Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa
File:                     303e7c7b-498d-38d1-b248-ea2a6afa1787.roa (raw, json)
Hash identifier:          m5wva4QWm5f1AcbKxAZhhFCY529O8gn8VeMo0IFX5Lk=
Subject key identifier:   7C:59:1B:29:54:3B:74:0F:80:58:4F:B2:0D:87:9E:40:51:26:45:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F225D16CB5817ACDB522A6A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        72.106.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:16:cb:58:17:ac:db:52:2a:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=982718d3-6882-47fc-a90f-698b3892e5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:59:dd:e0:9d:ed:88:70:b1:f7:6b:62:d3:
                    c7:ff:e6:a1:b7:58:4f:ed:01:5d:73:ec:d9:ab:a2:
                    c3:72:ac:b6:60:b2:67:2d:46:f3:c4:14:09:35:df:
                    1f:bd:ad:cb:48:fd:fa:59:5f:27:26:fc:93:6f:0f:
                    2d:a7:37:5a:7f:56:5d:e9:a7:15:6f:69:32:85:9b:
                    fa:13:fc:09:08:a7:57:cc:b4:1a:b2:88:4e:1e:e0:
                    fb:39:2a:4d:13:f9:02:06:d5:72:74:3d:0a:c1:ed:
                    37:a8:0c:18:43:8d:8d:af:e5:8b:90:a9:e7:67:99:
                    e8:54:10:20:2f:d3:40:c7:93:e8:26:18:0b:90:26:
                    66:c8:ce:31:c5:ef:0f:c3:a0:8f:86:c2:8a:98:21:
                    ee:e9:ce:08:82:23:cf:a0:d5:f1:63:40:26:93:da:
                    62:2d:f8:ef:cf:52:9b:a5:3f:61:3f:3a:21:68:88:
                    b2:e9:8d:f4:81:7f:94:cd:ed:4f:8c:37:41:44:2b:
                    1f:56:00:de:9c:10:3c:0c:14:04:72:42:8d:9f:17:
                    79:b3:b6:9b:26:78:5c:fe:3f:43:ad:ac:b8:b1:99:
                    b0:3b:e9:1d:fc:83:98:46:f7:5d:fd:5d:51:b1:c6:
                    cf:71:47:b1:4f:39:99:4e:86:8b:6b:90:8e:0d:f3:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:59:1B:29:54:3B:74:0F:80:58:4F:B2:0D:87:9E:40:51:26:45:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:60:9a:7a:78:82:2c:71:09:2e:ff:99:57:4b:55:3f:c0:19:
         f2:49:85:c0:cb:55:7c:9c:b7:64:d2:1c:15:48:d5:5c:73:78:
         61:d3:90:32:37:5e:24:3e:b4:68:fb:c9:00:c7:75:87:1b:81:
         d9:79:7e:da:59:5f:45:6d:99:76:be:7f:df:d6:35:1a:a7:3c:
         c7:23:0c:26:f9:06:1f:7b:e4:d3:e9:c3:1e:42:34:23:35:04:
         3d:c2:fa:d0:1b:7c:cb:3c:72:70:4b:33:50:cf:70:a5:4c:cd:
         5f:9b:a1:62:05:3a:26:74:ec:f6:2e:f8:99:0c:68:a1:72:52:
         a3:fe:be:6f:51:a2:f1:af:25:6f:75:af:bb:5d:6e:cb:0f:87:
         d7:d9:58:56:6f:69:9d:cb:b2:03:30:84:b5:72:ee:e7:92:f8:
         6d:70:2a:4d:be:cf:8a:fc:14:a3:2e:75:a1:07:06:db:6b:aa:
         3c:3a:02:9b:c4:73:20:bf:2d:5a:7e:56:b9:49:a2:66:86:74:
         30:f8:9f:9c:24:03:88:c4:ab:5d:5e:29:11:0a:f1:00:a5:ee:
         9c:85:6c:4c:2b:e6:fd:5c:a2:1c:cd:9b:3f:fa:0a:1c:94:72:
         58:74:9d:7e:9a:44:ad:43:62:c4:fb:e1:d9:f6:25:94:5d:2c:
         69:f4:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:43:12 2026 by rpki-client