Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab0cd89-5b55-3dab-bda0-b383af228be2.roa
File:                     aab0cd89-5b55-3dab-bda0-b383af228be2.roa (raw, json)
Hash identifier:          2N7+nVIwz6UE8cOqaFGgWXYJtLkPEly7WHU8s2xarJ4=
Subject key identifier:   6E:8D:A6:FA:CD:0D:9A:DA:90:62:11:3A:FD:C2:B3:5B:EA:73:08:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB5794BA0DCB9C2D837C6F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab0cd89-5b55-3dab-bda0-b383af228be2.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.109.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:79:4b:a0:dc:b9:c2:d8:37:c6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=5ffddcf6-4ed7-4a27-b927-44ee23ab5888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:07:4a:e9:23:4c:f5:f2:87:a6:1b:28:b7:
                    9a:d7:10:1a:a5:20:44:34:ca:4a:b3:1a:58:34:64:
                    91:ec:7e:a3:66:96:9e:00:3d:9d:92:7a:e0:2a:ac:
                    a7:40:b2:4e:cc:ad:77:a6:a2:e7:65:eb:cc:93:92:
                    18:a5:94:65:f5:4f:97:42:ea:19:f3:47:e9:b0:08:
                    81:eb:17:e1:02:59:98:9d:73:cc:d1:75:21:61:17:
                    d8:ec:75:28:c0:d3:06:4f:85:c3:c6:b9:5d:b4:de:
                    16:58:5b:fe:53:72:97:ff:29:09:b3:bf:d5:8a:09:
                    ed:c5:28:8c:1d:35:c4:1d:6e:92:44:c5:53:8c:1c:
                    5a:dd:4f:2b:a7:27:fe:fd:51:e6:b9:4c:12:de:52:
                    8f:b6:44:90:64:5b:ec:1f:e3:0e:ea:39:46:19:60:
                    71:b3:e2:66:88:0b:a3:3c:f7:75:eb:1c:d1:55:28:
                    e6:7b:7f:ec:47:db:a7:b9:9b:6d:4d:22:a6:9e:97:
                    93:0c:ae:61:28:40:3f:e9:d2:29:3e:43:11:e5:9f:
                    0c:92:75:72:f4:b6:31:ae:ba:cf:71:50:d2:a1:0b:
                    25:64:a6:b4:44:06:6e:3b:59:8c:1c:44:4a:e0:08:
                    c8:2b:4c:7e:cb:d0:d9:30:45:41:4f:4a:49:ec:17:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:A6:FA:CD:0D:9A:DA:90:62:11:3A:FD:C2:B3:5B:EA:73:08:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab0cd89-5b55-3dab-bda0-b383af228be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.109.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:58:f8:5d:ef:44:6b:6a:ff:f6:5e:2e:48:24:df:28:4a:f2:
         ec:1a:e6:53:d0:49:04:e4:78:16:7d:81:f8:03:d0:38:b0:94:
         6c:67:4f:05:68:b5:6d:20:80:d0:73:19:e9:2c:61:f6:ad:1a:
         0a:d0:36:2b:85:ed:70:76:7e:4f:ca:25:8f:1f:5e:0c:c7:f9:
         98:ce:41:b9:09:12:ad:c5:1c:ae:6f:42:29:9e:03:e4:09:dc:
         26:59:e8:a5:d5:3b:ae:ce:8e:48:18:0c:01:82:f1:9f:7b:41:
         62:97:df:b1:83:54:d6:ed:60:b3:ea:08:8d:81:af:cb:bf:09:
         4a:9d:06:30:7c:cf:90:56:92:22:36:ac:be:8e:d6:64:5b:31:
         ab:0b:c5:e6:13:57:f6:73:ad:94:13:3c:5d:f4:d4:28:4b:42:
         bf:f1:14:05:13:12:f0:b1:02:c9:92:ef:b9:8e:83:8f:fc:9b:
         34:ff:96:33:c0:8c:51:1e:5a:0f:c8:9a:3b:55:cd:3d:e5:67:
         7b:b8:a9:66:86:f3:ec:67:83:f0:af:23:35:5b:6a:f7:1d:52:
         42:b7:6c:c8:f1:26:db:a0:dd:34:d8:16:ef:4f:04:0c:14:66:
         76:74:51:89:58:9a:fb:06:ba:64:d8:18:75:5a:41:3b:21:60:
         53:2a:55:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXlLoNy5wtg3xvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
NWZmZGRjZjYtNGVkNy00YTI3LWI5MjctNDRlZTIzYWI1ODg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAcHSukjTPXyh6YbKLea1xAapSBENMpKsxpY
NGSR7H6jZpaeAD2dknrgKqynQLJOzK13pqLnZevMk5IYpZRl9U+XQuoZ80fpsAiB
6xfhAlmYnXPM0XUhYRfY7HUowNMGT4XDxrldtN4WWFv+U3KX/ykJs7/VigntxSiM
HTXEHW6SRMVTjBxa3U8rpyf+/VHmuUwS3lKPtkSQZFvsH+MO6jlGGWBxs+JmiAuj
PPd16xzRVSjme3/sR9unuZttTSKmnpeTDK5hKEA/6dIpPkMR5Z8MknVy9LYxrrrP
cVDSoQslZKa0RAZuO1mMHERK4AjIK0x+y9DZMEVBT0pJ7Bft/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6NpvrNDZrakGIROv3Cs1vqcwgzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFiMGNkODktNWI1NS0z
ZGFiLWJkYTAtYjM4M2FmMjI4YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSG0oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVY+F3vRGtq//ZeLkgk3yhK8uwa5lPQSQTkeBZ9gfgD0DiwlGxnTwVo
tW0ggNBzGeksYfatGgrQNiuF7XB2fk/KJY8fXgzH+ZjOQbkJEq3FHK5vQimeA+QJ
3CZZ6KXVO67OjkgYDAGC8Z97QWKX37GDVNbtYLPqCI2Br8u/CUqdBjB8z5BWkiI2
rL6O1mRbMasLxeYTV/ZzrZQTPF301ChLQr/xFAUTEvCxAsmS77mOg4/8mzT/ljPA
jFEeWg/ImjtVzT3lZ3u4qWaG8+xng/CvIzVbavcdUkK3bMjxJtug3TTYFu9PBAwU
ZnZ0UYlYmvsGumTYGHVaQTshYFMqVRE=
-----END CERTIFICATE-----
Generated at Wed May 13 12:27:58 2026 by rpki-client