Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa
File:                     c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa (raw, json)
Hash identifier:          Uy1tA5HeUvY/I77av9xMcsEFyMeGZ/z3FK/YBCTTlsQ=
Subject key identifier:   85:05:88:1A:A2:1E:A1:90:83:AB:2A:E6:97:D3:4F:C9:A9:92:E2:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB5751E9CAA6F7216C4E720
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.108.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:75:1e:9c:aa:6f:72:16:c4:e7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=8efc0bc2-60e9-44b1-b635-02f1725d8a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:1b:11:99:43:ef:a0:a1:d2:e4:ac:e5:b7:
                    04:0f:31:b1:36:a0:86:1c:b6:a1:42:1b:db:e8:da:
                    39:be:d5:c6:6f:df:35:a4:fe:90:ba:1e:85:ae:a3:
                    b8:6f:fd:dd:98:b3:04:1a:d0:89:33:ba:10:ce:aa:
                    50:b7:11:bd:02:f3:6b:d8:ea:d7:4d:bf:20:6d:64:
                    18:26:7e:fb:24:94:a6:4c:e8:64:20:4d:8a:c9:40:
                    03:89:23:5a:34:f1:af:a2:70:64:fe:df:42:cc:db:
                    de:c0:66:3a:95:f0:b8:33:40:71:57:3a:bc:53:c5:
                    c4:f1:32:fa:b6:49:18:81:7f:88:c5:30:5a:be:70:
                    7d:41:72:63:02:62:1d:e0:e3:ef:88:36:8f:83:75:
                    2c:94:48:61:3e:03:21:ed:0e:d5:32:b0:ce:a0:06:
                    86:a8:f9:68:e9:91:5a:10:45:94:8b:49:0d:55:94:
                    69:52:48:ac:76:02:02:cf:0a:54:3b:a0:a3:22:be:
                    21:31:41:75:8e:16:f9:10:28:e1:8a:35:3c:f0:7c:
                    64:a8:98:e4:c4:fe:fe:62:25:7a:81:6a:ee:32:e1:
                    a3:d6:a6:78:af:58:c8:3c:41:28:4f:40:a3:b2:03:
                    a5:dd:9d:26:1c:3c:33:ac:2c:fd:fc:64:fe:8b:d0:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:05:88:1A:A2:1E:A1:90:83:AB:2A:E6:97:D3:4F:C9:A9:92:E2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3406df6-c3a3-36ac-9211-24fe2ddb0c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:4d:45:04:91:1f:a6:d9:c3:d0:94:fc:b0:49:9c:30:9c:e1:
         18:55:1f:7f:20:30:3b:75:91:21:76:c6:42:9c:1a:a0:c3:56:
         46:b5:6a:f7:2d:b9:25:fd:80:cb:21:e4:26:03:b1:82:b3:7c:
         7a:15:d7:b5:c3:68:a6:b8:2d:ef:87:a2:76:7e:66:fd:57:95:
         5d:5c:0e:68:c6:71:7f:88:c2:a6:c7:0c:7d:df:79:fd:56:c2:
         ad:3c:f2:59:88:35:49:4a:a9:0c:57:c5:e2:f0:3f:e6:59:fc:
         a8:cd:08:fe:12:6d:b6:50:e5:09:94:c3:59:71:88:e2:8e:dd:
         be:39:a4:c0:54:eb:0f:7c:9c:b6:a2:b4:2f:4e:ad:03:d0:8e:
         9f:c0:7e:99:66:07:b2:8d:70:3c:5a:bc:de:d6:8c:99:ce:f9:
         a5:83:6f:f2:ca:73:a4:17:7b:60:c1:99:06:31:a3:39:dc:45:
         dc:fb:ea:54:ab:d4:35:39:1d:d5:30:89:f0:ed:6f:06:b9:e2:
         2a:73:2a:4e:1f:7c:89:f9:9b:5d:73:51:a3:68:f9:c9:7e:64:
         1f:59:ca:9e:a1:07:e8:9d:a3:8e:4b:1a:8d:83:b3:fc:5f:96:
         01:8d:01:14:54:05:cf:fb:44:16:04:fe:b9:48:d6:6d:c3:8a:
         66:4a:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:49 2026 by rpki-client