Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36988ccc-2d55-34f1-a6ed-bd45c5d8b904.roa
File:                     36988ccc-2d55-34f1-a6ed-bd45c5d8b904.roa (raw, json)
Hash identifier:          6iIBfFk6O6yFhf6Fo8jMB5+EdlbPF0oRs3uMGx7/T2A=
Subject key identifier:   46:35:65:27:6B:B8:C9:DD:37:8C:C6:FF:CE:98:45:D3:A3:03:82:44
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F225D170553E9C31C42884830
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36988ccc-2d55-34f1-a6ed-bd45c5d8b904.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        72.108.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:17:05:53:e9:c3:1c:42:88:48:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=60db12f4-03c4-41fa-8137-8a5fc03e99bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:5a:0d:2d:a5:e6:82:25:f5:cc:63:c0:12:
                    08:25:77:0b:61:cc:89:84:c2:8e:4e:7e:4e:26:3c:
                    e6:2e:f8:54:f0:6a:17:5f:e4:b3:5c:d3:f2:73:6d:
                    d4:11:7e:40:0d:e7:62:bc:6c:3b:8f:7f:7f:b8:66:
                    ac:be:a5:35:a0:18:ac:dd:8e:0e:f4:de:bd:af:b2:
                    8b:fe:9a:45:13:76:e7:db:a3:0e:4d:98:e2:ba:e8:
                    df:36:e7:04:c2:98:ea:b6:3c:05:44:17:eb:27:26:
                    4d:c4:ff:35:85:77:91:a5:9c:da:0f:97:20:0a:14:
                    05:0b:5f:7e:90:4e:65:98:1a:b8:76:8e:6a:0e:8b:
                    fc:68:1f:57:8d:79:cc:16:a9:e2:78:e3:3b:6a:09:
                    c0:fa:f5:4f:f3:e4:1c:a3:f1:c7:ec:01:e9:64:42:
                    cf:56:88:94:ee:15:13:b1:5b:c7:2b:e4:fa:95:23:
                    f6:22:af:c2:4c:58:21:c0:24:18:56:07:ce:f8:22:
                    b2:16:c9:f5:a3:66:5c:20:4d:18:f4:f5:19:fa:05:
                    8c:24:74:0a:25:48:4c:23:8e:8d:f2:09:dd:5c:0a:
                    00:27:87:9f:e2:2f:cf:c7:34:f6:7d:f6:e9:7e:0c:
                    92:a4:00:bf:84:5b:5a:1a:9f:fb:c4:66:ab:04:6e:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:35:65:27:6B:B8:C9:DD:37:8C:C6:FF:CE:98:45:D3:A3:03:82:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36988ccc-2d55-34f1-a6ed-bd45c5d8b904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6a:ce:33:3f:66:76:24:3f:b3:38:f3:0f:9a:cf:77:76:db:
         55:71:ac:f5:e0:6d:5d:db:42:bb:d6:5c:fa:11:1a:a9:50:65:
         3e:07:09:23:9f:4d:0f:65:8f:ae:93:d7:da:ec:6b:65:92:9a:
         51:69:ac:2f:49:6b:c7:57:d5:51:56:30:24:0d:96:5d:1d:91:
         14:6b:f6:be:b2:55:da:7a:54:4a:37:dc:3f:6a:94:b7:b1:7f:
         de:fb:3a:eb:cf:7b:d0:83:87:cc:b3:91:fd:07:51:91:3d:3b:
         2d:9e:8c:5f:1b:13:e4:0b:5c:0b:2b:a9:6a:41:b4:23:5c:b1:
         29:54:09:10:28:ae:24:f9:9b:c9:65:aa:53:94:db:5c:88:23:
         03:85:50:0a:7c:2e:74:85:57:2a:f5:69:dc:b5:fa:bf:69:96:
         69:3b:a4:4c:08:93:87:1a:07:ca:50:b6:69:44:40:52:2d:37:
         4b:a2:fe:7c:dd:b7:ec:79:43:5c:19:0c:38:da:e0:43:3b:17:
         43:5d:a3:f4:be:de:65:53:0e:a1:70:25:19:d9:ee:c3:ab:10:
         28:e2:30:26:08:54:a9:b7:df:c2:f3:35:0d:25:62:21:80:0a:
         1d:39:3b:69:b6:16:f4:47:56:b1:d7:00:c4:bc:40:b8:57:02:
         af:cb:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:42:21 2026 by rpki-client