Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83f5ecb2-7770-37d3-8206-cf3def4c25d2.roa
File:                     83f5ecb2-7770-37d3-8206-cf3def4c25d2.roa (raw, json)
Hash identifier:          L2Qap80a1BbK6/VJnju7ukK9fkkKjMxjrYy7khvdYYA=
Subject key identifier:   07:E1:3A:F4:BC:EB:D7:92:48:9B:7C:9F:66:E2:17:FD:CE:32:90:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA449596C861ED034BD200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83f5ecb2-7770-37d3-8206-cf3def4c25d2.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.97.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:44:95:96:c8:61:ed:03:4b:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=281a9ccd-c51d-4b0e-927b-d7c143af9bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:29:87:a8:60:b0:53:e2:26:a0:b3:ac:36:
                    39:5e:ae:8d:44:45:39:c3:a2:a0:c8:d8:47:ee:ae:
                    b5:f8:ec:21:80:03:ba:cb:bf:9f:5b:8e:41:9d:37:
                    ea:bd:d4:65:85:19:bf:66:bb:a5:88:18:8d:15:fc:
                    f3:23:69:e1:39:34:08:3b:02:36:e5:12:a7:c7:45:
                    d6:35:7b:ba:ce:19:64:89:b6:6d:86:ef:aa:e0:b9:
                    52:4c:f4:6d:85:75:f6:6e:02:0e:cd:89:c4:d6:48:
                    15:13:07:96:cb:c1:c3:6d:5c:39:ae:7c:86:e3:6c:
                    b7:bc:e9:01:28:69:0b:b5:a4:9d:90:60:f3:65:d6:
                    40:be:c7:a3:1f:0b:61:a6:c2:35:c1:22:66:ef:9b:
                    53:e1:2b:db:e7:d0:88:ed:d0:15:1e:b1:fa:78:98:
                    9a:9a:9e:9c:fa:10:56:e7:4a:bf:eb:33:8e:20:c8:
                    bc:b5:d9:2c:cb:dd:f0:12:2b:18:94:7b:bb:49:59:
                    9a:04:68:e9:cc:30:52:14:ea:da:6b:75:5b:12:7a:
                    97:7d:13:94:df:52:45:91:30:5d:bb:de:56:a4:77:
                    91:f9:c2:19:81:96:4b:c9:8d:30:9b:fc:f3:6c:0d:
                    89:50:d0:f3:23:4e:6b:9e:66:d1:53:18:fa:bd:dd:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E1:3A:F4:BC:EB:D7:92:48:9B:7C:9F:66:E2:17:FD:CE:32:90:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/83f5ecb2-7770-37d3-8206-cf3def4c25d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:4f:17:73:e9:c2:22:59:13:38:95:9c:89:e9:a5:2a:46:
         66:4d:9d:16:0c:f9:1c:76:ed:e6:7b:23:96:6e:68:b3:39:89:
         85:cc:7a:97:52:58:78:0f:a5:ae:43:e7:42:11:af:05:45:93:
         0a:48:72:d6:0e:d4:3f:8f:dc:35:3f:de:38:4a:b5:36:a6:0d:
         3b:ee:b3:0d:e8:fe:9c:f8:7c:62:46:87:e3:54:e1:d1:83:09:
         2d:0c:39:a9:27:48:99:51:d7:56:8d:ac:9c:11:6f:ea:6e:f4:
         3f:8e:79:83:9e:bd:20:e9:82:70:a7:81:02:99:d4:e6:e9:ff:
         80:fa:19:0d:3d:99:1f:5b:73:7c:40:3b:7a:64:db:c2:53:cc:
         ec:6c:65:96:3e:fc:79:72:0a:d5:89:1e:15:7f:eb:99:50:9e:
         c2:9b:ca:a3:f7:9c:6b:d0:8f:e1:56:97:62:1b:9b:29:a4:ed:
         e5:e8:b8:ff:8e:2d:0a:0c:06:53:ad:b8:56:d3:d5:e5:f7:8d:
         31:49:36:5b:4b:26:58:a6:f6:20:64:9d:aa:0e:dd:52:17:0e:
         d1:29:8f:d2:4c:9c:6b:cf:5b:e4:4c:a7:b7:4a:5e:ed:82:b4:
         3f:e7:6f:a3:c3:76:08:63:45:57:8f:f6:51:bc:0f:bb:30:df:
         b7:b6:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:36 2026 by rpki-client