Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa
File:                     4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa (raw, json)
Hash identifier:          a/zdEpsxPlHV5+t0iYLNkdiy27aVf9TVCx0YeAFs1Xc=
Subject key identifier:   CC:1D:0C:56:54:0C:A8:94:3D:2A:D3:39:4D:BF:3B:61:C9:46:39:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA4438E6EBABD2201A6000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.111.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:44:38:e6:eb:ab:d2:20:1a:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=599eb4b5-f987-4d0e-83f6-53060be19657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:12:ff:d6:cd:aa:9c:bc:b4:d9:15:e5:91:
                    81:b6:5f:d3:c2:08:0b:39:cf:f1:10:c6:0c:6d:78:
                    0c:b5:9b:62:09:ca:37:cd:6b:d0:4a:34:d9:83:cf:
                    54:ad:88:62:d6:ab:10:0a:b0:f7:f1:f0:9c:aa:08:
                    b9:71:b4:fe:1d:55:50:da:e5:aa:41:54:00:e7:1d:
                    bd:aa:d1:29:a2:aa:57:4c:02:5e:b0:8c:ed:bb:5f:
                    b2:86:e7:a6:cf:c3:f8:28:85:1b:ff:6c:03:bb:5e:
                    63:c2:81:9a:3c:b7:d4:7e:c7:7d:df:43:ce:01:a8:
                    e1:3a:7a:07:0e:9c:0e:16:37:b4:d8:6f:48:84:73:
                    de:1c:db:ec:83:3a:00:77:17:9c:6f:ca:a5:c9:9c:
                    80:17:65:4a:7a:f0:16:33:2f:4c:b3:0f:2e:17:d6:
                    5d:fd:60:be:8b:09:69:73:0c:f0:bc:a7:30:f3:43:
                    47:77:08:78:78:79:bb:68:fe:80:ce:5b:26:3f:1f:
                    19:51:eb:78:6b:e9:37:3b:fb:08:dc:8f:6e:96:b1:
                    b7:17:ae:f9:c9:1b:8f:c5:3f:4c:e0:55:7f:7a:21:
                    96:6d:a5:58:6e:5d:1e:d6:98:4d:09:dc:f9:a8:1e:
                    00:98:cd:97:b3:a6:67:ca:70:c4:93:30:6c:66:48:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1D:0C:56:54:0C:A8:94:3D:2A:D3:39:4D:BF:3B:61:C9:46:39:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bfa6cac-1cab-3fbf-97fb-865ac3914e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d8:5c:2b:49:51:cd:00:10:a0:d6:c5:f7:91:3e:eb:d2:ff:
         e9:45:39:b2:4e:e4:0a:0b:67:c1:72:ea:9f:34:ce:b2:12:72:
         7a:02:e7:bf:49:91:53:d4:00:9b:3e:18:99:1a:5d:55:f3:c9:
         50:4c:20:55:23:50:71:b7:86:f0:f2:ee:36:31:fd:32:7b:0c:
         d2:c7:c4:69:a8:18:29:8a:3a:80:2e:8e:0f:6a:bb:ae:ce:40:
         e1:70:17:c2:2b:a0:f1:8a:34:64:39:a3:b2:7e:79:49:83:ad:
         af:e5:cf:f5:eb:fe:88:56:d0:90:b6:1a:28:fb:81:a2:fa:a9:
         68:a4:32:78:5c:c7:06:7e:f5:65:b2:d6:a3:e5:ac:3a:f9:98:
         36:aa:bb:65:64:47:ba:32:a3:3c:e6:48:52:e1:5c:e6:90:0a:
         46:62:7e:10:11:7b:82:63:0a:f4:66:e1:14:0f:48:25:36:4e:
         b2:d8:a1:72:bf:b4:65:4a:ad:b6:f8:f6:26:6e:10:6a:e6:c7:
         34:14:ff:a4:51:4b:54:9a:94:ef:76:72:9c:b0:5c:ab:f6:d7:
         2e:39:70:d3:99:e4:5d:43:b8:77:c0:f3:96:a1:cc:be:a1:b1:
         21:04:bc:c5:55:fe:b4:ed:a6:39:e5:c4:b4:60:45:ee:9e:ef:
         53:39:e3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:55 2026 by rpki-client