Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0addc89-0a9a-3d80-99df-50d2387e1635.roa
File:                     b0addc89-0a9a-3d80-99df-50d2387e1635.roa (raw, json)
Hash identifier:          4rYg+2uxWnmcZRNBIV/Zkzy4o76oUS3MPddrYsft3Nc=
Subject key identifier:   7A:CB:6F:7F:D2:70:5D:BB:D9:A3:BF:C2:81:F8:98:89:6A:40:B4:59
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA461AD1027EDAF521E100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0addc89-0a9a-3d80-99df-50d2387e1635.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.103.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:46:1a:d1:02:7e:da:f5:21:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=3dd6ae79-af9a-471a-b390-5173f8e7d4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:6d:82:fb:0a:b0:02:59:f4:04:29:b6:61:
                    83:29:b2:5c:29:14:69:fa:64:1a:d9:d5:92:37:cc:
                    e6:0d:2d:08:14:b0:dc:dd:29:e9:0e:1c:70:fc:d1:
                    76:00:d5:d5:39:4a:10:4c:8f:19:a7:46:11:ea:3f:
                    55:f4:66:32:5f:3a:12:84:a1:14:ae:47:99:c0:aa:
                    e6:bb:c8:7d:ea:73:eb:9c:21:13:df:fa:88:b7:30:
                    84:32:a8:45:4e:60:1d:b3:75:9b:fe:4b:e9:d7:15:
                    5a:ba:f4:c7:77:66:ed:ed:46:4e:3e:8b:1b:28:f8:
                    98:e8:92:87:5a:06:ee:e9:7e:aa:e8:bd:00:c0:22:
                    62:8b:80:e5:86:9b:bf:34:96:2c:61:16:76:ab:f1:
                    88:f2:46:ce:1b:6c:9d:a9:78:90:8d:0e:bf:dd:79:
                    68:43:48:9f:78:c0:8a:4e:59:a0:ff:30:f8:e7:b4:
                    45:43:34:35:6f:7f:23:03:01:85:4f:d6:ac:d7:59:
                    7f:2c:c4:e4:33:6a:00:90:a7:0c:92:fe:5f:76:9e:
                    f4:30:66:1e:4b:2a:4f:4a:84:57:dd:ea:0c:da:39:
                    62:9d:a2:68:33:2e:c1:85:09:02:82:81:4c:ef:b8:
                    61:9b:b9:ae:79:91:0a:02:b7:81:0c:6a:3a:d8:b9:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:6F:7F:D2:70:5D:BB:D9:A3:BF:C2:81:F8:98:89:6A:40:B4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0addc89-0a9a-3d80-99df-50d2387e1635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9c:02:78:e7:39:07:36:9b:dd:fb:6f:7e:b8:c6:6a:2c:3d:
         04:b7:44:61:56:38:77:3d:24:7d:97:67:d2:7e:ed:cc:7c:0a:
         7d:96:01:9f:87:ae:16:66:0b:27:1b:76:4d:8d:aa:08:66:29:
         d1:7f:44:42:40:b0:c6:c2:d9:87:d8:69:29:02:93:3d:7e:58:
         99:df:f6:3b:c2:3f:7b:14:4a:d2:58:d1:81:ce:d0:08:16:b3:
         cb:fa:af:00:50:c8:11:81:95:50:21:68:d9:16:75:80:fb:49:
         77:06:72:f7:fe:33:ef:c4:c6:7e:ab:28:24:af:cc:31:86:d1:
         5f:86:bb:0d:5f:af:a9:82:23:81:72:c1:2d:85:83:e9:3b:98:
         f7:ad:40:b5:d5:41:70:3d:ad:22:9e:12:ec:d7:cf:fe:ed:06:
         c5:bf:5e:e4:1a:22:01:51:2f:91:43:41:07:27:2b:ea:da:ce:
         e0:ba:99:b5:53:8d:f0:20:1a:6f:d2:49:30:5a:66:f1:4a:36:
         8d:dc:af:8e:c7:c4:37:3a:a7:c1:9b:f3:22:b6:db:0d:6e:08:
         05:0d:e8:8f:21:07:81:57:df:21:da:27:9e:ad:a4:f4:ef:1d:
         dd:9c:7a:26:94:ac:83:20:9b:26:40:c0:cf:35:4c:f0:18:ad:
         0b:36:d2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:00 2026 by rpki-client