Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45f3a6e0-3794-33ea-be25-eacad7465f67.roa
File:                     45f3a6e0-3794-33ea-be25-eacad7465f67.roa (raw, json)
Hash identifier:          aEMIVUFcBapXGvCAhQz9J7omkFLYBbWxVmqBtaCQ5Tg=
Subject key identifier:   0C:83:C3:FB:51:D6:7B:52:EE:C7:D4:63:94:FB:26:69:6B:56:3E:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A085627E682972694DC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45f3a6e0-3794-33ea-be25-eacad7465f67.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.96.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:08:56:27:e6:82:97:26:94:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=2613cf26-099b-4458-b0bb-f57a18fa6f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:a9:5f:45:fb:79:24:cb:48:97:52:93:24:
                    d4:87:ca:d2:bb:97:90:1b:c4:e4:0b:e8:dd:bf:99:
                    29:89:bb:d1:1f:b8:2a:25:91:31:f7:73:34:47:fd:
                    f3:b1:f9:a9:39:74:a7:a7:6f:2e:64:13:62:46:e1:
                    f6:39:84:24:3b:97:7a:f2:3a:40:96:4b:7a:53:4a:
                    04:ae:f9:60:2d:85:ea:a7:50:dd:03:e8:f5:dc:5d:
                    ac:0f:71:c6:80:20:35:68:d7:af:5e:f2:ac:1d:94:
                    f8:f6:34:0c:e3:16:2a:2b:f7:2a:53:c6:f6:86:f1:
                    f2:8d:b6:96:f8:21:e9:f0:8c:e9:05:b4:86:23:0d:
                    1b:5c:c3:ac:70:bc:2e:0a:b3:f1:f2:aa:d6:87:4c:
                    bc:e5:4e:09:34:8c:68:cb:be:9e:c9:b6:e4:cb:fb:
                    3c:f0:c0:aa:ad:15:66:6f:3b:c5:5d:66:36:39:a9:
                    89:9d:5c:f6:fa:a6:b8:ed:45:25:b9:7f:21:d9:e8:
                    31:aa:4e:8d:71:7c:1b:ee:e2:3e:d3:f3:50:22:3f:
                    9e:fd:f5:e0:f7:39:9d:dc:a4:d9:1c:c1:f9:0b:aa:
                    89:dc:db:a6:b5:03:b4:d7:b2:64:e3:63:d2:85:84:
                    e0:58:9d:1c:ff:72:48:79:31:b6:5e:f0:6c:0c:8c:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:C3:FB:51:D6:7B:52:EE:C7:D4:63:94:FB:26:69:6B:56:3E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45f3a6e0-3794-33ea-be25-eacad7465f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:8c:c8:ce:a0:fe:0e:26:a5:88:a3:69:21:62:14:ce:8e:b5:
         c3:9b:25:47:8c:7f:bc:39:62:68:8c:69:bc:f0:fd:2f:18:df:
         05:d3:fa:f1:61:59:d6:8f:5f:a9:6d:96:6d:c2:ab:70:c9:a1:
         ea:95:9f:20:bc:3a:dc:93:c4:82:ea:6e:e3:e3:67:44:9d:10:
         8b:fb:88:12:ed:46:d6:6e:47:b9:d5:5d:35:0c:c9:3c:13:25:
         67:b5:a5:c3:de:db:16:2b:1b:e8:dd:49:d1:70:2a:81:90:0a:
         21:07:7c:49:50:bc:0a:64:8d:51:24:73:a2:d1:4e:97:c3:f8:
         df:19:a3:c0:2d:f6:c6:f9:5c:cf:61:1e:6e:1f:7d:42:36:d9:
         91:34:55:ff:9b:b2:dd:03:dc:f0:20:f9:ff:7e:91:a5:3d:b3:
         6f:b3:f5:3b:59:a7:1a:c6:92:91:72:23:7d:f5:bd:60:68:0a:
         66:d1:ba:be:b8:ea:ed:c2:82:4b:04:1c:55:44:b4:18:a7:24:
         48:81:08:13:2d:4a:0d:c2:24:c0:c5:a3:75:b7:67:e4:d8:b9:
         5e:5f:a9:13:3c:b5:91:7e:73:14:8c:6d:54:3d:c9:c4:12:67:
         f0:20:43:bb:3a:66:65:36:cf:79:37:e4:2d:9a:a4:90:05:73:
         56:11:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:35:40 2026 by rpki-client