Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa
File:                     37671870-1971-3272-bf72-f2be3bd65b13.roa (raw, json)
Hash identifier:          ljop6jwjAypy5JHenVqK3Bam/hQLwE03AJ1+VoA4yJs=
Subject key identifier:   18:27:BC:A4:1C:9F:C6:75:58:D0:2C:7A:3E:2F:3D:07:41:20:2F:E5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB57D78275F7D15ACD48C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.108.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:7d:78:27:5f:7d:15:ac:d4:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=4db626e4-52d6-4acf-b0ac-777bc06a2fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fa:ac:81:ca:99:89:1d:17:42:d1:2d:7b:6d:
                    e6:2e:5a:b6:33:98:62:66:83:14:26:55:b7:56:ef:
                    d0:a3:0c:d3:a0:e7:9d:44:59:b0:31:0e:6d:79:13:
                    69:87:28:02:6b:f8:13:33:db:f7:bc:9c:14:b2:92:
                    1a:d9:c3:70:79:44:31:13:b9:a3:77:b8:e3:65:bc:
                    7c:28:55:dc:83:54:0d:aa:94:86:a8:ba:32:de:eb:
                    51:12:8c:c3:38:65:e8:aa:99:0e:24:e1:49:fc:6c:
                    45:13:e3:1c:04:6c:db:7e:7e:b9:5b:de:fa:bc:8f:
                    a7:f9:db:0b:f3:a6:fd:1a:18:af:99:5f:1e:95:b6:
                    68:b3:fd:df:76:04:a4:e2:c2:f2:22:e8:f4:0f:2f:
                    ba:8f:16:0c:30:c0:02:d5:4a:b4:88:7e:fc:58:64:
                    3b:0f:35:57:7c:3e:2e:b8:c2:d4:a7:32:42:43:63:
                    ae:24:3e:f0:ba:fb:f9:09:36:ef:be:3b:c1:1e:62:
                    62:00:35:40:dd:02:80:60:47:03:ba:f1:0c:66:21:
                    69:7b:65:d3:11:a6:5d:1d:19:87:4c:5a:d1:fe:c7:
                    04:16:86:cb:dd:e4:89:f6:14:b3:25:46:51:b7:72:
                    d9:be:e5:eb:96:59:55:56:e2:46:77:a7:42:4b:34:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:27:BC:A4:1C:9F:C6:75:58:D0:2C:7A:3E:2F:3D:07:41:20:2F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37671870-1971-3272-bf72-f2be3bd65b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:20:34:04:d7:f7:85:38:34:2d:c7:c5:5b:a6:b8:e6:12:12:
         fd:21:9c:6f:06:b5:8f:f7:9e:59:a1:93:e9:86:f7:26:64:0e:
         1d:39:0a:b2:c5:c2:01:a8:b9:92:a6:b8:a2:da:10:9c:7a:b2:
         6f:c0:17:03:0c:c8:4f:93:30:95:5f:30:d4:40:e1:07:b0:60:
         f6:8f:6d:d2:6d:b7:fa:40:75:82:02:a8:a2:5e:1e:41:73:ec:
         09:e9:89:59:4c:79:ce:41:1b:a9:ad:5a:cd:f6:d3:a5:3d:79:
         83:34:de:22:7d:b0:ed:f3:29:65:16:ac:3c:1d:66:43:38:3f:
         6f:c0:26:8f:eb:43:0e:1b:ec:33:99:a7:98:1f:57:8a:46:19:
         a7:8b:aa:5f:0a:39:d2:f3:ee:18:66:2b:bf:bb:c3:2b:94:cd:
         4a:49:14:dd:86:6d:03:f2:57:93:45:2a:d9:a3:fe:56:ca:04:
         78:4d:09:76:e2:ac:52:a3:d6:f4:9d:ad:2c:3d:e9:42:2f:7a:
         e8:39:3b:a9:9a:fa:69:7f:04:be:96:a9:67:67:48:a6:cc:ae:
         e6:d6:85:0f:17:b7:da:af:0e:62:94:46:ff:6b:c8:3e:08:23:
         aa:9d:a1:a6:38:2c:f6:0f:71:8f:6e:a6:c4:e9:16:ee:5d:27:
         9d:9d:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:54:43 2026 by rpki-client