Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384bb31c-f694-300f-aef5-7e993598c12e.roa
File:                     384bb31c-f694-300f-aef5-7e993598c12e.roa (raw, json)
Hash identifier:          CQP3w8VTORSOT1nAcm+LH7CAXh9hnwn/5mDY2PI6mkI=
Subject key identifier:   9B:8F:3D:BF:51:16:19:5A:F6:6B:6B:4F:CA:1B:70:62:CD:CC:F2:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A126EE74522AFB65F1800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384bb31c-f694-300f-aef5-7e993598c12e.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.97.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:12:6e:e7:45:22:af:b6:5f:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=3a3e8081-fd22-43a8-90bd-8e49ca9611a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7e:08:2f:a0:ac:b0:e3:8e:df:cc:c5:00:01:
                    73:c2:fd:ff:29:30:1b:4d:5a:93:a4:c1:fa:de:bf:
                    f3:41:72:2a:70:f2:ec:18:5e:11:0a:b4:85:96:16:
                    57:ea:0e:44:e9:c6:c5:29:7a:ba:af:ca:d9:26:0e:
                    db:1d:64:e3:79:70:85:3d:8c:71:6e:a5:6b:d3:96:
                    ec:42:39:04:3a:fe:65:cd:13:06:3a:44:bf:43:bb:
                    36:5a:c8:48:ff:4d:66:9b:0d:45:bf:9d:a5:e0:4c:
                    56:fc:8c:9d:6c:a4:87:d6:71:5b:83:c1:e5:f4:46:
                    f4:21:f4:19:94:4b:06:77:13:a6:14:d3:1d:a0:51:
                    26:c0:69:99:6f:e0:03:56:ae:03:45:a2:ff:a4:90:
                    14:59:a3:6f:29:2e:57:60:ba:7b:bc:a4:ec:5a:c8:
                    ce:f9:ba:06:35:2a:01:3a:a0:2e:36:a4:fc:56:17:
                    f3:31:5d:2f:a6:fc:c0:d9:31:8f:55:d2:34:19:a2:
                    87:07:4c:10:49:2d:3c:3a:a0:ce:5a:2f:a9:63:a9:
                    1d:6f:d3:11:86:87:e2:90:e0:c5:ed:0a:76:75:47:
                    14:46:db:92:3c:91:05:0a:8b:6b:f2:2d:15:8c:45:
                    41:2f:5d:e1:1c:e5:fb:54:64:d1:8b:79:33:c5:d9:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:3D:BF:51:16:19:5A:F6:6B:6B:4F:CA:1B:70:62:CD:CC:F2:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/384bb31c-f694-300f-aef5-7e993598c12e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:78:76:41:bd:b9:6d:81:6e:4b:28:6f:9a:36:fb:b6:7e:49:
         c8:69:10:18:a7:17:66:70:0d:10:a2:05:4c:a2:51:b4:44:92:
         84:12:3b:79:70:bd:54:bf:c8:b9:84:d4:43:26:40:ac:90:4f:
         f2:ec:58:54:73:8e:17:11:12:63:de:87:67:ea:6b:68:be:59:
         74:42:fb:a0:32:9f:ed:24:66:a6:f2:f9:52:ac:0f:66:b7:ef:
         11:cf:e6:7a:38:00:73:83:92:35:81:28:f2:f5:1b:3f:60:0c:
         48:33:36:db:8c:79:1e:8a:1c:65:21:71:8f:78:2b:ae:c6:bb:
         ba:c1:62:98:89:f9:98:87:28:01:60:14:c1:16:01:0c:20:85:
         0d:93:33:c9:ce:cf:4a:d8:89:a7:a1:cf:1e:2b:7b:be:27:ef:
         cc:fc:a1:37:39:4c:e5:f2:57:48:79:f5:ec:21:01:60:24:48:
         0d:91:02:12:37:cd:ea:9a:2c:ed:ee:35:cf:15:1d:f0:51:02:
         1e:f2:d9:65:b7:42:8f:a4:30:19:9f:bf:5b:28:e7:87:3f:98:
         35:bf:5d:cc:9b:72:a8:8b:fe:bb:f6:eb:81:71:83:88:7c:b3:
         c5:f6:e3:d5:b8:9f:54:14:3c:95:5b:f6:c4:56:48:bc:11:f3:
         f2:05:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:46:20 2026 by rpki-client