Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece7b30-7e8a-3b90-92ab-5d8d0549127e.roa
File:                     3ece7b30-7e8a-3b90-92ab-5d8d0549127e.roa (raw, json)
Hash identifier:          nzVgWto+Ou+9XED1cdC4aqae5nZHcNd9EenkkJiv234=
Subject key identifier:   0F:86:78:BE:1B:59:63:BC:F8:7F:D4:55:06:29:E4:5C:1B:C3:84:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA478A6153496FD04D5B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece7b30-7e8a-3b90-92ab-5d8d0549127e.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.107.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:47:8a:61:53:49:6f:d0:4d:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=0915ef8e-234d-4cb0-8bc7-cba7967c403a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:70:0f:3a:77:98:3f:64:39:5d:7c:31:57:
                    9e:3b:93:7e:1a:aa:6f:48:0e:a3:3c:0b:b2:19:d5:
                    7f:44:c2:9e:ba:a6:ba:3b:54:75:cd:1a:60:7d:f8:
                    18:1e:ef:1e:88:75:8d:8b:cd:82:87:0b:db:53:b2:
                    50:4c:87:51:cc:f9:a5:62:07:c9:c9:e8:87:80:e7:
                    ff:89:a7:69:7c:1e:52:a5:00:b3:24:82:2e:b0:ae:
                    2d:09:93:d2:ef:3e:e9:53:e9:8b:50:b4:3a:66:62:
                    6a:54:19:3f:76:37:89:d1:87:ca:31:aa:79:ea:33:
                    85:1e:44:ee:91:38:5f:93:83:9d:ea:86:47:60:21:
                    ce:89:4b:5c:48:54:2c:ba:1b:14:f5:e0:ee:45:bc:
                    89:44:39:56:b3:78:8f:79:31:3c:60:3b:3e:25:5b:
                    73:b1:1a:db:1b:7e:fe:ff:de:54:c2:e0:a3:f7:d5:
                    e5:a4:a4:9e:05:11:db:43:3a:37:a7:12:0f:d7:a1:
                    fc:c4:d9:21:f6:8d:da:ba:17:e7:cc:5a:c2:e2:3b:
                    a9:6c:c5:07:a1:16:4b:5d:19:a0:30:86:c3:1b:e7:
                    3b:63:bc:58:45:03:98:6c:f4:fa:44:ea:2e:9c:8e:
                    c7:ab:94:c3:c1:23:a0:b8:81:0a:d3:b1:86:54:c5:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:78:BE:1B:59:63:BC:F8:7F:D4:55:06:29:E4:5C:1B:C3:84:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece7b30-7e8a-3b90-92ab-5d8d0549127e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:af:be:5d:bd:6b:8a:b0:a3:c5:b1:64:07:5a:3f:c5:ac:7a:
         7e:3a:ba:25:e5:7f:38:45:97:04:16:28:f7:c0:57:06:c6:71:
         7e:78:1e:06:3e:1e:57:f7:b3:b9:b0:0c:15:f7:14:6e:02:df:
         4b:86:a5:24:41:e5:82:4d:28:8f:e8:98:10:ce:b5:53:ff:07:
         b2:d8:76:73:fb:d5:1e:bb:1a:52:0d:fc:ea:8d:99:2c:0a:cd:
         a1:08:82:ee:9e:61:51:25:4f:67:53:e5:26:53:0a:63:99:45:
         06:5f:a1:92:5f:4d:99:fd:d9:b5:e3:09:74:49:00:9e:bc:cf:
         3d:b2:bd:57:bc:b7:1e:73:e3:7e:c6:5d:ed:50:21:f3:e4:57:
         6e:6c:93:0f:3e:83:ff:fc:0f:75:c3:17:f5:94:c3:39:a9:f0:
         c2:e6:b2:34:93:3a:87:42:a2:26:8a:cc:ac:c2:71:dd:71:63:
         92:70:89:67:2b:db:09:eb:4f:aa:30:aa:b5:3c:47:fa:1b:f3:
         29:06:ea:4a:e5:72:17:a7:40:27:32:f3:c4:3b:d5:6c:4d:75:
         9c:cc:56:00:f6:b5:80:a2:ab:a0:65:a7:1f:a6:ea:fd:88:f7:
         73:0e:a1:d0:db:31:c6:66:f1:d5:af:c1:82:80:f9:6f:e5:94:
         49:18:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:18 2026 by rpki-client