Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb9339e4-fd81-326b-8511-fab9b0c40539.roa
File:                     fb9339e4-fd81-326b-8511-fab9b0c40539.roa (raw, json)
Hash identifier:          KsZ41xBxKCXnQZndO2nHa4l25JlsPUR4aYcxnGw1Xa0=
Subject key identifier:   C3:99:F2:72:DE:A7:CF:CD:38:48:C8:9C:1C:23:B5:6E:37:4A:F5:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7FFA3F06014D91FFE521CCE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb9339e4-fd81-326b-8511-fab9b0c40539.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        72.107.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:3f:06:01:4d:91:ff:e5:21:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=6f7e18af-da99-4106-b0f7-fe1f988c9f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:64:0e:1c:3c:b6:df:50:ae:1f:70:a6:78:cb:
                    c3:c5:0f:61:c6:60:1e:69:85:3e:46:2c:1e:9a:e3:
                    6b:06:b0:07:46:31:fd:01:6e:95:f8:3a:fa:bc:f1:
                    e3:39:67:b8:86:68:a7:e7:4a:6c:c8:bd:dd:0c:7c:
                    b0:b3:3c:fb:91:16:5c:aa:05:22:ce:f8:f6:e4:93:
                    f2:5a:dd:f5:18:4f:aa:f7:10:da:51:ac:3e:43:07:
                    41:de:a8:99:52:b3:96:4c:fa:c3:92:44:0c:00:75:
                    c9:48:e8:a6:2b:d0:6b:d2:9b:e1:9e:57:58:40:89:
                    ba:4d:d4:a8:ff:57:aa:b4:db:27:67:ad:a4:10:94:
                    01:50:7d:10:97:cc:9c:32:6c:d4:1f:3c:6f:18:96:
                    8a:fe:75:4b:2f:20:32:d6:6d:3b:ed:2d:cc:39:4c:
                    c7:5c:f9:9b:fc:f7:68:f1:7b:e7:03:fc:c5:9c:f3:
                    7b:1d:2d:88:61:1c:a4:52:64:f0:e9:05:ff:01:9d:
                    ec:92:45:bc:0c:64:06:00:3e:6b:61:88:c5:dc:cb:
                    e1:1b:5f:70:ff:29:c6:91:91:95:7a:b6:93:db:a2:
                    14:53:4b:d8:0f:bb:9a:be:c6:1b:76:d9:75:09:36:
                    e8:2f:13:48:33:e2:4c:73:1d:99:71:42:2a:47:56:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:99:F2:72:DE:A7:CF:CD:38:48:C8:9C:1C:23:B5:6E:37:4A:F5:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb9339e4-fd81-326b-8511-fab9b0c40539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a3:6b:21:36:b3:05:c1:9e:a2:8c:a5:65:ee:d9:50:93:4a:
         5a:91:dc:c0:5a:fb:93:59:9a:f0:dd:e1:a5:e2:00:61:1a:62:
         17:6a:3f:ad:8e:8c:96:c4:95:5f:62:a4:ed:83:23:00:a6:7f:
         b3:cc:f8:d3:6d:18:03:40:e7:08:33:48:a0:02:13:52:5d:eb:
         e1:4a:f6:64:fb:86:aa:4b:27:78:44:f4:f3:a3:08:6b:db:a0:
         90:d4:ca:73:e5:ab:df:bf:95:a3:67:c6:13:1c:2c:d9:3c:f2:
         e2:fa:7f:5a:c7:79:da:bf:b0:ea:36:ec:14:f9:2c:0d:38:6a:
         1c:c3:5d:be:79:33:96:6d:15:14:a6:64:fb:4d:2c:14:b9:95:
         de:29:98:c3:e6:b9:d4:9b:fb:70:f2:c1:24:2a:46:b5:49:96:
         ef:ee:ef:71:f1:30:b4:39:19:2d:cc:20:02:85:4c:d9:0f:75:
         36:1b:2c:81:76:5b:f8:b3:e7:51:8c:af:df:c9:ec:41:59:37:
         f8:35:e1:fc:f9:32:62:dc:76:49:69:e7:e7:57:3b:1a:3a:54:
         bf:89:bd:2a:59:d7:96:f9:f7:86:84:db:20:7f:77:7a:03:35:
         4f:8d:76:24:63:9f:50:bb:59:7c:30:20:6a:6f:5f:55:ee:9d:
         53:0f:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:38 2026 by rpki-client