Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa
File:                     458603c9-3531-346e-9347-36a9d0e900eb.roa (raw, json)
Hash identifier:          xPHHjXxCNjzv40/CgT57rg2f334L13WUHxq7DX04ZO0=
Subject key identifier:   85:DA:6B:D0:81:0F:9F:AC:34:1E:90:15:B7:5E:CF:34:92:9C:63:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA477EFFF12A1256414F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.107.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:47:7e:ff:f1:2a:12:56:41:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=33b864d6-1001-4531-8785-bea42e149291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:67:3e:2a:ac:fd:da:d8:0c:38:ed:c2:e0:
                    2c:b1:c8:26:a3:4f:be:74:af:f0:e2:83:89:e2:1c:
                    e4:7c:ce:4e:1e:02:3c:51:6e:96:be:53:8c:f8:c1:
                    6d:b4:60:a8:96:c7:da:86:1c:75:a0:41:30:85:6a:
                    fc:26:42:26:82:2f:58:57:97:1b:10:13:37:9c:5e:
                    c3:ef:bd:30:24:57:a5:32:dd:4b:1b:c6:75:b2:ae:
                    0a:d5:81:1b:2e:9e:c1:9a:80:3f:4e:24:38:de:8b:
                    92:f0:81:7f:13:c9:cb:f0:7c:35:51:24:0c:4e:07:
                    fe:69:14:14:bf:f1:b2:cb:23:af:a4:c5:aa:9f:2e:
                    2f:4e:20:ec:11:bb:7a:62:a7:97:5e:d8:d9:00:cc:
                    18:55:56:bf:1c:c6:2b:51:b6:30:4a:ee:f7:71:a8:
                    18:48:2d:a6:29:a7:c4:80:66:33:73:97:44:6d:4b:
                    4f:1e:2f:f2:fa:8a:a2:b4:de:de:dd:0e:18:25:26:
                    4b:99:39:73:c8:2c:ee:fa:bc:c1:4f:5a:1a:de:fc:
                    58:ab:a0:53:d7:04:2c:e8:ac:7a:36:a2:55:ca:00:
                    dd:13:65:9c:34:c9:7a:50:ca:88:c8:30:f0:e6:7b:
                    ce:9c:76:59:70:06:b1:40:7c:8d:09:3b:a9:d3:2f:
                    84:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DA:6B:D0:81:0F:9F:AC:34:1E:90:15:B7:5E:CF:34:92:9C:63:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:46:29:7b:8b:a4:de:b0:7f:55:6c:33:57:f3:1f:a3:54:
         66:f7:80:fd:c4:64:3b:7c:f3:4b:9d:e3:46:0f:05:b8:eb:fc:
         d3:43:e9:d8:7e:5d:68:ff:5a:89:81:b2:42:f9:42:2d:cc:8e:
         d6:74:e6:df:e1:bd:10:d6:98:08:b8:4c:6d:5a:f9:55:db:cc:
         22:ad:29:53:a6:2a:03:66:1d:18:71:29:d3:0f:09:2d:f3:c2:
         16:8e:ad:df:67:e2:7d:6d:31:74:80:73:02:1a:8b:52:74:4c:
         fc:45:0a:32:10:5c:46:f1:ca:ff:8d:02:01:a7:63:e1:64:23:
         16:cb:c8:c7:00:ad:b0:82:3b:ff:9c:9d:7b:ab:f7:31:58:e8:
         7d:cf:8e:12:ac:70:69:a4:cd:91:54:bc:8d:b4:a2:10:64:dd:
         76:10:06:92:1a:67:96:4e:a1:d1:2f:f3:f3:2d:7a:4f:fa:fd:
         2b:48:15:78:12:c8:2a:e0:c6:46:4a:05:61:1d:6f:3c:1c:5a:
         ec:d6:08:f0:ae:5e:47:3f:57:96:dc:8d:00:9e:aa:a3:1d:3a:
         52:21:72:6a:0d:85:8f:fe:bd:a6:33:eb:ab:04:46:d7:f9:08:
         bf:ee:9c:7f:ef:bc:66:dd:7e:00:b4:e1:0a:c2:f4:ba:c7:0d:
         f4:e7:73:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:54:15 2026 by rpki-client