Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d8958cb-297a-369f-a0ce-e360d09deebe.roa
File:                     0d8958cb-297a-369f-a0ce-e360d09deebe.roa (raw, json)
Hash identifier:          yRKHS/2QXC71CC4ccxaHvtiYgL5JZotR2rENjXa5gFI=
Subject key identifier:   20:65:29:8B:1E:45:4D:FC:B7:00:4C:69:43:21:6A:4E:D0:83:86:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3237903097B8741407217900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d8958cb-297a-369f-a0ce-e360d09deebe.roa
Signing time:             Wed 16 Sep 2026 17:17:49 +0000
ROA not before:           Wed 16 Sep 2026 17:17:49 +0000
ROA not after:            Tue 15 Dec 2026 18:17:49 +0000
asID:                     6167
IP address blocks:        72.96.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:37:90:30:97:b8:74:14:07:21:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 16 17:17:49 2026 GMT
            Not After : Dec 15 18:17:49 2026 GMT
        Subject: CN=057c8edb-4b9a-40a6-bdcf-7d967576442d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4a:7c:a3:31:7c:b4:db:e6:cc:25:f4:61:a9:
                    72:44:c8:ca:77:1d:f1:3d:4d:1e:1c:55:5b:be:bf:
                    83:a9:bd:55:3b:17:e1:6a:a2:b3:79:e8:58:d8:e5:
                    cc:53:c6:52:cb:b4:64:7d:d3:de:49:e0:18:6a:0a:
                    5a:0b:4d:a9:b8:bd:2b:d7:16:84:c6:43:6c:d9:a9:
                    1e:ec:d1:a4:23:62:a3:a6:99:c1:a7:7a:3c:8e:0a:
                    18:36:ab:43:4b:e9:40:d9:f1:20:73:0a:ae:bb:bb:
                    d7:a0:26:bc:e4:ce:40:2a:64:16:4f:03:11:5b:13:
                    d9:42:b5:ec:c6:08:23:2b:8d:7a:7c:12:fb:4b:1d:
                    2c:e6:3f:47:10:53:db:92:e5:30:6c:10:e5:db:f2:
                    e5:2d:cf:c4:d5:e0:22:67:54:c0:dc:8f:4c:b0:c7:
                    da:a0:82:14:b5:75:33:b3:72:16:c5:d9:db:73:3d:
                    65:bb:34:18:52:08:a9:b7:43:83:f7:24:98:16:14:
                    90:6f:f8:17:92:80:ea:b2:01:43:f0:ab:ff:3f:14:
                    eb:c2:f3:20:08:31:74:f7:4a:66:2d:84:e7:58:a5:
                    90:41:d3:37:1b:f1:0f:df:5b:05:9a:ed:00:de:57:
                    99:53:10:f1:51:19:51:06:c1:4e:c7:c1:a8:b3:3b:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:65:29:8B:1E:45:4D:FC:B7:00:4C:69:43:21:6A:4E:D0:83:86:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d8958cb-297a-369f-a0ce-e360d09deebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:31:5d:3b:3c:50:60:5d:1e:23:de:5a:05:a6:d1:4b:bd:97:
         21:f6:54:f9:49:22:de:fe:24:56:97:16:5f:27:bc:01:22:38:
         95:20:2c:83:db:2c:22:20:2a:15:75:f4:07:05:22:18:e1:07:
         cd:6c:76:93:2e:05:cc:19:d7:d3:60:f0:76:f0:f9:c9:27:9a:
         07:7d:21:50:c4:af:1e:bb:27:17:e8:4c:f7:86:3a:c6:d7:8b:
         f0:0a:d2:5e:dd:26:73:0d:c4:f8:06:64:f3:30:f1:ab:07:d3:
         db:3f:16:56:29:a8:20:4a:f9:3b:5e:af:bb:d9:51:01:c1:83:
         63:62:0d:a1:32:85:e4:ee:0c:91:39:ed:8f:24:8f:bc:8e:79:
         b1:ef:fd:d5:f0:1f:57:93:b6:81:82:0c:52:ee:1b:f2:83:27:
         73:e8:94:9d:fc:8b:f0:08:44:15:22:f6:a7:65:80:a2:d1:1e:
         e1:2c:91:41:e3:12:e0:13:33:df:cd:67:a8:b8:6d:14:40:4d:
         34:91:d0:91:f1:60:d8:19:bf:77:d3:24:d3:9a:6e:1f:39:d0:
         fd:c5:65:d7:d3:a0:6e:6a:d0:21:ad:dd:17:07:b6:eb:4c:ee:
         9a:c7:96:9f:9b:a4:04:28:02:bf:0a:7c:eb:c6:a2:26:fe:17:
         cc:d4:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:50:51 2026 by rpki-client