Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03080b57-ef31-3481-800f-cca904fbdf58.roa
File:                     03080b57-ef31-3481-800f-cca904fbdf58.roa (raw, json)
Hash identifier:          8PCGYLKXjEz8JZkxfVTzHBK4nL0OnLxpcyWwCyBkOAA=
Subject key identifier:   E6:DB:34:B5:AB:25:B0:AA:79:F6:FC:29:42:B8:44:9E:26:93:CF:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A138AECE968D302DD5640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03080b57-ef31-3481-800f-cca904fbdf58.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.104.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:13:8a:ec:e9:68:d3:02:dd:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=ab05512f-af99-40ad-869d-bb14132687a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:d6:5b:e2:4a:1a:33:23:71:10:cf:41:d7:
                    da:69:10:2f:de:3f:73:de:4d:4c:50:93:67:45:62:
                    43:85:74:e8:2d:6e:63:31:00:86:8d:a9:20:bf:1c:
                    a3:34:d8:28:7c:1c:ce:15:49:99:40:35:41:0f:b0:
                    d3:ec:9c:c7:63:5c:e8:0d:03:16:db:5a:31:cd:af:
                    10:6b:f0:43:d5:29:40:dd:39:90:bd:1c:f2:af:86:
                    de:78:e6:ef:4f:55:6d:ae:68:d6:16:2e:50:13:1f:
                    6f:af:dc:73:52:1d:02:d3:f5:3d:c1:10:d4:be:fa:
                    c6:98:55:6f:3c:6c:1d:ef:43:3e:d6:a6:3a:ef:99:
                    43:d5:9c:a8:f9:2e:d7:c0:53:0a:43:76:bf:17:65:
                    3b:29:df:4e:db:70:23:bb:ed:ac:b0:99:9c:b9:52:
                    49:07:c8:6e:05:49:13:68:51:ad:07:ae:25:42:fe:
                    db:b0:79:01:7a:5b:6c:e5:a9:02:c0:dc:0e:3b:4f:
                    15:4e:a9:2d:b4:12:05:bf:14:41:79:f0:27:02:ce:
                    3f:1c:50:6d:b2:18:cc:a0:ad:b3:18:48:67:a2:fc:
                    be:ce:08:0b:78:89:48:09:06:63:5d:e8:99:ac:d6:
                    2d:b8:8b:fb:bc:47:7a:69:ab:91:f7:75:0d:39:d7:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DB:34:B5:AB:25:B0:AA:79:F6:FC:29:42:B8:44:9E:26:93:CF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03080b57-ef31-3481-800f-cca904fbdf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:8b:2e:a5:42:92:ca:28:0a:3a:ef:f2:f9:93:df:8b:4e:d3:
         59:80:39:92:bf:c8:04:8a:37:61:81:5e:77:38:12:df:16:ab:
         12:8a:17:7d:00:0b:21:e1:8f:bc:a3:62:37:29:19:7a:b6:cf:
         e9:af:72:3d:94:9e:c9:d2:c3:91:e3:0d:77:a8:39:4a:5c:e5:
         ed:b6:c2:92:64:f5:da:c1:f0:17:30:cf:9d:24:7a:cd:19:57:
         1d:59:7b:40:48:02:e1:4d:a4:b5:40:ab:fb:f0:99:fc:2c:fb:
         bc:54:0c:13:3a:ce:fa:ed:52:64:09:7d:22:af:9b:90:fd:35:
         e4:f4:7c:ed:57:9b:a5:8f:ad:d0:62:8a:b8:c6:a8:66:e7:5d:
         5f:93:ff:f3:26:0a:e7:70:fb:83:05:46:a4:eb:f0:68:8b:12:
         5f:71:b9:4c:c3:4c:f9:4b:0c:0e:c7:f0:a3:8c:63:eb:24:f0:
         bc:a4:87:04:bd:5f:89:40:1c:46:14:fc:df:b1:c7:64:18:c5:
         7c:fe:b7:bc:c3:fd:9f:1c:a1:c4:d3:6c:71:f5:9f:a0:42:3c:
         25:85:b9:47:e3:3c:5e:1a:7b:f4:10:6c:ac:e8:c7:d6:44:b7:
         67:07:42:63:eb:e5:04:87:ce:0a:d3:80:50:4c:8b:26:9c:56:
         09:01:18:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:44:41 2026 by rpki-client