Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1703f7b5-e86c-3e82-b24a-a8bfbbb577af.roa
File:                     1703f7b5-e86c-3e82-b24a-a8bfbbb577af.roa (raw, json)
Hash identifier:          hdUqbqg8JAy872ZVau4Qi/EdoRv/tUvkjTd/N/bmQso=
Subject key identifier:   B1:95:9C:20:42:AA:4E:C3:DF:34:59:33:24:E2:A5:4D:58:D3:DE:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D7A0541263A27B3095680F7D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1703f7b5-e86c-3e82-b24a-a8bfbbb577af.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        72.104.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:41:26:3a:27:b3:09:56:80:f7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=cd1a8def-fb7c-43f7-b014-e44d3c187756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:dd:ed:b9:05:70:0e:31:b3:24:a1:9b:ce:
                    e7:b0:2b:f1:6f:3a:7c:cf:52:20:6d:2a:f4:d8:9e:
                    57:f7:84:6b:cc:a0:8b:e4:50:d6:e8:04:53:af:fe:
                    88:1a:09:65:89:29:9a:26:4f:da:69:df:2d:b4:fd:
                    e8:8e:79:9a:1d:b5:7a:eb:69:64:e9:b0:c0:99:39:
                    78:58:48:f2:33:c1:83:f3:cd:d0:89:b6:c6:9c:67:
                    83:78:b4:bf:0c:55:d2:0a:ab:28:e2:fb:b0:8b:34:
                    8f:1a:d7:16:c6:e4:77:94:c7:eb:a6:12:49:e5:76:
                    99:1d:39:9d:54:85:b1:ec:19:43:06:2c:d1:4a:f4:
                    df:24:ab:2d:34:85:bd:f0:3c:7b:92:10:a2:f2:70:
                    b7:1d:7e:e2:da:b0:df:b9:f0:75:a9:ee:ac:dc:7d:
                    b9:2c:0e:23:49:5b:45:1d:10:19:ac:e7:7f:fe:e2:
                    ae:4f:81:a7:24:95:42:8f:4f:53:38:31:8c:be:29:
                    ab:60:f9:75:38:40:db:32:df:4f:64:f5:49:b0:cc:
                    6f:f0:3f:99:ee:a9:97:e6:0f:86:84:b0:e7:3f:f2:
                    33:9b:6f:35:a9:1b:22:94:47:e1:ca:9d:9b:c4:c9:
                    42:dd:fb:8a:7b:f5:94:8e:58:ac:66:6d:1d:82:29:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:95:9C:20:42:AA:4E:C3:DF:34:59:33:24:E2:A5:4D:58:D3:DE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1703f7b5-e86c-3e82-b24a-a8bfbbb577af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:bc:bc:c5:a8:14:24:0a:53:47:cd:2c:34:09:ea:b6:fe:78:
         3a:a0:69:67:3a:d6:a5:1d:e2:0d:33:f0:36:09:a0:1f:09:be:
         50:3c:35:dc:11:20:db:30:7f:31:21:32:03:2c:14:1f:ca:54:
         1a:81:c8:3a:70:64:51:55:41:0e:0d:06:d4:a2:38:ee:cc:b7:
         b5:73:78:1d:96:8c:94:87:31:00:b8:92:62:78:1c:4f:01:0d:
         5f:21:47:18:20:04:05:59:26:6d:21:f8:e8:4f:9e:d9:09:30:
         fc:b6:d0:a0:67:b5:e8:44:c7:d7:01:21:aa:78:82:da:07:46:
         9b:37:82:38:b8:59:1f:12:7d:07:52:b4:f8:87:1d:ad:39:24:
         d7:05:95:bd:7f:38:be:e9:61:33:2e:d1:bb:da:60:ad:8b:38:
         da:43:a7:bc:b8:08:27:d3:c2:07:81:dd:2d:61:3f:c1:e0:d4:
         c3:81:b6:be:fb:e2:6f:b5:2c:f9:d6:a5:d8:2f:a3:fb:a3:35:
         f9:82:be:78:2c:4d:53:4a:d2:6e:1f:91:70:51:33:a4:93:2c:
         6d:2b:c6:91:d9:4a:1b:c0:0a:7c:52:a5:81:a7:34:81:43:f7:
         49:b8:e5:6a:2b:86:e2:20:95:76:8f:bf:e4:ad:57:99:c2:4e:
         82:1a:63:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:22:59 2026 by rpki-client