Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10ba52d2-83c9-3ae1-97c6-4b366a5fa819.roa
File:                     10ba52d2-83c9-3ae1-97c6-4b366a5fa819.roa (raw, json)
Hash identifier:          pTJsHVYx2QVvS1jB9/MTYiUNYp7Sef9s62dYyd9EINw=
Subject key identifier:   5A:69:1E:8C:31:46:B3:2C:8B:87:86:69:29:AB:0D:C6:24:3F:EA:F7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A1340210EAF1D0B1E5DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10ba52d2-83c9-3ae1-97c6-4b366a5fa819.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.105.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:13:40:21:0e:af:1d:0b:1e:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=77608aa7-6b0e-4dc8-8785-062ec3932f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:bb:11:f2:2a:9e:13:96:b0:fe:68:0e:6a:
                    00:4b:c8:1b:fd:ea:b8:4a:53:b8:a8:23:c1:60:5c:
                    e6:e3:97:d9:06:a7:a1:78:77:b5:48:b9:0e:a9:dc:
                    03:d1:ec:3f:da:88:de:a7:78:1d:f7:52:a8:44:73:
                    e8:d2:26:bb:94:7a:76:28:92:22:89:f4:a1:75:5d:
                    96:d8:80:98:b8:a1:b5:9f:26:51:e3:be:ad:a2:2d:
                    62:02:b7:ef:f9:d9:d9:df:7e:82:34:e8:e5:2f:16:
                    5d:35:48:9d:9a:22:f0:fa:71:28:37:2f:1a:bb:88:
                    95:ea:f6:e4:29:f1:de:0d:09:f5:b3:c6:1d:6f:e4:
                    cb:d4:de:03:f0:78:19:e4:fe:18:56:ba:db:91:0d:
                    3b:da:f4:6b:b6:d2:c9:41:bc:dd:38:8a:bd:9c:30:
                    ea:b6:bc:1b:54:f8:70:5e:0e:57:10:57:65:bd:3d:
                    2c:6f:c3:16:a3:74:66:e4:4c:ee:bf:e3:c6:35:43:
                    40:fd:66:a2:b0:30:da:f3:62:67:be:f0:c3:74:d1:
                    21:91:ee:a4:16:21:cf:f9:75:6b:03:41:1f:9d:30:
                    80:4b:2f:f9:97:9c:2a:40:aa:74:a1:50:04:71:c6:
                    65:e1:ce:95:c1:5b:94:ca:b3:ea:23:ca:56:a7:7b:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:69:1E:8C:31:46:B3:2C:8B:87:86:69:29:AB:0D:C6:24:3F:EA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10ba52d2-83c9-3ae1-97c6-4b366a5fa819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c0:91:87:59:8a:97:77:55:aa:07:d9:85:29:d7:5f:6e:29:
         5b:ce:d5:e4:79:98:20:15:fb:57:02:7c:15:78:d6:21:9f:69:
         d4:1c:80:80:32:a2:12:bb:66:1a:ad:14:25:4c:89:ae:41:06:
         79:94:e1:74:cc:88:33:70:38:a3:20:09:7e:6b:9c:6e:18:30:
         94:bb:c8:75:40:eb:35:2a:29:49:6a:ae:a6:62:f5:e2:32:97:
         79:d5:9a:2a:e7:9c:79:13:4f:85:cd:1d:85:f6:a8:73:b8:5a:
         e8:12:3a:b4:e9:5a:fb:5d:36:59:b5:a1:0e:62:10:f9:88:1c:
         d2:9d:82:8e:38:44:f4:87:5f:4e:8a:cd:e9:41:7c:c2:e4:4d:
         eb:a8:6a:62:e9:35:f1:19:22:27:fa:f7:14:50:ad:3b:d5:57:
         e3:b0:23:85:85:cd:31:90:be:fb:3c:b5:a9:f8:4e:70:c7:b0:
         77:6c:27:39:f5:a2:4d:c2:f1:37:27:57:fc:e6:ba:c5:e3:85:
         b2:42:39:e1:f4:60:f6:12:84:69:1c:12:cf:32:2d:c4:80:90:
         e9:c1:2f:aa:36:e7:b6:1f:ca:b5:0d:01:59:57:d5:ba:29:f6:
         0b:e4:26:4c:bc:17:d0:f2:67:2b:d9:82:c9:8b:05:b0:28:e2:
         df:5a:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:37:42 2026 by rpki-client