Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562f858-5992-347b-a1ea-567709f6c154.roa
File:                     3562f858-5992-347b-a1ea-567709f6c154.roa (raw, json)
Hash identifier:          BhG0wPAK3GXflEa3yZjYqq2p5NB4xMul8QsKvz4Cr24=
Subject key identifier:   58:D9:BD:CF:E0:DC:AC:A0:CB:51:A9:8D:A6:4C:BF:93:27:1C:C9:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A13EA59F515F07AFAC5C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562f858-5992-347b-a1ea-567709f6c154.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.105.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:13:ea:59:f5:15:f0:7a:fa:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=63944e35-2a62-424a-8f15-5c5df6624eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:37:17:ce:52:e6:c5:38:58:24:58:53:0d:
                    25:4b:9f:54:d9:0e:5b:bc:9f:4d:ac:89:ee:24:bf:
                    7c:3d:b1:4d:ab:2d:cb:90:ad:22:be:64:cc:2d:d5:
                    3b:de:0f:81:22:d9:e6:c6:fb:6a:bf:e4:69:8b:3c:
                    45:af:b7:2c:c0:66:52:c3:3c:88:47:54:ae:c2:08:
                    76:75:ba:6f:e8:bc:c8:e2:cf:8c:ec:dc:36:1e:e2:
                    3b:76:1d:68:fe:bf:e5:30:eb:01:52:b3:5e:79:c6:
                    32:53:f1:c3:79:ea:a2:8a:92:dc:ab:11:24:50:4e:
                    21:25:02:d1:33:9d:01:75:f6:3c:67:f5:b7:96:3c:
                    36:39:a1:46:f8:15:ac:5e:3f:7b:16:bf:aa:f3:05:
                    b0:d7:98:d8:75:af:2e:a4:ac:a7:ec:ed:d8:37:9e:
                    21:f9:9a:31:10:4b:72:6c:df:62:f2:7a:f6:b2:28:
                    a3:4f:63:1f:5d:f9:14:d3:32:18:cd:e9:d8:7b:0b:
                    ef:fc:e2:c1:44:57:ac:4a:d4:37:48:dd:e6:5b:54:
                    a8:0c:aa:4e:dc:d7:16:17:2c:a8:84:1d:9b:92:b6:
                    3d:b5:fd:16:ef:e2:24:77:85:aa:f6:db:d2:41:3f:
                    7b:6c:1b:19:6c:10:67:2e:d3:61:52:cf:16:6e:c4:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D9:BD:CF:E0:DC:AC:A0:CB:51:A9:8D:A6:4C:BF:93:27:1C:C9:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562f858-5992-347b-a1ea-567709f6c154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:74:5a:13:04:2c:cc:04:09:44:d5:8a:d5:b7:ab:2e:28:da:
         e7:1d:3c:95:35:84:7f:7d:89:bb:9b:da:61:dc:92:4f:46:59:
         08:ef:66:92:8f:fe:8a:21:85:74:c2:96:88:ce:0b:77:48:a6:
         11:69:36:72:a9:83:a9:a9:eb:cf:5e:86:f0:87:17:a6:33:b4:
         6e:af:d1:32:de:fe:63:6f:a8:67:82:40:63:31:8c:18:16:61:
         a3:a7:83:96:87:79:10:4d:1b:97:fa:1a:49:c8:8f:e6:bf:6a:
         18:b2:a2:33:e6:c6:89:ab:c6:be:af:bd:de:d5:fa:e8:c7:8d:
         e3:1d:b0:63:db:dc:da:dc:6a:d0:f7:fc:98:9b:7d:5d:c3:5a:
         83:cd:25:0e:52:a6:ca:d0:13:4e:6b:c3:37:d6:c1:5d:28:25:
         f4:64:84:96:25:f7:db:17:11:3f:99:a8:af:d3:d5:b7:64:bb:
         37:e8:7d:a3:77:44:75:69:b3:5a:3f:d3:5f:20:cd:a0:d2:1c:
         d7:53:b8:70:a2:83:16:de:de:2f:6f:4a:23:b4:43:a4:ae:c9:
         a0:f4:09:89:33:66:42:29:b2:95:5f:64:46:b3:bb:f5:fb:b0:
         98:6f:f9:e5:a1:b2:95:c7:b4:8c:0b:87:18:d4:1e:51:ba:d4:
         61:7e:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:33 2026 by rpki-client