2f:44:f4:
                    ff:0f:ed:6b:f0:a4:95:82:c8:5e:5a:e4:0e:fc:ca:
                    e1:5f:87:77:41:95:78:b3:ff:c4:19:1a:69:88:9c:
                    65:dc:d0:40:b8:c3:5d:5a:e3:de:65:4e:40:26:07:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A5:14:C5:E9:1C:06:7A:31:AA:D6:7F:32:82:71:01:A6:ED:A0:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ccbeb48-a599-3a87-8b75-9e14b89ff344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:7a:70:1a:72:35:5e:27:2d:5d:ec:20:d8:c5:ad:16:bf:
         55:93:5c:df:70:95:e9:fc:24:07:35:b7:41:ca:0f:23:3f:8e:
         13:eb:f2:37:fd:9c:5a:56:be:96:91:bc:74:53:08:e5:7e:58:
         11:32:cc:d6:7e:cf:42:ab:33:d9:d3:43:21:df:5b:41:07:6d:
         de:f1:d1:b5:d0:c8:dd:25:60:b1:30:eb:93:10:47:fa:21:b8:
         2b:c9:17:6e:1e:04:22:0c:3b:fb:fb:37:b0:07:2d:b1:1e:a7:
         28:e4:ab:b3:dc:86:6e:f3:38:5e:66:e9:31:33:20:b8:8e:0a:
         b3:c7:98:ad:bf:ae:e0:f4:d2:61:77:ea:2f:57:b1:e9:ae:e9:
         24:7d:0d:ac:1f:c2:d8:bf:39:c2:9b:5d:4b:ef:c7:ad:70:d7:
         a8:56:ac:e9:f4:96:16:f1:48:1d:fc:75:30:7c:a9:e7:46:da:
         50:87:3f:56:c8:8a:3f:bf:37:2a:fa:f9:dd:9f:ce:e9:bd:5c:
         3d:dd:10:da:7e:b2:32:64:fc:d9:29:23:80:73:8f:e5:7d:0f:
         48:ea:eb:a1:d9:9e:97:fb:8e:65:3f:2e:83:d4:55:d5:fd:95:
         55:95:7f:92:f9:7f:6b:2a:d1:39:ef:c1:1c:d6:3f:e8:2e:a6:
         57:8b:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:35 2026 by rpki-client