Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee7d9cfd-ee1a-3eb9-8285-056c8918365a.roa
File:                     ee7d9cfd-ee1a-3eb9-8285-056c8918365a.roa (raw, json)
Hash identifier:          jzcL+gFx2ujSLD7QoGCmJBQAKKZd19b5ZyZYF/ayiWE=
Subject key identifier:   4D:39:73:38:D3:0F:B5:6A:6E:F6:60:53:E3:0D:53:B2:F6:E0:C3:48
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB58150988E6F9B67F63680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee7d9cfd-ee1a-3eb9-8285-056c8918365a.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.107.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:81:50:98:8e:6f:9b:67:f6:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=c91546b1-6b10-4661-aa80-8bde7437a458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:05:a2:8f:3b:c5:0b:f1:c5:ea:74:7a:01:
                    7c:68:cc:d4:44:65:82:48:d0:21:98:71:2a:76:7f:
                    ac:0e:8e:6e:90:4d:80:e1:69:75:ef:a9:72:cb:27:
                    eb:5f:5c:f9:f6:70:8c:0d:e3:93:17:50:ca:d1:fb:
                    8a:4e:03:15:cb:5e:88:7d:00:b8:17:1b:27:77:82:
                    29:40:90:15:97:37:aa:2f:53:12:a5:7a:94:f9:dd:
                    0a:2c:8e:29:4d:f7:d0:28:b8:2f:f3:68:44:ba:00:
                    58:23:14:44:a9:fa:c0:a6:cc:6d:01:f2:23:f6:5c:
                    bb:09:64:4f:f4:61:ee:a7:87:ff:02:8f:74:03:08:
                    79:5e:4c:01:ff:24:3e:ce:af:9e:7f:f6:3e:cd:01:
                    9b:ed:d1:26:93:36:25:dc:d1:a2:34:55:84:7a:5e:
                    7d:59:fd:7b:83:e2:3b:2d:7c:11:3d:9e:a3:f0:37:
                    25:ee:a9:1d:bb:d4:1e:9b:1e:76:39:2f:38:bf:03:
                    22:df:d4:47:28:4c:1f:3a:9b:7d:c1:05:8a:cd:92:
                    f1:4e:df:a3:93:22:43:8e:21:8c:d2:8d:87:fe:1f:
                    cd:29:06:7f:5d:ad:a1:9f:d2:84:62:d9:42:44:6c:
                    df:1c:75:38:eb:1e:f3:05:69:15:e9:2b:1b:df:66:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:39:73:38:D3:0F:B5:6A:6E:F6:60:53:E3:0D:53:B2:F6:E0:C3:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee7d9cfd-ee1a-3eb9-8285-056c8918365a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:94:65:bc:9f:c7:81:bd:c4:56:a6:61:53:8c:99:a7:ac:ec:
         81:33:56:ce:f9:d2:dc:da:70:a4:b9:68:6c:c9:4c:3d:c5:16:
         d1:7a:c4:43:72:22:fb:7a:ee:16:e7:a1:51:94:59:de:39:3c:
         b3:87:4b:25:21:a7:2a:56:20:f6:a5:ee:a8:90:e5:63:73:b3:
         3c:80:62:91:4e:b8:eb:37:02:58:7d:ab:3a:5e:64:02:af:04:
         31:d2:22:bc:a4:2d:2f:6d:9a:df:52:44:5d:91:2f:de:42:d6:
         cd:f5:af:b1:ba:8d:c5:db:b8:91:11:15:94:77:09:3e:c1:75:
         13:5e:d1:a1:d5:94:5f:c0:c3:58:a1:4b:b8:73:ff:ac:43:c6:
         f1:f4:8c:4b:25:96:ad:75:9f:ba:30:22:05:bf:d8:3b:58:e8:
         86:04:37:a5:7c:71:4f:cb:11:58:55:1e:56:8e:2e:ba:0e:80:
         76:bd:18:e5:76:08:cd:b1:3a:81:99:11:1e:e7:ea:85:50:c2:
         b1:4a:f9:5e:dc:7d:ba:52:4f:ba:00:64:d7:e1:98:69:a8:52:
         d1:53:bd:20:cc:1f:90:66:61:cc:2a:5d:d5:4b:b1:84:99:96:
         7d:37:02:a1:ea:07:6c:e5:94:c4:3c:86:e7:39:bf:93:d7:43:
         c4:46:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:24 2026 by rpki-client