Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47570e2-43d1-3e70-97b3-f00973013241.roa
File:                     c47570e2-43d1-3e70-97b3-f00973013241.roa (raw, json)
Hash identifier:          RGGJ2Kz5GVgYyY4NmN5p4iQJzpkDkOtZgDv20Acvdto=
Subject key identifier:   06:8D:9D:82:E6:B2:18:5E:2D:CB:EE:B0:EB:49:61:54:C2:AC:97:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EFCACD55C4B8A2D50C4D337C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47570e2-43d1-3e70-97b3-f00973013241.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        72.106.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:d5:5c:4b:8a:2d:50:c4:d3:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=c6678452-3ed0-45be-a422-23a8780cec0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:93:da:d8:d9:a2:7a:57:01:5a:58:f6:4c:
                    df:76:b0:5c:3c:34:56:bc:61:48:be:74:40:a0:52:
                    c8:45:86:9a:f2:a8:bf:2f:74:44:64:75:34:f6:16:
                    8e:d1:56:95:cc:2f:3e:b4:d0:65:07:ed:17:02:7f:
                    6d:e6:15:8b:21:e0:5d:f1:bb:2d:fa:91:9b:ff:43:
                    11:39:6f:77:b0:ca:3d:1e:df:36:84:d6:b6:ec:11:
                    8a:ff:72:fb:56:a5:9b:21:17:a8:eb:2d:50:be:33:
                    6a:5b:a5:ea:ab:4a:b0:76:76:71:d0:fe:34:0a:c2:
                    f1:93:d1:a4:3e:c1:5e:54:f6:75:aa:75:07:57:af:
                    bd:6e:2d:11:c8:30:39:71:fa:67:2d:0e:84:f1:d4:
                    c5:88:97:da:5e:f6:40:8f:55:e9:b0:a0:17:a7:92:
                    ef:4f:65:38:3f:e9:bd:3d:bc:38:43:17:15:55:9f:
                    19:e7:7e:39:51:49:ea:ca:99:34:73:8a:8d:cb:f6:
                    16:1d:45:4a:e5:8a:5c:b9:69:4e:66:9a:5b:25:0f:
                    50:ce:25:dc:ab:ce:49:b6:c7:7b:ea:00:36:db:47:
                    0c:0a:b0:d5:c3:58:c6:fb:df:48:14:36:68:ff:54:
                    d2:4f:ee:00:56:a9:f8:46:7c:d4:9f:19:1f:28:a3:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8D:9D:82:E6:B2:18:5E:2D:CB:EE:B0:EB:49:61:54:C2:AC:97:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c47570e2-43d1-3e70-97b3-f00973013241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:56:8a:b5:d8:8c:bc:c6:dc:4f:ff:47:db:eb:25:f5:2a:5f:
         6e:df:b8:b5:6d:90:09:42:cc:6a:1e:29:e8:20:a2:ba:61:f4:
         a8:55:0a:b9:84:29:c0:80:34:e2:33:e9:21:ef:3d:0b:75:76:
         5e:27:1c:b0:48:6f:84:5e:99:8b:e0:57:be:7a:0f:03:c3:cc:
         f5:b1:5d:97:ae:d2:4f:d5:99:3c:a1:06:c2:fd:e1:33:ed:c1:
         b3:8b:ae:7f:7e:87:2f:1f:7b:95:1f:cf:28:ff:ac:d4:7f:f4:
         5d:d0:62:94:1f:c5:6a:1f:ff:cd:3c:90:e8:d6:85:80:7c:34:
         b3:a5:d7:c3:98:08:b4:b8:f0:53:21:d3:16:f5:71:d4:28:99:
         4e:c2:1d:d9:68:f5:02:f8:b3:70:c6:73:88:92:e7:4c:a8:4c:
         d3:f9:33:fa:6b:5a:ba:4f:af:4f:fb:c1:af:c8:8b:a5:9a:fa:
         ea:00:5a:e3:e5:01:ce:55:4e:5a:3c:57:9d:c8:2c:cb:3b:00:
         62:2b:56:69:fe:0a:b6:53:4c:3c:3d:ed:f6:40:83:1e:c9:6a:
         8b:c4:bd:92:9b:46:a8:16:ae:9a:35:c0:3c:31:ff:98:df:dc:
         fd:59:51:82:a2:c3:57:08:16:fa:23:cc:c5:4e:27:4d:8e:e8:
         42:e1:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:41:36 2026 by rpki-client