Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fe19558-7968-3576-b543-b3b7f823be04.roa
File:                     3fe19558-7968-3576-b543-b3b7f823be04.roa (raw, json)
Hash identifier:          oU6CSIq2eENl7IBhpLTgqWKcgAGVDILBjQo5i4kFTPQ=
Subject key identifier:   B1:0A:E1:6F:25:06:15:D6:1C:CB:0E:29:8F:7D:2D:CF:8D:73:30:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F32379DE2E10772E1B6A9EF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fe19558-7968-3576-b543-b3b7f823be04.roa
Signing time:             Wed 16 Sep 2026 17:17:56 +0000
ROA not before:           Wed 16 Sep 2026 17:17:56 +0000
ROA not after:            Tue 15 Dec 2026 18:17:56 +0000
asID:                     6167
IP address blocks:        72.103.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:37:9d:e2:e1:07:72:e1:b6:a9:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 16 17:17:56 2026 GMT
            Not After : Dec 15 18:17:56 2026 GMT
        Subject: CN=8502e182-4754-4771-a69d-4cc06f3a7314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:77:e4:8a:98:a9:a1:1a:9b:d3:81:cc:de:72:
                    e1:e9:12:57:c9:fa:74:bf:d4:d0:9d:86:1b:37:c3:
                    1a:b2:65:8b:c1:93:9a:0a:66:22:29:9c:12:cf:33:
                    7b:97:60:97:cd:88:8b:a4:85:c8:73:8d:3a:25:de:
                    c9:1c:62:b0:33:87:75:25:de:a1:fc:73:5a:d2:18:
                    94:d8:b9:f2:8b:8f:74:88:5f:13:d1:41:b3:6d:82:
                    23:86:52:39:23:cc:e9:d7:26:33:10:e6:ef:ed:b1:
                    bc:75:ce:62:60:b3:1a:01:b3:33:a8:4f:8c:d1:24:
                    53:e1:47:87:28:d6:3d:f4:5c:b2:a6:7a:6f:2f:8a:
                    6c:41:e2:c1:0a:a9:db:1b:b9:06:5b:41:b5:1c:c9:
                    76:61:6c:af:73:2c:0a:3c:e4:b9:d6:5e:54:17:47:
                    da:d8:78:44:2b:d8:c1:9e:bc:71:47:2f:29:52:42:
                    33:05:da:67:0a:8b:4f:77:3b:d6:6c:33:c2:6e:38:
                    8c:59:7d:af:96:84:b4:ec:ad:23:d3:39:20:c6:13:
                    2e:3e:96:c9:4c:dd:d3:9c:d3:bd:1f:fc:81:db:85:
                    f3:91:23:60:86:1c:cd:45:34:1f:22:26:70:3a:6b:
                    c5:12:0b:56:82:d8:1c:40:f9:f6:c5:2e:5d:0c:f5:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0A:E1:6F:25:06:15:D6:1C:CB:0E:29:8F:7D:2D:CF:8D:73:30:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fe19558-7968-3576-b543-b3b7f823be04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:98:f1:24:06:a1:ea:4c:34:28:24:de:74:19:f2:62:c8:
         74:43:69:50:10:3a:97:3b:98:27:52:1f:dc:34:f6:69:1e:d9:
         bf:b6:76:58:42:74:24:3e:0c:11:1a:bc:86:bc:a2:4d:78:c4:
         07:67:1f:fd:9c:b3:3b:f1:5b:5a:fc:78:68:30:04:21:c2:42:
         65:9d:53:fd:b1:60:8c:21:60:3d:20:d2:0d:0d:bb:d5:1c:89:
         57:81:4d:26:a6:ca:54:be:8e:ec:ba:16:90:1b:8c:13:94:cb:
         cd:07:d7:c1:84:95:8e:33:e4:70:d7:70:99:b6:2e:39:51:5b:
         ae:7f:a2:41:ce:3b:93:3b:21:77:12:e2:45:e3:26:fc:4d:ac:
         16:5d:7d:12:8d:a3:ac:ed:7b:5b:05:7b:5d:02:27:06:40:72:
         62:02:15:85:31:7e:5e:f6:d3:24:6a:89:56:41:fc:7d:05:3a:
         11:f3:b0:ed:ef:e3:e6:98:e5:7c:da:a9:0a:e8:91:0b:63:b3:
         a3:54:79:03:fc:16:31:13:16:fc:43:da:c2:ec:56:6a:2a:37:
         07:a8:06:8b:e4:35:f9:d2:c5:6e:ab:f0:1b:1a:ec:7b:a5:bc:
         ec:6c:44:69:47:84:8b:08:38:68:0b:61:91:4f:b4:a4:c2:7c:
         1d:ab:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:27:55 2026 by rpki-client