Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73f05422-db6b-32b3-bc7a-99a63ce8e6a5.roa
File:                     73f05422-db6b-32b3-bc7a-99a63ce8e6a5.roa (raw, json)
Hash identifier:          EtsiJzMq1aH6iUXbrDNgNkpI/5tK+PK+Yj+lLLf16v4=
Subject key identifier:   3A:70:3C:E8:C7:D3:44:0C:EA:8F:3D:B8:71:24:16:6A:52:5C:8D:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F225D0EAF1743C917CB6A2440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73f05422-db6b-32b3-bc7a-99a63ce8e6a5.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        72.106.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:0e:af:17:43:c9:17:cb:6a:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=5280d3c0-139f-4721-aa70-468630a89e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:09:48:03:96:7e:c4:f5:08:ce:c6:a8:5c:
                    ef:d0:14:2e:d2:62:23:53:d6:3f:2f:85:c4:c8:87:
                    09:72:e0:0e:59:f1:af:21:08:5b:6f:e8:bd:0f:3e:
                    8d:dd:6d:02:77:db:2f:8b:32:05:43:ad:da:ce:e4:
                    29:50:1a:97:07:2d:ff:1d:0d:44:ca:36:7a:2d:1e:
                    51:a8:f1:21:c7:67:f8:12:25:52:fc:b3:b1:48:c1:
                    88:5d:13:8f:4c:76:0f:f0:7a:b4:99:c2:2f:3b:41:
                    5c:e1:a2:af:87:b8:94:36:be:5e:73:9d:99:4a:67:
                    84:01:2f:48:47:90:fd:9e:e0:36:5c:af:5e:c7:f3:
                    5b:cd:d6:38:5d:da:3a:63:cf:5a:d4:0c:40:25:03:
                    05:b4:a5:76:5d:a5:25:c3:0c:27:95:91:b9:98:ec:
                    a8:7c:32:b9:5e:c7:75:7f:aa:e7:cb:e2:73:bd:22:
                    6f:63:7f:34:be:73:ce:60:cf:6b:c6:00:19:87:5d:
                    91:88:21:4d:d5:a6:81:b4:51:f4:c1:4e:3e:7c:0e:
                    92:57:1d:fd:14:88:a1:5c:d8:6b:ba:ec:88:17:85:
                    25:10:51:62:5f:bf:68:6f:26:61:cf:e7:ef:0b:57:
                    a2:1f:62:02:04:09:71:ee:01:9e:85:ad:7b:72:2b:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:3C:E8:C7:D3:44:0C:EA:8F:3D:B8:71:24:16:6A:52:5C:8D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73f05422-db6b-32b3-bc7a-99a63ce8e6a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:7e:dc:96:71:f5:81:ea:8b:18:1c:5f:c5:ca:86:e8:af:
         0e:46:64:01:5b:4e:56:8d:b3:1b:70:e0:1f:a7:53:56:a4:fd:
         fa:eb:e6:82:d8:dd:4c:6c:26:df:b2:f7:8a:8d:a3:4b:17:01:
         18:11:64:5c:3f:21:c4:f6:19:9c:27:76:89:f1:62:3b:13:5f:
         de:e7:25:18:82:30:eb:66:55:7f:4b:de:17:86:10:0f:c3:3f:
         c5:85:4a:82:00:8a:f4:7d:90:01:c7:a8:f9:12:45:9e:af:4c:
         40:23:80:41:27:23:50:3d:81:10:cf:e0:7e:a0:8d:df:7a:68:
         41:87:41:0c:88:03:9d:c7:da:3f:c1:f2:ee:dc:fd:77:a7:29:
         8d:da:8f:cc:38:00:a3:e0:d2:c5:23:3f:90:fa:e4:62:2e:d7:
         1b:bd:43:f3:9b:b9:c0:2b:ce:13:b3:83:d2:0f:da:92:cd:2f:
         1d:23:a8:7a:6e:33:06:f2:70:25:d8:a4:fb:20:24:ea:47:6e:
         91:2c:76:9e:24:a5:4a:c9:4d:41:7c:f4:b2:ac:07:95:b9:fc:
         ba:a7:92:34:4e:86:9b:f5:f3:a5:48:64:8a:f5:51:aa:f9:ee:
         4b:ef:90:03:fd:e0:56:2e:bf:ed:72:81:f4:b3:7e:3a:54:5f:
         e7:34:84:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:52:49 2026 by rpki-client