Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa
File:                     4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa (raw, json)
Hash identifier:          mAfjOIRFc/DIV9lxbEsGhNl9UoXAewb1QvH5z/T/VcM=
Subject key identifier:   CA:C9:43:2A:73:C0:96:30:58:F4:C5:48:DC:53:70:9B:13:AB:AE:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB57E0DC5D14F04D6D3A900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.111.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:7e:0d:c5:d1:4f:04:d6:d3:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=31f3eba3-e269-477c-ac0d-3a078ce5d74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:35:a1:ab:34:2a:e5:a8:2a:7c:f1:5b:58:
                    3d:e4:7e:3a:c1:7b:ea:1a:0d:ea:51:58:e7:e1:79:
                    c2:57:82:f7:c7:1c:d4:c4:90:3a:41:c1:57:c9:9c:
                    9d:03:59:b9:fc:83:e5:b3:bb:e7:a2:04:5a:fa:40:
                    93:64:cd:cf:a1:f0:54:9d:e3:95:61:a3:e9:77:3b:
                    76:35:35:c9:ee:de:0b:84:58:2c:28:06:f1:c6:f2:
                    de:03:95:19:de:ef:9d:24:00:21:ac:5a:02:db:fe:
                    aa:ad:19:f1:36:5d:ab:74:36:4d:0e:bb:08:f1:09:
                    b5:2b:28:3b:88:b9:00:01:47:d6:da:9e:27:72:ae:
                    2c:51:4a:f1:b2:7a:36:e4:fc:bd:ff:d9:0a:89:a9:
                    38:14:45:fd:80:5e:15:96:58:81:c3:bb:b9:3a:10:
                    25:7b:fd:d8:d4:38:eb:69:9b:e6:5f:e2:08:02:67:
                    dd:d9:b0:03:84:56:b6:e7:f3:f8:d7:d6:8d:95:ac:
                    50:f6:91:e6:29:ba:04:6d:33:e3:ea:ed:11:9f:c2:
                    3a:65:3d:5b:03:7b:7e:e3:a7:ab:ea:01:e7:d0:cc:
                    db:41:c8:51:70:2d:4e:c0:9d:51:84:a2:0e:7d:15:
                    40:81:74:07:73:a6:55:67:4e:6e:77:06:fe:ee:91:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C9:43:2A:73:C0:96:30:58:F4:C5:48:DC:53:70:9B:13:AB:AE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:28:e8:32:fd:8f:20:ec:14:96:ff:da:11:84:6a:99:0c:00:
         9f:c2:1e:af:e9:d1:a7:5e:89:d3:47:54:79:82:ff:8e:14:0a:
         ca:f4:96:02:df:f6:34:81:ee:d1:19:7d:ce:ce:62:a9:84:04:
         80:34:fe:11:4d:9d:ad:b5:87:b9:63:63:99:18:66:99:4c:ac:
         b1:41:b4:59:96:dd:39:50:f3:d9:d5:1e:5a:ec:5c:47:0b:07:
         ce:53:a2:4e:28:2a:0d:3e:d5:d1:ed:84:fc:6a:c2:4d:ba:9b:
         62:f8:55:38:2b:c6:5b:9f:83:78:41:53:44:02:32:5f:5f:b8:
         91:0e:66:d6:34:bb:45:7c:c6:68:d1:44:ff:51:33:4a:a1:07:
         de:53:62:5f:b1:a0:79:67:f2:ba:49:9d:a3:58:be:f4:af:8b:
         b8:ab:ad:87:ec:59:7f:c2:1e:aa:b2:45:6c:39:f8:fa:6d:56:
         5f:c5:4f:2b:fa:82:89:ad:1b:56:23:b2:4d:89:ff:9e:92:0f:
         3d:6c:94:fb:92:0b:ef:4f:27:dc:ef:ae:3d:cf:a0:eb:f1:ae:
         50:b6:d2:20:e5:e1:31:73:98:3d:7a:7f:d1:40:ed:6c:17:a5:
         9d:d4:ea:0a:f3:d0:4c:b7:84:35:fa:43:98:b9:ea:5b:45:32:
         22:42:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:41:35 2026 by rpki-client