Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8e61c56-84ad-327d-ac54-ea1df7a10cf0.roa
File:                     f8e61c56-84ad-327d-ac54-ea1df7a10cf0.roa (raw, json)
Hash identifier:          08Q9S/yU/adJ0MrdvYX+xHDkNzRWCJLGfC/BOfsR/+Q=
Subject key identifier:   D7:38:F3:C3:36:C8:C3:FB:C8:12:3D:4A:43:CE:B8:3B:89:EC:AC:06
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F225D0D423DB759324DE41510
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8e61c56-84ad-327d-ac54-ea1df7a10cf0.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        72.107.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:0d:42:3d:b7:59:32:4d:e4:15:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=8793601b-d0ec-46f3-a301-8ac597346193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:f0:aa:5b:7c:0d:46:5a:c4:a5:09:8e:1c:
                    86:d6:52:02:7d:67:29:ba:d1:07:9f:bb:c1:6a:e5:
                    a6:21:48:11:6d:db:a4:a2:a4:27:05:e0:cf:59:56:
                    8f:86:33:92:b4:87:6d:f6:75:73:b9:71:c7:73:91:
                    37:d6:a9:24:bd:4f:20:1d:c8:3a:15:f0:1b:25:39:
                    0d:87:fd:47:f8:04:72:c3:c5:fe:7f:12:2c:d0:d9:
                    44:50:36:d7:fb:8f:32:31:a6:57:6c:51:b6:f1:bd:
                    28:7c:c1:15:c1:e1:81:98:3d:bf:e3:5b:5b:22:53:
                    9b:7c:8e:d4:c5:0f:14:56:62:c0:9c:cf:54:6e:f3:
                    5f:4e:60:6e:b0:6b:4e:0c:48:c3:a1:e4:fb:85:92:
                    3a:70:97:0f:8c:05:6a:bd:73:9a:fd:b6:87:90:82:
                    82:a4:6f:f2:f5:6f:38:aa:5b:3f:23:46:55:f3:41:
                    f4:18:62:75:f2:19:0e:8b:a6:28:af:bd:3c:0b:28:
                    b1:2d:bc:4b:3d:24:36:0d:a4:dd:2e:b4:d6:88:12:
                    e4:c5:a2:0c:78:d1:91:9d:83:78:aa:ca:bc:cb:2b:
                    94:08:15:e1:b8:3d:8f:00:a7:aa:8b:20:78:6a:53:
                    16:0b:0e:8a:3f:1c:80:fb:42:9d:5e:fc:e9:e8:e1:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:38:F3:C3:36:C8:C3:FB:C8:12:3D:4A:43:CE:B8:3B:89:EC:AC:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8e61c56-84ad-327d-ac54-ea1df7a10cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:31:f7:13:fb:13:44:19:fd:33:b0:4a:cf:fd:52:59:49:82:
         cb:34:d5:b9:c4:9c:b3:06:4f:26:c9:26:3b:3c:85:49:eb:4d:
         4b:6e:2e:d2:ca:77:16:60:a9:35:26:41:f8:4e:22:c2:dc:0c:
         c5:39:ff:93:fa:38:ea:da:37:8d:c0:ca:82:d6:c3:4a:0c:3c:
         a8:99:14:3c:af:d6:5e:98:af:07:7b:90:dd:57:4d:76:99:83:
         eb:1e:f8:31:92:b1:4f:f6:ad:48:e9:74:d4:af:db:96:3c:e6:
         00:74:61:fb:92:40:ba:97:7c:0d:73:b4:94:b5:30:bf:cb:8c:
         3f:ab:4a:97:0c:b4:9c:dc:d9:46:da:23:e9:eb:49:28:36:32:
         d4:18:7e:cf:80:a5:e3:5b:02:4f:c4:82:44:5b:5d:52:f8:05:
         ee:55:f0:42:d4:8a:22:2e:58:3b:bc:b4:7c:30:87:b7:32:92:
         79:0e:27:aa:36:d0:b6:79:81:ec:d1:d2:43:2e:f4:be:a8:69:
         7a:74:45:05:96:14:77:53:99:4b:d7:2a:90:6e:68:0a:f1:38:
         ee:38:52:b8:35:2d:75:20:cb:f8:7f:a6:7a:06:61:84:cf:04:
         de:d4:dd:ee:2c:1c:b1:f8:22:27:ea:7d:cf:28:9e:ee:00:c2:
         f2:6d:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:55:40 2026 by rpki-client