Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7570e3-1c12-3c04-ab2c-1b35e2550afa.roa
File:                     2e7570e3-1c12-3c04-ab2c-1b35e2550afa.roa (raw, json)
Hash identifier:          2RbaoHs3ZZctQ3x13NWKPpp4F0PZ1rbzAIQa8/rGOWY=
Subject key identifier:   A4:14:62:66:83:09:44:DB:0C:36:32:89:3B:6A:10:39:CB:F1:6D:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A11924454AFED4D69DD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7570e3-1c12-3c04-ab2c-1b35e2550afa.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.96.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:11:92:44:54:af:ed:4d:69:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=45434bc2-0a74-4b1c-a1d9-37d794596f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:f6:d3:d7:19:3c:f1:23:90:57:d1:b2:09:
                    f1:1f:9d:9c:f6:d9:2e:23:2e:1c:20:f5:fc:2b:09:
                    2d:68:1d:12:30:44:46:32:34:00:b0:52:10:69:ae:
                    74:80:eb:70:63:29:2c:a8:7f:d1:67:a4:ca:1a:e9:
                    52:d2:5a:34:11:8d:ea:f7:cb:4d:e1:02:ca:61:87:
                    54:e8:e6:b8:25:9b:67:02:a3:47:0e:d0:49:26:2f:
                    54:ed:da:1c:25:49:3f:e0:07:0d:00:ad:84:82:d6:
                    c6:99:76:76:85:51:b4:6e:4a:07:bb:ac:0e:5c:99:
                    d1:87:5c:b5:24:45:7f:28:d5:7d:95:f2:aa:22:29:
                    6b:db:a7:24:d7:dc:95:7b:b6:77:d8:40:b8:b9:0b:
                    92:21:46:5d:ed:08:19:af:27:89:73:b9:1d:c8:c0:
                    ef:fb:d0:6e:89:e7:ca:d5:91:c1:84:03:9d:81:1f:
                    03:c6:67:d2:03:74:e4:b1:ef:27:8f:0a:ad:4d:4e:
                    d7:24:15:cd:68:6a:34:d9:26:f5:83:bc:15:1a:f4:
                    20:81:27:28:61:5a:33:0d:5f:91:11:ec:a2:57:a8:
                    f0:3d:91:f1:3e:e1:fc:80:29:c5:77:00:6a:22:0c:
                    49:fb:21:76:ca:ac:1d:a2:2d:45:2e:72:45:cf:1a:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:14:62:66:83:09:44:DB:0C:36:32:89:3B:6A:10:39:CB:F1:6D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e7570e3-1c12-3c04-ab2c-1b35e2550afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c3:8c:4e:60:af:7a:d2:f4:06:1e:70:5a:d2:f8:e3:27:01:
         11:37:0c:c2:f5:be:4f:3f:c3:ab:b9:6f:58:70:62:d3:56:87:
         bc:45:38:81:ec:33:27:4b:60:32:a2:64:b8:8a:50:2a:30:0b:
         37:6b:13:61:62:15:8f:c6:35:82:1b:07:13:a9:32:59:16:b4:
         f8:aa:33:d0:95:73:75:76:17:9d:a0:36:5e:5a:3a:8e:6c:de:
         d0:2a:10:3a:3d:70:12:43:8a:2b:bb:64:e0:1a:65:3c:f4:ff:
         b9:c1:fd:0e:c0:c2:e6:af:f7:9d:24:13:f3:7e:48:d3:67:68:
         5f:72:94:f1:27:f5:bf:ee:77:fc:f3:62:21:0b:b9:d4:af:9e:
         b9:66:a7:65:63:49:5c:8c:d9:9b:82:29:61:03:28:29:2c:fd:
         ff:e8:b6:6d:1b:49:7b:cd:5a:15:2b:b5:8a:ed:1b:74:c7:7f:
         59:50:9e:d6:35:9b:30:49:a6:01:34:c7:3e:c0:08:71:29:db:
         52:f3:78:f8:c4:54:79:66:99:5e:78:f7:58:c5:f2:89:1a:e6:
         61:41:b1:d4:44:90:85:35:5b:fa:b5:90:02:bd:c5:05:4f:4e:
         86:ba:02:0b:71:10:d2:3f:f1:d9:70:27:1e:93:04:24:e4:5c:
         89:b3:9b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:42:56 2026 by rpki-client