Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c5b04db-2bd5-3820-bfd4-76799b6430d3.roa
File:                     7c5b04db-2bd5-3820-bfd4-76799b6430d3.roa (raw, json)
Hash identifier:          kUmZKxacYB/SrcuouixefA/DZwAd69B2vhwGktXiqz4=
Subject key identifier:   A4:03:54:32:7C:DD:C1:DA:21:9E:4E:D7:83:31:5F:48:61:00:D1:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB5820A8287EFFD83622060
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c5b04db-2bd5-3820-bfd4-76799b6430d3.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.108.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:82:0a:82:87:ef:fd:83:62:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=ad54a6ef-9b3c-41fb-837a-842c98d938b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:c2:4d:ec:3e:e8:7c:f5:33:76:19:c4:51:
                    3e:83:e2:c7:09:94:ce:41:27:8e:85:a6:3b:de:59:
                    39:fb:72:07:cc:0b:cb:af:fb:a4:e7:89:a2:a8:43:
                    5d:20:b4:ed:ad:a3:f6:a4:dc:67:4a:fe:43:8e:01:
                    d6:a0:e8:a2:3c:0a:74:68:c8:be:45:72:c3:c2:e0:
                    d5:8a:4b:b9:65:66:0d:9c:e7:05:c0:2f:a9:40:53:
                    5a:82:59:e5:44:fe:67:c0:15:70:fd:30:26:27:82:
                    f4:88:23:15:af:9d:46:62:e8:74:df:c2:ed:f4:1f:
                    14:37:18:21:1c:76:91:bf:f8:44:88:7a:3a:10:71:
                    e6:8a:13:2e:fa:2f:93:48:25:56:4a:39:09:b0:ec:
                    dd:32:cf:3d:05:72:53:ca:d6:f0:cc:dd:12:c8:f6:
                    aa:26:30:de:a3:01:cf:00:9f:ca:35:c3:81:dd:9a:
                    f7:2c:7a:96:00:74:f7:56:f0:9f:c4:db:d2:9c:33:
                    a5:e5:ef:53:ae:a0:ac:13:8f:35:e9:bf:3f:09:78:
                    6c:11:a5:28:6e:c1:b0:b1:d8:79:f7:c5:6f:e8:28:
                    2e:3a:d3:22:20:06:60:17:d2:bc:37:4d:ca:86:5d:
                    c8:f7:f6:79:2b:11:bd:f0:38:27:1f:73:96:b0:6a:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:03:54:32:7C:DD:C1:DA:21:9E:4E:D7:83:31:5F:48:61:00:D1:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c5b04db-2bd5-3820-bfd4-76799b6430d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:86:e2:2c:d5:15:6c:da:50:9a:93:41:29:a9:b5:db:4a:83:
         ce:f9:d5:02:0c:58:4b:48:a7:56:ab:16:63:57:e8:d2:16:8c:
         81:3e:d8:c9:5f:29:ff:97:ef:35:cb:3f:32:61:d0:d2:d5:37:
         c5:ea:25:aa:c6:d3:c2:01:d4:3e:56:24:19:fa:44:c1:19:c8:
         45:ea:e5:43:f5:84:f5:62:41:64:5e:53:17:bd:a7:fa:24:de:
         cb:10:6d:2f:14:3c:d2:76:a7:9e:91:e9:81:c4:5a:cb:43:13:
         c1:0a:48:b7:1f:e8:a7:b4:fb:28:4f:40:33:3d:f9:01:3b:bc:
         af:5a:aa:9d:e0:27:b7:c3:e1:3a:29:de:78:09:0c:fe:49:34:
         9f:29:6e:ca:83:97:96:85:e4:0d:b2:d6:b2:e5:54:cd:e3:05:
         5f:f6:9a:23:a0:5a:84:13:7f:2a:de:40:31:14:68:7f:00:7b:
         7f:3b:be:b0:99:d2:1b:08:ba:18:5b:a1:44:78:5a:a6:f5:fc:
         e4:5c:ee:a0:ad:79:b0:1d:9e:fe:96:f3:af:83:49:30:1c:0e:
         27:ff:6d:b9:a8:43:20:5b:e2:51:e0:71:9d:a8:77:80:a3:87:
         c2:11:48:ae:51:e5:4b:08:14:79:3a:11:df:86:b4:40:de:f6:
         d1:e6:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:52 2026 by rpki-client