Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5677569-d4c9-3338-8914-07c9f55d05ae.roa
File:                     d5677569-d4c9-3338-8914-07c9f55d05ae.roa (raw, json)
Hash identifier:          mNRGGd7Xzka8Z1TFNHsvvshkdSGmJC6D1EiSYTwp9FI=
Subject key identifier:   9F:76:DC:CA:1C:BC:02:8E:55:38:26:8F:35:EC:86:74:7E:C0:3D:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB5761BC347C0F4BF27C470
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5677569-d4c9-3338-8914-07c9f55d05ae.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.108.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:76:1b:c3:47:c0:f4:bf:27:c4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=309dc7db-83bc-421c-a796-2c3b323fd83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:52:61:14:69:9a:fe:97:63:79:ac:62:0d:
                    11:ad:b2:1c:6f:cd:bf:26:4f:bc:fd:8f:15:68:7f:
                    49:2c:b8:8a:d2:6e:cc:55:ec:78:40:be:8f:fe:18:
                    a8:52:ab:85:dc:23:b9:d9:62:f7:7b:63:a3:0a:de:
                    75:6c:78:99:66:eb:5e:06:f1:4e:48:04:41:d3:51:
                    40:6d:93:22:a0:aa:ca:8d:8f:4e:f5:aa:39:1e:f6:
                    33:f7:64:9c:9e:ac:19:96:8a:e2:ab:21:a2:3b:bd:
                    cc:f6:83:3a:5c:75:4f:ef:a5:6f:bf:07:8c:a3:2f:
                    2f:be:e8:5a:8a:65:d9:d1:9c:7b:4e:fa:fa:d7:f5:
                    6f:aa:df:0b:a2:4b:75:89:a9:29:ff:92:fc:94:ab:
                    b0:cd:8b:c2:58:fb:a7:94:2c:73:3b:fb:0a:a9:13:
                    df:7a:9f:80:e2:ac:b8:77:22:8f:5d:fa:43:5e:f7:
                    8b:10:b6:05:dd:7f:a0:34:93:e9:91:da:94:29:23:
                    3a:f8:a6:17:a7:24:37:d2:f6:70:2a:fa:2f:dd:c6:
                    3d:30:9f:61:0e:07:d9:9e:36:2d:7d:f9:d7:7a:ab:
                    54:04:33:e7:d1:1b:5e:6e:2b:db:52:9c:35:10:f9:
                    a9:bc:1e:fd:4b:83:d9:be:37:12:01:94:eb:08:a3:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:DC:CA:1C:BC:02:8E:55:38:26:8F:35:EC:86:74:7E:C0:3D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5677569-d4c9-3338-8914-07c9f55d05ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:0f:0a:e5:30:06:4a:d0:8c:b9:7d:a3:46:17:5b:8a:f3:f8:
         b3:8b:f3:8a:e4:30:3d:d5:ca:66:67:30:55:3c:59:50:c7:50:
         2d:d8:c1:95:4f:85:5c:a1:91:df:2c:37:71:8f:ca:31:57:19:
         c5:ed:7f:59:4e:5e:c4:02:1b:df:db:57:97:b2:82:7d:f8:70:
         80:ee:83:15:af:e6:d5:9b:c3:78:ef:32:68:cc:7d:bc:75:e0:
         ea:05:2b:92:6f:28:67:36:49:28:e6:3b:c1:ae:08:d5:90:b1:
         c6:e5:75:1f:56:0a:1f:6c:bd:7d:53:bf:a0:64:e4:1d:16:c9:
         69:5e:32:42:a0:18:1a:ba:91:72:20:67:5f:e2:df:3b:eb:2c:
         6c:1f:82:90:d8:e6:8a:7c:64:d7:79:b5:a9:e3:f6:09:df:a7:
         cd:ef:cf:5e:d5:ad:49:4c:56:0a:d2:07:e6:11:0e:a4:3f:65:
         a3:2f:75:f5:05:be:88:97:a9:74:c1:7c:8f:99:f4:c9:d6:8a:
         23:3a:86:89:55:ac:2b:28:7b:b4:68:03:0e:6d:83:1d:20:a9:
         3f:42:fa:b8:9a:b0:1d:57:c9:2a:76:9f:07:76:61:73:6e:a3:
         26:76:40:91:9a:2d:8d:ef:fe:94:f0:b1:31:14:94:ba:78:0f:
         a0:c2:36:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:55:43 2026 by rpki-client