Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27e855a9-fb1d-3324-b68d-588e47ab0248.roa
File:                     27e855a9-fb1d-3324-b68d-588e47ab0248.roa (raw, json)
Hash identifier:          cy65J09UJvbtZpplRB1dPifwerfcvwNdrXFmVRnkFlQ=
Subject key identifier:   6D:F2:3D:1A:06:12:10:29:1E:DD:A8:CC:1A:3E:35:8C:75:C4:CE:67
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A083ECF80E0E98AAE86E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27e855a9-fb1d-3324-b68d-588e47ab0248.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.97.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:08:3e:cf:80:e0:e9:8a:ae:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=ec601d94-c673-4b15-994b-b6c0bfd1fdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:40:2b:f2:e6:52:13:4b:82:da:1c:30:e1:
                    ae:31:09:ef:0d:8a:ca:b0:29:17:89:93:4a:82:68:
                    28:8d:e2:fa:c5:80:1c:6b:40:2a:da:6d:c4:a0:5e:
                    3f:7b:c4:61:fc:6a:7f:d5:c6:b8:28:05:2f:34:56:
                    ed:55:f4:38:1e:82:df:b7:ce:c6:a9:c5:58:75:69:
                    51:bd:8a:3e:62:46:b5:04:70:ee:dc:39:cc:c6:90:
                    56:2c:d4:ff:54:b9:ab:b6:a9:2d:d3:7a:57:d8:36:
                    cb:fa:4e:e7:ef:3a:45:32:62:c6:6b:59:2f:e2:6f:
                    31:a7:1b:de:b7:47:a8:b3:7a:df:82:31:9a:86:db:
                    d9:0c:e5:04:7f:21:39:49:ff:9d:92:fe:88:6b:23:
                    f7:f1:18:d5:04:80:8c:e6:ad:41:2d:ce:63:19:9c:
                    23:52:da:42:6b:b4:d2:4a:a9:35:c4:be:e2:b6:2f:
                    25:ae:91:c5:d0:e4:5d:29:bf:eb:d4:6d:7c:50:cb:
                    47:76:1b:56:d6:5a:5e:c2:38:b2:ef:95:28:da:a0:
                    64:5d:c6:bc:ad:a0:90:3b:1f:e6:63:10:74:ad:cc:
                    b6:99:b4:02:6a:99:50:b4:7b:ad:9a:1a:3b:5c:6f:
                    d6:b5:e2:ab:01:a8:4a:75:48:38:8b:bb:99:c4:43:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F2:3D:1A:06:12:10:29:1E:DD:A8:CC:1A:3E:35:8C:75:C4:CE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27e855a9-fb1d-3324-b68d-588e47ab0248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e7:fd:cc:6b:1c:74:53:8d:2e:9c:4d:46:41:11:7e:70:a5:
         ea:e7:60:b5:85:eb:77:91:59:a8:12:46:f6:71:0b:08:db:04:
         a8:c8:c1:a3:91:b4:1d:41:03:a4:83:14:48:b6:4e:dd:7d:ab:
         09:47:e4:d6:20:23:90:ea:64:5f:7e:b6:4f:0a:c7:3a:0b:ac:
         a1:90:72:2d:6b:1e:5c:2b:af:01:b0:e0:3e:bb:c8:d9:99:87:
         54:fc:41:4e:0b:d7:0e:5e:a9:5b:c0:c3:bb:65:a8:66:d3:39:
         b1:61:08:52:21:f0:43:df:c4:7c:83:c8:c2:4d:3a:4e:8f:58:
         45:70:6e:5b:3f:dc:64:bd:b8:be:6d:1b:5c:1c:06:91:f3:b7:
         51:ab:61:42:00:7d:58:97:b4:68:05:5e:57:44:d3:b1:48:c6:
         c7:56:9a:39:04:39:04:e8:a1:3d:9c:c1:b0:e5:30:6b:a1:2d:
         6f:0d:54:57:74:e2:9d:bc:eb:ec:79:dd:6c:3e:e0:e2:26:a8:
         49:14:0e:0d:69:df:ef:63:34:aa:81:34:e6:89:29:dc:d1:05:
         e5:8a:f6:dd:c1:d2:79:85:55:16:80:54:a9:0f:91:ac:77:ff:
         41:db:88:63:93:6d:32:d3:e3:d4:81:7e:be:ba:3b:d1:f9:e8:
         fc:19:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:45:40 2026 by rpki-client