Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/512c9803-3e24-3e20-9df2-4afe5eae32bf.roa
File:                     512c9803-3e24-3e20-9df2-4afe5eae32bf.roa (raw, json)
Hash identifier:          Yea3jVGADSiEVJZvUBjK03SepOf0TpIb7EFXOsvmc24=
Subject key identifier:   02:6C:2C:A6:CE:B7:28:18:D7:A0:EE:82:AF:F5:AF:38:C7:2E:26:E5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA482BE71E078DD94B31C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/512c9803-3e24-3e20-9df2-4afe5eae32bf.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.111.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:48:2b:e7:1e:07:8d:d9:4b:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=1aed088c-5e86-4103-be4b-ea9ae420f522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:9a:04:41:c0:a4:93:c3:0a:e4:81:16:65:
                    f9:13:a7:b4:a4:5e:1d:16:ad:01:fa:f6:97:96:0f:
                    7d:c3:a2:3a:fe:fa:38:af:e4:3e:a4:86:25:55:ef:
                    7a:ca:77:51:c9:f9:a9:ef:6d:04:5d:fc:01:d2:b8:
                    e5:7c:48:f4:a5:73:e5:b0:3d:f9:8d:b9:4f:b3:3c:
                    68:99:70:3d:2a:44:20:d0:9d:76:b2:d9:96:9c:62:
                    68:00:19:b6:79:d6:21:88:9c:73:ad:44:16:02:52:
                    97:53:45:6e:14:02:a8:76:9f:07:09:ef:25:cd:68:
                    8c:22:f2:c4:0c:48:31:63:dd:12:7e:66:b3:01:8d:
                    b9:b6:21:f0:9e:e1:17:5b:a2:5b:1a:ee:a8:1d:d3:
                    42:af:d4:80:61:61:e1:44:ed:57:4e:56:ac:65:3f:
                    c1:2a:43:30:e0:6c:75:ca:1c:44:bd:ef:a0:1c:18:
                    eb:c8:16:81:da:44:9a:b8:3e:cb:7b:76:c9:7a:7d:
                    f1:e4:7d:1b:20:12:2f:40:c2:5a:b1:59:23:26:b6:
                    54:70:dd:0a:c8:ef:47:00:8f:b5:2f:75:78:10:ae:
                    d5:ce:de:d1:c3:7d:dc:53:99:64:46:c3:12:3e:ea:
                    ab:f9:85:00:3f:20:a2:cd:e8:95:77:3a:a1:66:60:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6C:2C:A6:CE:B7:28:18:D7:A0:EE:82:AF:F5:AF:38:C7:2E:26:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/512c9803-3e24-3e20-9df2-4afe5eae32bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ea:a1:10:f3:de:15:9a:12:b6:ad:96:4f:5d:a0:7d:de:e7:
         31:2d:64:72:cc:41:ec:b7:93:e5:38:68:d8:a3:80:16:c6:ae:
         69:d9:8a:f4:f9:3f:f3:3f:42:a4:0d:50:58:05:b2:af:8f:7d:
         c4:6f:4e:25:55:8e:dc:d9:ef:d8:b3:a1:20:99:9c:f6:8f:55:
         bb:e7:56:cc:2d:ca:1a:f3:39:03:48:44:56:bc:99:11:38:6f:
         59:d7:db:69:69:69:4b:13:bb:8b:92:09:68:e7:90:1c:d6:54:
         24:0d:2b:58:80:df:2b:a8:d8:e9:78:9b:62:f6:ec:cc:7d:a6:
         1e:cb:59:49:68:c3:0d:0b:c7:ba:07:7e:c1:da:92:f0:32:14:
         89:46:ee:88:fe:b5:0b:c6:c9:d9:99:32:ab:46:31:47:61:5b:
         cd:35:e9:d1:32:f5:7a:b3:a6:29:61:31:63:ca:db:cf:53:e2:
         ab:01:6d:e9:54:73:bc:12:13:20:43:69:da:49:4f:a1:7d:dc:
         05:64:a3:d6:dc:5b:6d:fa:fe:fe:bf:06:2a:7a:ec:95:2f:f4:
         dd:9d:c4:52:16:35:78:1e:d7:2a:d8:a3:37:ce:f4:ec:f7:25:
         b6:70:ff:9c:53:2f:65:12:e1:c7:dc:ad:11:8e:87:04:96:d9:
         5c:de:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:03 2026 by rpki-client