Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa
File:                     9d4a5872-06fd-3b49-9181-214a58a6db46.roa (raw, json)
Hash identifier:          xQoGX45CovT17aF+LxlCiDHgD2OrV1ucpxSEmTYk4gU=
Subject key identifier:   1A:0A:E4:A0:9B:E2:9E:40:6C:FB:E2:A1:ED:11:02:5A:17:D2:0A:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA411C000B542EBED969C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.109.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:41:1c:00:0b:54:2e:be:d9:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=883d29ab-3613-4a40-b37f-c0b83b696e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:01:ec:3c:8b:c7:ac:30:09:64:0a:d6:e0:08:
                    b5:77:91:01:2e:0b:d4:76:03:d6:f1:d8:55:dd:e6:
                    63:90:f2:6d:f7:e2:b1:6e:32:fd:48:38:bd:b9:48:
                    4d:88:c2:e4:f0:20:0b:20:95:47:9a:1a:ae:b1:2c:
                    c8:83:b6:7d:3c:20:a5:5f:5a:a6:e1:b8:26:4b:41:
                    ca:84:a1:97:99:75:bc:f9:a8:e6:d6:8d:d3:24:f6:
                    a5:ee:cd:4f:cf:7c:db:b9:c0:41:1e:85:a8:4e:c4:
                    fa:0c:73:c4:6c:43:9c:a9:62:3b:e8:b9:27:9b:0c:
                    3c:8e:a4:f5:57:e8:0d:bf:68:2c:1e:a0:4a:d9:45:
                    28:59:3a:85:3d:66:86:5e:c9:f6:28:fc:43:22:7a:
                    cd:3b:22:04:25:c0:ad:0d:d2:2b:ce:b4:a2:0c:77:
                    09:41:73:29:18:ee:2a:5c:0d:e5:6d:f7:51:0c:a8:
                    e4:ee:b6:a9:0d:13:21:bc:de:0a:3a:bb:3f:06:f2:
                    de:d9:69:cd:19:78:09:fc:1c:dd:93:1e:30:c7:4b:
                    5f:78:5e:47:01:35:24:56:7e:97:be:d4:1f:18:91:
                    d9:15:32:d5:0c:8b:3c:55:11:32:73:4a:d8:48:a8:
                    05:62:b2:08:8d:73:47:14:99:c2:0a:c5:c2:d4:6b:
                    4b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0A:E4:A0:9B:E2:9E:40:6C:FB:E2:A1:ED:11:02:5A:17:D2:0A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.109.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:17:9b:2b:fb:7f:0d:4b:ea:85:45:86:a7:b1:a7:71:23:6c:
         9c:06:2f:08:af:a0:ba:ce:82:78:29:6f:18:1e:f6:15:d4:97:
         54:34:32:e9:d6:77:6b:8e:ee:68:db:a2:a9:48:28:d9:60:93:
         74:56:62:51:70:ba:05:e3:50:68:8e:a3:28:e6:23:03:6b:b4:
         9b:b3:dc:b9:de:0b:99:54:4d:ac:5d:1f:46:d4:82:ef:fa:63:
         7d:48:87:c7:67:cb:76:7a:58:48:0c:7e:7e:a2:64:fb:8a:ed:
         ea:5b:93:09:37:8e:30:cc:cf:6b:c8:c0:3d:66:d5:11:3e:73:
         4a:73:de:3d:3b:81:16:fb:32:32:d2:49:41:c7:cf:96:fa:5a:
         73:8a:b8:90:7a:b9:42:85:7f:4f:c9:18:59:6f:98:2e:a9:38:
         5c:3c:06:64:2b:b8:e2:b1:ad:cc:d0:ee:fc:22:10:8c:92:d9:
         de:b1:2f:ef:43:68:6d:da:7e:c1:22:09:16:d8:80:bc:73:b9:
         12:ca:35:bc:34:7b:1e:e8:1d:08:52:b3:83:2e:df:f3:f9:b7:
         a5:7a:71:27:38:6d:10:8e:f8:e7:35:d0:84:4f:29:67:12:6e:
         02:39:06:d7:20:32:e9:11:8f:d5:b7:ee:c5:ae:79:86:7a:4a:
         dd:c3:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:11 2026 by rpki-client