Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/552ef8f5-100b-34bd-af20-3f5ad8a79962.roa
File:                     552ef8f5-100b-34bd-af20-3f5ad8a79962.roa (raw, json)
Hash identifier:          lEV5j6IxvyT5ovV0FCDLCrlwLYEAP4H8D2Bz0E3kamY=
Subject key identifier:   08:A1:D1:38:F4:1C:DA:73:BB:F2:05:C5:17:D6:87:41:2D:D9:71:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA3E4DB41BA8C16A952A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/552ef8f5-100b-34bd-af20-3f5ad8a79962.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.103.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:3e:4d:b4:1b:a8:c1:6a:95:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=b3de7467-6006-4587-af48-8e2f156fd4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:1d:6c:5e:23:9f:bc:e9:3c:20:6b:6a:35:
                    9c:42:ef:ac:2f:86:df:3b:e4:fe:1a:a2:b9:f8:2f:
                    be:94:f0:1a:a9:bf:4a:93:e6:d1:db:04:0e:5c:7f:
                    17:ee:77:99:d7:93:e2:a6:c3:a4:aa:63:73:b9:27:
                    fc:f5:5b:79:8f:82:63:d2:4a:d2:85:4f:d0:89:c5:
                    84:29:c8:b0:ba:75:40:62:4a:06:b1:2f:3e:4d:7d:
                    4a:a5:a7:cf:00:6d:72:2e:ec:03:00:89:35:47:fd:
                    91:29:9f:15:a8:b8:59:46:ae:01:72:af:2e:1a:b4:
                    82:58:58:75:c3:82:6b:e3:25:75:c7:57:2b:2d:10:
                    90:0e:04:61:15:bb:7f:36:d7:02:41:84:22:d2:52:
                    09:9c:68:af:15:2c:4f:29:10:ed:74:06:02:88:02:
                    71:63:a6:e3:83:7f:84:cd:91:6f:ba:f6:86:59:4b:
                    8b:dc:a6:ce:7f:28:b3:7f:2b:39:42:ee:33:4d:41:
                    ce:f8:e4:9c:6f:46:16:91:f6:dd:23:f0:a9:bf:9a:
                    23:19:29:26:a1:11:89:00:0d:2f:e4:fe:49:ce:d1:
                    37:10:49:4f:7c:bb:ab:e2:ea:ce:04:26:ec:b9:b0:
                    d9:35:c8:04:1e:9f:4a:ba:ba:9d:55:38:6e:47:eb:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A1:D1:38:F4:1C:DA:73:BB:F2:05:C5:17:D6:87:41:2D:D9:71:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/552ef8f5-100b-34bd-af20-3f5ad8a79962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:03:58:1d:2d:72:aa:38:e8:4b:74:e6:90:6d:9d:a6:81:
         eb:8d:5a:f4:27:10:38:0b:ac:66:db:fe:0b:a7:df:06:85:19:
         d9:b0:0e:98:55:e2:75:b4:5b:8f:68:08:f5:88:69:81:d8:ac:
         a6:8f:24:b2:d9:a3:3b:d7:32:00:98:c5:e6:8d:dd:27:4f:4b:
         10:84:48:e9:b3:40:63:d6:44:bc:03:fc:e6:1a:13:4b:52:3e:
         15:a8:cf:33:f3:7a:da:22:37:72:f5:0b:fc:a0:fb:b0:1a:f7:
         1e:e5:3e:c8:7e:51:ce:35:08:8f:26:c0:6b:a4:f1:8c:56:45:
         60:84:cd:f3:46:bc:89:1f:f9:4f:c4:fe:f8:f5:67:54:b3:3e:
         eb:83:1f:aa:21:0f:d5:ac:6f:85:c9:7d:f4:4b:f8:e9:28:87:
         f2:17:f4:35:47:52:21:f0:4a:bd:ed:c7:e8:8e:68:6c:70:43:
         e3:41:dc:1b:5f:7a:61:58:32:1a:ef:10:29:4e:de:69:32:df:
         0a:56:04:3e:ce:31:27:ef:6f:04:58:11:2e:95:0a:40:ab:2c:
         3b:09:8f:e8:98:05:bf:e1:99:6b:28:d2:7d:ac:f7:f2:31:e5:
         68:07:1c:1d:5b:2b:4b:54:06:af:96:e4:4d:f6:4a:de:6c:6d:
         a5:17:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:40 2026 by rpki-client