Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1448236b-a0f9-30bf-838d-5181afbe3a3c.roa
File:                     1448236b-a0f9-30bf-838d-5181afbe3a3c.roa (raw, json)
Hash identifier:          VHx07DfdsDFzmSPTnVJ8If8Nz7h/3vMXXlXJ0EH0xZ4=
Subject key identifier:   15:D6:B7:B8:55:92:28:F0:04:39:BE:CA:47:2B:44:D9:87:AD:A4:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB578E5B62D4B971C3E1F50
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1448236b-a0f9-30bf-838d-5181afbe3a3c.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.108.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:78:e5:b6:2d:4b:97:1c:3e:1f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=cbfd40ce-7ca5-470f-b05a-c3b650ac7c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:0b:a2:64:80:e6:ef:b8:38:77:f0:f5:fa:
                    a9:2b:00:d2:c4:9b:5e:e9:5e:f8:c0:09:7e:db:c9:
                    84:bb:13:64:1c:ae:0c:1d:e1:3d:15:d4:24:8d:82:
                    88:53:d5:d9:93:57:6f:0a:d3:b4:e1:78:28:80:d5:
                    e0:34:94:e8:cd:f5:9e:15:ac:cf:dd:9a:be:37:02:
                    b6:b8:17:8f:e6:12:e3:32:82:73:d0:77:d2:c7:f3:
                    0d:de:d4:e4:03:80:34:23:c7:22:01:d9:68:6d:8d:
                    05:16:a4:95:b1:69:79:3e:85:d4:2e:d9:b9:ff:92:
                    0f:12:d8:c0:13:e9:2e:a5:82:e8:5c:3c:a1:46:82:
                    ea:dc:06:40:48:09:68:63:61:20:2b:fd:54:13:67:
                    cb:be:16:36:6b:ad:ed:fc:69:17:17:e0:b0:df:26:
                    68:9d:94:a0:eb:77:d2:63:db:03:50:0c:e3:bc:77:
                    20:26:8b:bf:07:25:e4:58:6f:81:df:e6:65:90:90:
                    73:a3:c7:c3:9b:40:d3:b2:b3:56:b4:d3:76:95:28:
                    d2:a3:28:2f:e4:d9:4c:d2:c7:4b:e2:5c:06:b0:b8:
                    25:3e:39:77:95:18:7b:e6:35:08:c9:8c:b0:1e:61:
                    f2:73:f9:7d:b9:d1:0c:35:39:97:80:e5:d3:ac:94:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D6:B7:B8:55:92:28:F0:04:39:BE:CA:47:2B:44:D9:87:AD:A4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1448236b-a0f9-30bf-838d-5181afbe3a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fc:3c:1f:3f:71:5e:6c:a9:1c:60:83:12:70:3c:28:42:28:
         e8:8c:a1:62:17:3c:13:47:c9:4f:f0:49:fa:9f:64:e5:18:23:
         75:50:65:38:7b:bc:4e:82:3c:65:d9:90:ea:77:d2:59:33:33:
         5e:9f:60:8a:4f:16:58:20:9d:2f:fc:42:d6:9f:70:86:55:ea:
         dc:fe:ca:ec:d7:78:46:ea:3a:23:5f:33:8f:81:81:bc:b1:7a:
         76:a1:0e:c5:41:ba:23:de:1e:2c:99:84:aa:07:89:d8:5f:f3:
         2a:d2:c8:ed:83:16:fb:62:7f:63:89:68:13:18:59:c2:ef:fa:
         95:43:5b:7b:64:04:cf:8b:43:9f:89:df:fa:de:6f:20:4c:31:
         b3:b6:c6:f4:ed:47:42:f3:20:db:ce:df:5b:ef:bc:25:0d:8b:
         09:4c:bb:f3:69:c7:29:9f:01:11:aa:74:dc:28:b2:18:a4:87:
         ed:61:05:8d:b5:28:cd:e8:af:55:c5:29:f8:1f:89:3c:fb:5a:
         a1:fa:6b:7f:fe:23:31:33:d6:0f:64:88:bd:ce:54:76:83:f5:
         54:ca:7f:50:a8:97:7c:21:cd:45:cd:ce:44:cc:88:67:5c:07:
         dc:f9:b0:1e:db:f4:51:d0:5a:87:c3:4e:2a:8b:d1:67:8f:ba:
         f6:b0:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:09:27 2026 by rpki-client