Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0ab86f2-8728-38a9-92e3-f40cc6f8821e.roa
File:                     f0ab86f2-8728-38a9-92e3-f40cc6f8821e.roa (raw, json)
Hash identifier:          iy9BWBAl8bd7dYtp/keBKhqVWmtMPXtYv6bWGpF0qqk=
Subject key identifier:   88:DD:9D:78:8F:DA:C9:1A:E5:46:E1:2E:A3:28:92:09:7E:F5:3B:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9FB5758038FDB26B46BE5300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0ab86f2-8728-38a9-92e3-f40cc6f8821e.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        72.108.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:75:80:38:fd:b2:6b:46:be:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=882f25f9-18b9-461b-9277-ebafefe09b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:4a:e3:65:cc:23:73:e8:5d:01:fc:64:4c:
                    db:82:94:d1:e3:63:b0:9c:79:dc:6f:96:bb:c9:f2:
                    e2:d0:c0:51:e0:81:0a:b9:af:08:5d:98:36:21:68:
                    8b:9a:12:0c:c9:0f:91:d8:72:07:cd:98:b0:1d:cd:
                    6d:1d:de:be:0b:69:10:1a:5e:89:90:48:77:e9:f2:
                    d1:03:c8:6f:62:c3:69:df:c1:f7:f4:8e:a8:ef:bf:
                    ef:6b:f0:60:ed:52:80:be:b5:03:3a:ad:ef:fe:dd:
                    fc:9f:fd:f9:21:1d:85:21:ae:af:04:d3:43:29:4b:
                    db:bc:53:e6:66:8c:66:92:53:7a:84:c1:5c:26:31:
                    d6:02:ee:29:33:f8:c2:d1:20:1c:17:2c:03:c2:53:
                    a2:6d:2a:c3:95:45:12:e1:24:75:70:a1:52:34:66:
                    59:72:07:0b:ca:db:0d:e0:33:01:62:6e:7f:44:8b:
                    84:8a:bb:70:80:81:60:64:f2:9c:44:64:8c:3a:d0:
                    c3:9c:dc:bd:f5:57:0b:d4:a6:04:d1:4a:04:21:7b:
                    19:70:83:db:bd:db:b2:f6:1d:d1:b0:34:40:d8:5d:
                    d2:bd:0c:39:d8:ca:d4:68:c7:05:3f:9a:9d:09:d0:
                    77:5e:5e:4f:44:8f:94:9a:52:98:28:5e:fc:9e:86:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DD:9D:78:8F:DA:C9:1A:E5:46:E1:2E:A3:28:92:09:7E:F5:3B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0ab86f2-8728-38a9-92e3-f40cc6f8821e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:4e:4b:81:c6:f9:52:a8:92:d3:c9:d8:51:6d:dd:9a:c7:
         7a:54:ab:a0:7c:d4:2f:08:db:86:f7:7d:a5:4d:8a:e4:9a:f5:
         7e:07:51:86:5c:40:bc:cb:5a:b9:30:a9:92:b5:94:1b:d1:07:
         07:01:2f:4f:d1:99:ea:17:19:30:c4:8f:c1:d4:8a:4f:3f:37:
         a2:f3:86:a6:ba:fd:73:a7:89:0b:ea:18:1d:74:32:83:eb:63:
         89:be:c3:29:6d:58:3e:7e:82:2f:74:cd:a3:8a:ac:0c:54:a9:
         2b:7c:80:f7:41:e8:bf:d7:0b:7c:9a:0d:a7:55:28:71:6b:07:
         72:c1:0e:79:e9:7e:4f:e4:53:4d:16:1e:60:69:3e:22:af:a2:
         5e:09:44:b2:39:19:a9:85:c1:eb:b0:61:1b:9c:0a:00:c3:9f:
         1c:b8:e9:b0:15:51:09:a5:87:f3:ff:fa:d1:54:61:31:4e:16:
         b6:f6:d4:7d:e9:66:ab:ab:e2:a2:e3:44:66:bd:fe:8d:ff:41:
         99:08:4f:7b:44:bb:58:1b:22:be:b0:77:06:25:f4:c9:3a:b6:
         14:45:af:3f:c4:6b:b1:df:fe:92:24:36:66:cc:40:bd:bb:99:
         55:a1:57:24:e0:0b:ae:73:6b:23:a8:75:7d:09:ef:6c:1f:0f:
         db:31:9d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:46 2026 by rpki-client