Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa
File:                     a233d918-3ab6-3819-82aa-baa5dd33fee5.roa (raw, json)
Hash identifier:          wliPoZW3zFeThQeKqihmhXXz6qXBt6mI0FaXw3D3cmU=
Subject key identifier:   EF:D8:45:48:1F:93:A5:8F:3A:38:CB:45:54:57:76:C6:F6:3E:99:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA470611461749B727D080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.106.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:47:06:11:46:17:49:b7:27:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=b8695ddc-f75a-414b-92de-9e0092828afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:6a:d7:87:52:2a:be:dc:f1:44:60:43:dd:
                    a2:38:5d:a6:ed:f8:8f:ac:f3:c9:e1:9c:c2:34:91:
                    54:92:bd:ba:39:c5:f3:9d:d1:fc:92:e7:30:e6:ab:
                    95:fb:71:b4:ee:db:83:64:fb:45:63:48:cb:af:57:
                    7c:b3:d7:03:7d:c0:ba:d4:d4:9b:49:11:d2:d5:d6:
                    5a:7d:80:e4:3e:f2:e6:b7:f2:0b:7e:71:c4:61:e6:
                    4a:71:8a:8c:13:07:ad:c4:98:fb:d7:3f:6c:b0:92:
                    36:bc:20:43:7c:22:25:29:1d:58:26:1d:76:cc:08:
                    78:bb:61:78:36:c8:d2:30:69:b9:8a:2c:22:d6:75:
                    d8:cc:f8:90:09:05:af:dc:36:da:c3:9b:7f:90:57:
                    41:aa:99:17:e1:2b:92:2e:dd:7f:55:7f:a3:75:dd:
                    e8:18:1a:dd:f6:1d:02:f0:81:94:32:c3:69:4f:9a:
                    61:e7:24:da:19:cc:76:5a:a3:6e:bf:9a:ff:2e:8e:
                    1e:50:5e:83:6b:40:29:86:a3:e2:24:7e:3b:1c:d4:
                    c0:41:83:31:6a:30:0f:ab:db:fd:29:5d:dd:17:2a:
                    bc:b6:03:d5:7a:ee:8e:0f:6c:1e:3c:09:68:09:84:
                    0f:77:9f:dd:c2:ed:63:f1:1d:ef:58:53:3a:ac:0f:
                    db:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D8:45:48:1F:93:A5:8F:3A:38:CB:45:54:57:76:C6:F6:3E:99:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5a:67:43:c5:60:03:ca:52:53:64:94:83:33:78:87:65:bc:
         90:f1:17:96:ab:3b:d5:58:a0:bb:5a:4d:e1:87:97:d4:11:1d:
         8e:31:5b:21:85:c7:db:a7:ad:a9:db:1d:a7:d7:48:34:23:5d:
         c0:e7:89:d9:63:24:1d:b1:bb:fd:ee:cd:12:96:3f:cc:b5:03:
         ea:79:c9:e8:3d:35:39:46:99:a7:fd:ab:17:40:93:49:74:55:
         2e:59:cd:00:c6:f2:67:97:c4:e5:2c:b2:9d:65:55:bc:b6:b4:
         89:8b:46:a8:cc:5e:0f:42:07:6e:2d:4e:28:2d:8e:20:fd:c3:
         1d:97:f1:d3:46:ef:02:31:78:00:15:99:2c:59:e7:d9:c4:bd:
         55:c8:dc:d5:a0:9a:bb:4f:34:15:59:89:f4:ee:a0:c6:e6:78:
         21:49:99:b7:90:4e:c4:f1:f9:32:f5:6f:22:7a:44:45:d4:7e:
         b6:12:02:39:23:8f:07:06:43:f6:5b:78:b3:af:3f:1d:ab:58:
         15:35:b0:c9:d7:1f:d7:ac:07:5a:ed:2c:da:b9:72:6a:a5:ce:
         bd:58:e8:9c:7c:9a:7e:64:56:5c:53:45:60:10:66:f4:a4:56:
         73:d7:63:0f:2d:e1:ff:fa:29:77:3c:93:f2:7f:de:44:2a:71:
         a2:e3:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:13 2026 by rpki-client