Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5878a457-1f95-397e-9bcf-fda94206c5d7.roa
File:                     5878a457-1f95-397e-9bcf-fda94206c5d7.roa (raw, json)
Hash identifier:          lCtULFFzIV2o6sP4WTdZXPMA86iU5I6VSqLSo6PXwYE=
Subject key identifier:   72:3B:3C:DF:B1:3C:D1:71:D6:D4:CE:9E:6F:6B:24:0E:9E:21:8A:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C54970002D76FE5D26D6A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5878a457-1f95-397e-9bcf-fda94206c5d7.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        96.234.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:97:00:02:d7:6f:e5:d2:6d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=cb5e1914-537c-45a5-8b10-544690edf7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:55:8c:ff:42:84:1b:6d:ee:58:8f:3b:42:
                    e6:4a:16:39:85:96:5f:89:99:33:bd:29:e3:70:7b:
                    d1:07:09:85:cf:87:c4:2e:69:46:12:9f:d8:29:c2:
                    63:e2:ad:65:20:9b:1f:5a:08:eb:48:97:f7:4f:f4:
                    ce:fc:34:8e:8b:30:23:2a:fb:3e:89:6e:b9:3a:6b:
                    a9:b4:bd:3b:b5:7a:7b:e2:0f:21:d2:f3:39:d6:48:
                    18:2a:7d:40:dc:eb:46:b7:2a:d2:eb:91:c8:fb:9f:
                    24:51:c2:e4:12:73:f4:f6:32:30:b8:6a:02:ad:5d:
                    41:cb:c9:ea:c5:ce:ce:e4:71:e8:50:af:ce:1c:c4:
                    19:a8:8f:a8:1a:e2:26:27:7b:49:21:0f:ba:a6:5b:
                    55:f3:67:74:90:f3:09:ac:30:3d:b8:c7:58:39:a9:
                    31:52:b6:7e:8c:c9:ab:b2:58:dd:f6:d4:9b:d6:2d:
                    b6:e6:0a:9c:0e:e2:15:45:73:4c:4f:69:ae:63:6a:
                    6c:1e:dc:28:c2:68:f9:93:90:2b:d5:5c:c0:69:b7:
                    fb:a7:63:b2:95:17:b2:fe:91:34:79:37:c4:15:13:
                    f9:93:ea:1f:54:28:8c:0c:3a:0f:1c:7c:99:a1:8e:
                    79:99:17:e9:1a:f0:35:75:08:fd:ee:9e:13:9f:0f:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3B:3C:DF:B1:3C:D1:71:D6:D4:CE:9E:6F:6B:24:0E:9E:21:8A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5878a457-1f95-397e-9bcf-fda94206c5d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.234.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:74:9e:4d:4d:77:a9:99:62:72:55:ed:e8:77:bc:ab:00:ac:
         9f:6e:82:d3:f5:7a:a3:2c:d8:61:88:b1:44:73:80:9b:d0:cc:
         38:2e:03:34:a3:19:58:cd:7c:22:23:3d:6e:3b:8f:73:01:58:
         df:a5:0e:44:64:59:fc:fd:ab:cf:04:db:46:00:58:ec:b6:31:
         76:5a:27:ab:9e:9f:81:84:7b:52:66:6e:58:7f:63:b8:df:0f:
         4d:5d:9d:2c:60:47:66:31:ff:c6:71:40:ca:22:56:3f:c6:eb:
         2e:ba:44:c7:f9:0d:d3:3b:7a:8a:a3:9b:47:b5:be:ec:93:1d:
         cf:4e:ce:93:43:5e:77:6e:cf:62:e9:98:e1:25:87:db:42:5c:
         eb:03:c1:95:49:40:43:0d:51:5b:a1:9c:fd:8e:c5:23:f4:e9:
         2f:6b:47:ae:93:ca:ab:2b:c5:18:d6:73:b3:2e:42:0b:3a:8e:
         a7:43:90:90:eb:6f:95:ec:34:62:9a:d0:56:12:cc:52:c8:66:
         32:9f:23:33:e8:e1:50:9b:ed:2b:ae:59:85:f5:f7:b6:ad:ea:
         70:5f:27:c8:2e:74:22:c5:75:28:0c:f1:09:e2:b8:a1:5e:e3:
         25:86:5b:55:d2:45:0c:16:da:93:bb:a3:35:dc:9c:81:0e:65:
         88:65:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:33 2026 by rpki-client