Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15579d4a-f809-324a-a127-7f002dd6963c.roa
File:                     15579d4a-f809-324a-a127-7f002dd6963c.roa (raw, json)
Hash identifier:          YMKbWk6wOcRN0dwde2D9ltVF14YXtpKBMhxXHQBPT1o=
Subject key identifier:   1B:18:BD:27:45:3A:6C:5B:D2:03:36:ED:B3:92:22:3B:86:9F:D2:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D7A053FFC1888BDC8CA74CE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15579d4a-f809-324a-a127-7f002dd6963c.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        72.96.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:3f:fc:18:88:bd:c8:ca:74:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=d1f071fd-c5f5-4c2d-a6e1-2b7138639cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:8a:cf:33:cf:ff:4b:74:65:5b:62:61:b7:
                    a0:42:d6:86:5c:ea:cc:3d:3f:5b:8e:c2:0b:7e:59:
                    8e:e2:f2:dd:89:df:81:db:3c:d2:92:ad:f9:04:a3:
                    d5:3b:41:62:6d:6e:70:03:7c:41:5c:52:dc:38:7c:
                    1f:4f:fc:1d:81:74:b0:b3:86:e2:12:25:3b:2e:d4:
                    aa:56:71:90:5a:07:6d:23:ef:0b:74:5a:c4:4b:1a:
                    54:b9:e6:54:a1:da:f2:15:3d:21:ef:cf:25:d2:21:
                    d2:70:43:5a:8a:9f:75:f8:89:61:27:e1:40:db:33:
                    48:a6:5b:d8:33:7f:f4:9d:a1:5a:ab:df:e6:26:79:
                    d6:90:0b:08:fc:42:45:6c:84:92:f1:0d:15:3d:56:
                    c0:06:73:3f:ff:51:b9:09:36:6a:16:b4:f9:06:d4:
                    58:7e:a4:8a:e3:0d:15:fa:4a:e9:f4:8c:fc:67:c1:
                    6f:2f:c1:5f:79:89:7f:15:b0:e2:8a:1e:28:69:0a:
                    53:6e:fe:49:99:98:1c:e7:5c:60:d0:b1:0b:e2:65:
                    2b:65:69:94:53:f6:bc:63:23:32:2f:96:ec:a4:45:
                    30:06:a0:c5:08:59:d5:2c:c0:bd:13:02:7a:38:7f:
                    28:44:1d:f9:d4:df:f0:e7:ed:55:53:43:72:61:40:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:18:BD:27:45:3A:6C:5B:D2:03:36:ED:B3:92:22:3B:86:9F:D2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15579d4a-f809-324a-a127-7f002dd6963c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:fe:70:9d:02:e7:65:53:0a:2f:58:05:d7:ad:cd:ed:e8:
         8d:d3:56:d5:c7:a4:da:81:40:fc:95:93:4c:3b:22:63:3f:5c:
         73:4f:73:eb:0e:15:20:2a:e4:ab:47:00:2e:e0:b0:34:17:2a:
         67:25:4c:9c:6a:bc:30:db:f1:10:89:b5:fe:ea:aa:f6:f9:fd:
         ac:a3:f9:18:ba:2c:a0:f8:fa:78:d5:4f:54:14:20:e6:43:35:
         10:58:8c:75:0f:08:a3:b4:cc:76:69:69:df:d2:41:31:ae:96:
         54:3f:e6:d4:ca:75:b4:87:6d:c3:05:39:15:57:23:42:30:3f:
         4f:d7:84:cf:16:d6:8f:2e:62:8f:ab:7e:5c:9b:56:dd:7e:b6:
         ca:b4:ba:93:fd:17:3b:34:5a:a9:bc:af:d3:eb:ed:da:58:38:
         fc:ad:37:99:6b:1f:c7:cd:ff:8f:04:86:28:e6:ac:3b:c7:1f:
         41:bb:e4:ab:f3:04:60:06:3c:65:25:b7:da:d7:b7:dd:c9:47:
         bc:50:a7:1d:ea:89:2c:09:44:ac:c3:56:7c:1e:d9:12:a6:8a:
         e2:c8:c9:f6:d2:0d:62:d3:42:eb:e4:a0:23:f3:5e:94:26:39:
         5c:9f:96:80:c7:35:7b:81:fe:1e:89:ed:1b:03:79:6a:27:48:
         4d:17:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:21:29 2026 by rpki-client