Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be2b4709-f250-3be3-b3c2-b101643bd3a3.roa
File:                     be2b4709-f250-3be3-b3c2-b101643bd3a3.roa (raw, json)
Hash identifier:          4HNzFG+hRXhJkhxcOdRONGipnEryH66xdZcB296m0iY=
Subject key identifier:   83:77:35:DB:2D:39:FD:BC:79:01:30:B1:DD:9D:D4:40:99:99:38:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C54A43F5B7AEA4AB4420700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be2b4709-f250-3be3-b3c2-b101643bd3a3.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        72.90.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:a4:3f:5b:7a:ea:4a:b4:42:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=718ce5f6-af5d-434d-bc09-9382852cb329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:5d:f5:aa:61:07:4d:df:be:68:1b:2e:a0:
                    d8:ee:17:4a:6f:4c:8e:b5:40:20:99:52:1e:8e:6d:
                    88:37:a3:23:48:0b:fb:4a:e6:37:10:20:2d:6f:42:
                    b8:af:80:6a:6d:0d:c3:96:94:74:ca:33:e2:82:62:
                    01:5d:bd:b5:56:4b:7f:4c:07:00:49:bb:39:ff:11:
                    ef:0f:cc:52:8f:c3:3d:41:c0:89:47:5b:29:06:ae:
                    52:94:f7:a2:3b:97:a5:0f:c3:2b:21:ff:5a:a6:d4:
                    85:8b:73:10:57:91:c7:4b:6f:f3:46:32:52:6f:d3:
                    bc:9d:87:f7:73:bc:65:4b:ce:a2:25:93:61:b7:f1:
                    6c:15:b8:28:33:ee:cd:9e:a5:3f:0a:f0:ce:c7:7a:
                    21:d5:5c:ae:21:b2:e1:58:8e:d5:78:d8:96:f7:4f:
                    f9:13:65:73:e4:68:f7:10:c2:5e:d3:6b:6b:ba:d1:
                    99:df:9c:2c:b2:13:55:86:83:c0:48:74:28:0d:27:
                    d5:09:ca:5f:07:f1:ca:ea:73:a8:f9:dd:4d:bf:43:
                    63:3c:c7:0f:4e:75:3e:9a:9c:32:39:06:29:c9:c0:
                    de:45:e9:06:86:e6:e8:24:fa:ba:84:4b:d7:46:b7:
                    5a:42:1f:4a:5b:c3:29:73:70:8b:b9:39:f6:bb:b2:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:35:DB:2D:39:FD:BC:79:01:30:B1:DD:9D:D4:40:99:99:38:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be2b4709-f250-3be3-b3c2-b101643bd3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.90.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:68:d6:f9:a0:04:a4:16:3e:cd:07:83:ef:f2:ea:35:c8:
         3f:f9:4e:5a:8d:c9:5a:57:a8:97:e2:bd:21:d8:95:d9:3f:99:
         3e:5b:9e:7f:ab:c5:56:a3:e7:47:5e:f2:17:ca:8b:23:a3:2a:
         2f:c0:55:53:c9:55:6a:19:ee:ff:73:36:d3:23:5d:93:3d:9a:
         04:23:97:09:cc:b8:2d:a5:e1:b0:c1:40:87:f9:f9:44:fc:b8:
         10:da:03:e2:f4:ea:18:f4:ef:da:4e:2b:7b:a5:a2:55:0f:9a:
         53:12:70:1d:6b:d7:8b:76:58:13:8c:d5:4a:77:30:ec:08:a3:
         8d:f4:1e:95:95:a0:03:46:90:5b:d4:38:58:43:a0:dd:e0:22:
         39:24:1a:4c:a1:58:c7:9c:d4:9a:20:74:e2:7d:a7:2f:ef:20:
         51:5e:0c:a7:8e:76:ff:fc:4d:0d:86:dc:b9:f5:00:e3:82:d4:
         fd:a5:de:b7:a7:9a:d9:e7:fd:08:c1:27:34:41:b1:f3:17:26:
         29:ad:b8:8c:82:e7:59:11:cc:94:ce:f2:16:61:07:79:ba:93:
         27:66:ce:bf:60:29:a5:49:eb:6c:41:90:8d:ff:c4:eb:d1:7a:
         bb:6f:f4:ec:86:e8:42:7f:bb:60:d7:6a:d6:6b:90:be:89:ba:
         34:39:a5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:30 2026 by rpki-client