Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa
File:                     efbab09d-fb3d-3770-acbe-e66c34412d53.roa (raw, json)
Hash identifier:          QphVfUdlvV662lJQPDXxLaf0YSGgSe5laN2pxCCT7T0=
Subject key identifier:   7A:9D:E5:62:25:53:DB:1C:05:0B:C9:CC:0C:C1:64:CE:FC:DD:61:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB576BD5B36DF74A4B38780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.108.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:76:bd:5b:36:df:74:a4:b3:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=99505862-7c84-4342-b2b0-853c323d3d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:fb:ed:97:53:1c:db:40:66:07:be:ba:28:
                    61:2c:60:8f:fa:19:b5:3a:cb:e2:36:9c:3f:82:e1:
                    ac:4f:f1:7f:ce:72:fb:1d:41:92:55:f6:dd:a3:f2:
                    01:f7:c3:35:83:a5:bf:a0:0b:5a:9a:3d:80:0d:b3:
                    49:66:53:27:52:a8:89:49:59:3c:5d:30:af:fe:d1:
                    ad:1a:d1:6a:b1:2c:19:2a:58:86:c2:e0:e8:25:b3:
                    94:31:37:46:3b:39:70:6c:0f:84:1e:7d:d0:b0:0e:
                    3b:92:e6:20:f7:45:9b:53:e3:d6:0a:0f:ff:11:ed:
                    d7:13:1e:5d:88:a0:2a:67:a2:da:a8:bb:71:8d:32:
                    52:96:0a:be:aa:3b:1d:0a:1c:b2:2c:b2:c8:98:2a:
                    cd:dd:8a:e5:6d:0f:47:1e:24:bb:48:38:46:88:11:
                    5a:3f:35:81:2f:c4:06:c2:3c:97:72:8f:22:67:7e:
                    42:de:44:27:09:25:c2:d1:af:67:0f:0e:a5:21:09:
                    18:54:dc:2e:45:01:a6:32:70:40:8f:64:07:99:bd:
                    8e:a3:4e:21:9a:ee:d4:ad:1f:c0:3d:f7:64:1d:4e:
                    be:2f:40:82:df:c8:f7:23:21:00:c8:ed:cd:65:10:
                    41:9e:93:53:78:c0:1f:16:42:74:09:32:f7:00:23:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:E5:62:25:53:DB:1C:05:0B:C9:CC:0C:C1:64:CE:FC:DD:61:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/efbab09d-fb3d-3770-acbe-e66c34412d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4c:f9:45:a9:35:5d:76:9a:10:c3:85:ed:75:de:d7:9f:70:
         f8:e3:22:77:87:0e:3d:e9:9f:04:2b:22:5a:98:7c:a5:2d:5f:
         0c:e1:23:16:f5:2c:e7:fd:0f:e5:43:b1:fb:c8:19:40:4f:eb:
         7c:51:4e:84:a1:f9:22:2e:65:0b:ce:83:02:79:ab:aa:e2:13:
         72:30:78:6a:64:ba:11:31:fe:2d:1d:d1:6d:58:11:3a:ae:db:
         9b:a8:0f:86:8b:61:97:ad:27:59:56:8b:a6:7e:d0:ce:66:10:
         72:91:d1:ed:99:01:b2:40:db:0e:71:f0:07:e8:43:05:f9:06:
         f4:6a:dd:80:c4:ce:52:17:18:13:6b:70:51:25:9f:fc:a0:c4:
         b2:79:f6:8f:da:e4:33:4a:fd:6c:15:85:31:15:34:69:94:25:
         e0:24:55:b2:0a:81:fe:93:63:1d:9a:54:78:3b:d8:3c:b1:ca:
         57:5d:a5:92:4c:bd:de:fb:70:94:fa:0a:51:a1:88:be:f3:9f:
         2c:3e:df:7e:3d:9d:4a:38:e0:46:2c:37:a9:8f:13:c0:f6:fa:
         45:86:d6:78:4c:ee:85:77:9d:4b:22:8f:1d:f7:8f:46:c2:69:
         c6:66:74:f3:ed:9b:94:b5:ee:2a:40:ec:e8:af:5d:5a:98:ee:
         15:e7:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:05 2026 by rpki-client