Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa
File:                     1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa (raw, json)
Hash identifier:          ur94sONTZQrPWWR5RA4nECpu54l1iYb8F5b1upR9fI0=
Subject key identifier:   AF:D2:1D:81:AF:19:83:C4:B6:5F:E9:6F:CA:F9:7D:BA:54:7D:90:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A09372286B859D9236700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.104.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:09:37:22:86:b8:59:d9:23:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=ddab287b-4c20-4644-9320-b188676b73f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:20:e4:cb:00:58:d2:76:a6:d8:90:58:43:
                    94:f9:98:cd:da:a0:ec:96:46:b3:0b:38:01:52:13:
                    34:c7:30:f5:9e:2c:21:e7:23:31:cf:1c:3a:bb:fc:
                    cf:15:43:63:34:73:78:0b:85:9d:f4:99:12:e8:57:
                    2d:39:a8:b0:cf:78:20:41:a0:a4:6c:3b:09:15:ef:
                    da:d9:5b:00:b7:09:0d:f2:2c:a5:0c:15:04:a2:31:
                    bf:69:af:3a:fd:69:8c:6a:ae:ed:17:2a:95:34:26:
                    bf:01:f6:26:31:9f:06:16:3d:c9:70:2c:9c:85:bc:
                    e4:d1:e8:81:c7:f7:65:74:9b:80:c1:05:4c:4c:9f:
                    ad:ba:e5:3c:3d:d3:08:6d:ce:29:00:ba:81:3a:95:
                    62:17:64:8f:08:16:66:12:ec:c7:0d:3d:18:77:af:
                    e4:50:0f:5f:ea:d1:2b:47:f1:d5:be:0e:bc:a7:20:
                    6f:1c:92:17:74:8c:52:79:fa:c3:88:dd:f0:bc:e6:
                    31:4d:19:5c:bf:2c:39:c4:51:48:c9:11:b3:1d:b0:
                    e0:c1:26:5b:43:91:3e:3b:cd:36:a1:f1:4b:55:8a:
                    b2:5f:48:92:47:ba:3a:17:51:8e:f5:ac:f7:62:45:
                    73:cd:c7:e9:54:7d:79:21:39:f4:07:e5:88:ca:f4:
                    e5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D2:1D:81:AF:19:83:C4:B6:5F:E9:6F:CA:F9:7D:BA:54:7D:90:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:45:44:3e:29:eb:d6:15:1a:cf:31:b3:52:e6:ab:f7:e4:
         9e:63:be:13:69:7f:3d:eb:c3:ec:57:a6:54:10:76:65:e2:1e:
         ea:47:40:df:39:71:c3:26:cd:11:c5:74:5c:e8:b2:66:10:3b:
         48:26:59:5b:0e:25:7b:dc:47:7b:22:80:84:79:b2:31:ed:7d:
         cd:ce:3c:54:50:a3:0b:d9:bc:a1:eb:c6:5b:f6:3d:51:c3:89:
         06:11:c0:da:2c:50:0b:f2:1f:32:91:05:23:52:11:23:d9:ba:
         24:4a:1d:6e:ba:38:da:2c:c0:13:2f:5b:41:1e:91:99:d8:18:
         2c:8b:b7:90:7e:56:f6:b2:3d:25:11:c8:04:e8:7d:7b:de:15:
         a9:d0:55:13:cc:41:d7:4a:41:4c:e7:84:da:a8:ff:bf:c4:b2:
         c4:af:27:6d:5c:93:4d:b1:0f:29:1e:87:45:b4:4a:fd:39:bd:
         4a:40:7c:42:7c:ef:e2:63:9d:3c:41:b7:a8:54:78:f7:83:b9:
         4f:5d:e8:f7:3d:fe:d0:3e:6f:1c:d8:bd:9e:cd:3c:82:f8:f2:
         47:8b:27:69:85:4b:43:3b:d7:13:0f:ba:02:66:dd:7f:bd:84:
         39:03:55:3b:c1:e2:b1:27:8e:c2:90:ea:af:02:52:3c:98:d3:
         3b:69:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:40:48 2026 by rpki-client