Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa
File:                     71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa (raw, json)
Hash identifier:          JT6eCkVsIsTeVrds1+9Nln720FyKzROb3RJUhYd6EPM=
Subject key identifier:   3B:E1:C2:67:C7:67:84:C5:F4:71:BC:01:32:F8:87:04:81:80:5D:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EFCACDD7B3DB7CC7A8B13C000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        72.104.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:dd:7b:3d:b7:cc:7a:8b:13:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=8be3ffd4-e50e-48be-a01a-47139c13e715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:c7:63:d4:d7:52:e0:61:2d:f7:48:ab:2e:
                    47:a4:63:4b:ad:d0:a3:eb:7c:0d:87:d7:41:87:32:
                    be:db:dc:24:9d:2c:d9:de:68:fd:c6:a0:92:9f:e9:
                    12:08:27:11:16:0b:aa:da:85:fb:9c:72:35:02:96:
                    1b:b6:92:8f:79:6a:79:5d:c7:48:22:ed:57:3a:74:
                    3e:c7:c1:ae:a7:ae:6e:8d:fc:0a:c9:f4:29:9c:5d:
                    96:46:36:a7:71:cd:37:06:57:c6:29:8c:29:98:28:
                    f6:99:85:d6:70:a5:45:42:ee:7c:8a:15:d3:54:32:
                    2a:e9:46:af:c8:7b:85:8e:2b:f7:93:79:d7:ad:19:
                    91:1f:15:0a:74:2a:04:a2:22:d8:51:8d:ec:9b:ce:
                    3d:68:56:64:ea:a2:15:c0:af:df:19:79:3a:43:6c:
                    95:d1:3d:5d:a8:71:43:aa:b4:78:ac:7a:e3:a9:cc:
                    c7:61:66:12:53:43:9e:98:01:0c:41:1f:6d:be:5b:
                    4e:ff:ad:8e:f1:4a:c9:b6:50:ea:59:df:32:fa:b1:
                    0a:14:e0:75:87:e3:0c:5d:e2:3a:fe:e5:a9:51:14:
                    95:72:13:fd:46:b7:91:25:8e:08:c8:df:be:43:a1:
                    a6:ec:14:73:5a:1c:04:23:28:6c:2a:79:93:fe:df:
                    2d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E1:C2:67:C7:67:84:C5:F4:71:BC:01:32:F8:87:04:81:80:5D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71b8d670-e172-3aa3-91f1-8d5c4731acf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:bf:5f:62:e3:8d:75:97:85:e9:41:52:9f:c7:57:e4:5a:f5:
         37:2a:1a:73:be:5f:3a:77:56:64:cc:9b:9d:77:2d:a1:7b:e7:
         58:80:aa:a2:88:67:22:1d:88:fa:d9:04:8a:19:3b:31:30:1d:
         5b:25:6a:45:fc:7a:cb:6d:3e:ee:0c:31:15:00:7c:ae:03:cd:
         a5:ef:72:fe:17:f0:44:b2:bd:70:29:fe:b7:55:d4:eb:6d:15:
         2d:67:ee:c2:4c:39:a8:65:b2:13:68:94:e1:6c:c8:e5:d7:2f:
         2d:8d:3a:cb:06:8b:fa:ad:09:ee:7a:60:2e:65:51:e7:f4:ff:
         8e:b2:a5:3f:9d:14:6c:4b:87:95:b3:a8:69:8c:fe:d6:70:fc:
         6d:e9:0b:b1:b3:86:f3:29:f1:d1:72:70:5c:ce:5b:f5:25:f6:
         e0:9e:3c:30:97:49:c7:9b:b4:28:2a:5f:cd:5c:3c:0e:a3:b9:
         19:35:ea:19:19:e3:19:13:36:3d:d5:9b:10:37:85:8d:ce:f8:
         89:4f:7e:d0:9a:a2:de:64:2e:64:b4:b3:5e:9b:35:b9:3f:8b:
         9e:84:9b:ce:41:ee:07:3b:85:eb:9e:54:09:c2:d1:ff:af:52:
         7a:84:6f:cd:1b:85:65:e3:19:77:13:1c:e2:c9:d1:71:86:69:
         6a:e7:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:28:01 2026 by rpki-client