Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa
File:                     db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa (raw, json)
Hash identifier:          RYjC3yGTMAHp2w8FmzTnEVFe6xK9eSi+TOQSCsQPWDI=
Subject key identifier:   71:66:DA:FF:B7:EA:F7:89:CC:3C:54:3C:2A:36:81:71:0F:EE:C1:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C54A3E451D9F7C6ECDE9800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        72.85.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:a3:e4:51:d9:f7:c6:ec:de:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=854545fa-cbd2-4f8a-b8e9-dee7c7a2c138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:e8:19:f0:ee:92:e3:c8:52:0f:97:92:94:
                    96:58:02:a2:31:43:f1:16:d8:da:de:e5:16:73:ea:
                    1a:86:e2:23:5d:c0:32:db:60:5b:8b:83:03:74:3e:
                    8f:4b:68:53:41:76:1b:c3:10:b1:75:11:43:ac:94:
                    09:70:bc:92:fa:92:a4:21:48:39:73:94:9a:b1:ba:
                    af:c8:98:b3:df:44:66:c4:a2:86:4f:5c:9f:52:7a:
                    a2:4d:60:17:17:c3:cf:3c:6a:12:d2:a9:14:bd:0e:
                    6b:d0:79:73:35:c4:41:8d:aa:a7:27:1a:57:fe:b7:
                    7f:f0:48:f5:b4:1b:eb:56:33:19:c9:26:c9:67:68:
                    ee:33:61:0e:f5:e5:25:e9:ed:56:40:b5:ae:c3:0c:
                    cf:af:f9:72:43:07:eb:86:0c:6c:0f:f7:c5:7f:40:
                    89:48:29:4f:38:40:5c:9b:ff:6b:5c:ee:91:fd:83:
                    22:04:0c:5f:ac:e2:34:92:ad:41:3c:e3:63:06:c9:
                    32:9f:e2:d8:d8:ca:48:65:3f:b0:ff:25:30:dd:46:
                    c5:04:20:a4:a9:80:ef:1f:d4:e4:7d:c7:06:1b:ab:
                    07:28:32:4b:79:86:f1:83:ef:f7:d7:52:5e:b6:c8:
                    52:4e:af:4b:df:ef:63:f1:ab:2b:d0:cf:5b:b6:47:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:66:DA:FF:B7:EA:F7:89:CC:3C:54:3C:2A:36:81:71:0F:EE:C1:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.85.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:23:30:c8:e8:4b:5d:c5:90:cb:73:ae:f5:28:e1:76:2a:21:
         ce:13:37:e0:c9:17:88:6e:ac:e3:14:fd:3d:ff:2f:cd:f0:c7:
         fd:f3:cb:6d:b2:60:41:78:44:49:5c:2a:74:ba:fb:63:2c:9c:
         91:95:d6:f9:a4:55:a3:12:aa:df:d7:f3:21:ce:4d:7a:a1:d4:
         e9:ea:02:fd:e4:88:35:37:50:59:94:60:de:d9:af:35:a1:7f:
         71:cc:9b:9d:e9:eb:de:a1:c6:aa:bc:c0:65:68:d8:d4:55:3e:
         5c:57:7c:fb:61:f3:19:24:fb:91:64:d3:5f:0b:b6:78:8c:52:
         bd:e9:2c:d0:dc:d6:78:92:db:33:e0:a5:be:72:67:44:49:02:
         4b:00:84:54:c7:16:3a:ea:41:c7:4b:05:97:d4:2f:17:38:73:
         94:84:f2:26:eb:a0:28:48:5a:63:2f:2d:ec:4a:75:3a:8e:42:
         f4:9c:73:3d:e3:eb:3d:63:33:4e:d3:d1:62:84:24:59:f3:bd:
         ba:c4:c8:7c:13:75:05:bd:d6:bd:5e:45:fd:23:8c:95:33:34:
         22:a7:9e:43:83:f3:ef:d2:a7:45:34:8b:2f:78:0e:7b:e2:5e:
         a3:d4:95:bb:b0:f3:df:6e:77:37:0a:36:c3:59:4c:e1:96:05:
         e3:23:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:39 2026 by rpki-client