Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59900bba-9f52-3eb6-a1df-8b69be62af38.roa
File:                     59900bba-9f52-3eb6-a1df-8b69be62af38.roa (raw, json)
Hash identifier:          /8N6PzE4cMlhyBhQJPWBCElVp0kX3CUGBuUymBDNRsI=
Subject key identifier:   69:BB:D1:F0:3C:40:B1:EC:67:69:1B:A7:F2:56:79:41:9F:F6:B1:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F32379E22E326884762B4C200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59900bba-9f52-3eb6-a1df-8b69be62af38.roa
Signing time:             Wed 16 Sep 2026 17:17:56 +0000
ROA not before:           Wed 16 Sep 2026 17:17:56 +0000
ROA not after:            Tue 15 Dec 2026 18:17:56 +0000
asID:                     6167
IP address blocks:        72.103.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:37:9e:22:e3:26:88:47:62:b4:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 16 17:17:56 2026 GMT
            Not After : Dec 15 18:17:56 2026 GMT
        Subject: CN=7454127b-95fb-45a3-8fb0-5f227439b32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:41:24:3f:d1:dc:ae:3e:6a:7e:33:e3:46:
                    a0:d3:3d:05:51:a2:47:9f:65:d1:cf:d7:ad:78:59:
                    17:86:ad:b8:89:cf:9a:16:c7:b5:65:e3:e6:66:f5:
                    d3:bf:0b:9e:b8:43:d7:4d:f4:90:71:40:45:da:bb:
                    72:e7:37:ee:e2:d6:b6:0c:a8:c8:7a:64:89:8b:fd:
                    7c:bb:3e:3d:a4:c6:52:fe:cc:fa:4b:e2:a3:c8:ed:
                    13:63:a9:27:da:f9:e6:b4:d6:ab:9f:c2:7c:23:76:
                    f5:f7:3a:dc:b8:6c:fc:8f:72:8d:2d:b7:c2:c1:0c:
                    be:f8:fe:f0:e0:7c:70:a5:f9:be:3c:8c:35:dc:ba:
                    ea:e5:f0:e7:19:7b:78:64:83:e6:ad:f9:d5:2b:d1:
                    de:86:9b:dd:95:9d:b4:88:c2:b0:30:89:98:3e:1c:
                    6d:e7:c1:54:91:90:9a:e1:e4:03:05:5b:4c:fb:ca:
                    05:c5:cc:0a:b3:5a:10:cf:56:8a:66:15:8c:3c:b1:
                    3a:65:da:69:81:bb:f7:ee:ea:ed:c4:3a:1e:16:5f:
                    84:b2:5b:df:5c:55:1f:c1:33:c5:bc:bf:98:78:08:
                    83:96:cd:8e:1c:a7:e0:93:b5:bf:f5:e5:48:09:ac:
                    14:98:a6:16:89:70:c1:7b:0e:2c:a4:cd:ef:45:45:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:D1:F0:3C:40:B1:EC:67:69:1B:A7:F2:56:79:41:9F:F6:B1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59900bba-9f52-3eb6-a1df-8b69be62af38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:fd:92:d8:ba:bb:4a:52:a9:32:41:76:af:79:08:2b:e5:
         56:52:f7:83:d6:83:4d:30:a3:bc:33:5a:c3:c1:9e:93:d0:92:
         c0:d8:2c:a4:86:83:17:cc:f4:e1:f7:fe:80:d2:e3:f1:23:75:
         ff:92:a9:aa:4d:d4:b4:b2:33:d1:14:33:ad:30:30:b2:9e:3a:
         6c:fa:54:39:29:9b:78:68:fe:84:fd:9c:48:41:48:54:2f:e5:
         8f:8e:f6:ce:47:85:e9:39:a7:8a:35:5e:3f:19:6c:fa:b4:97:
         2c:7d:b1:2d:7b:44:b1:f5:2b:7a:2a:1c:23:ed:03:ba:b7:eb:
         f3:85:ff:e5:ec:ba:4d:33:93:cf:52:d7:fb:9e:19:a6:fb:2a:
         24:14:5c:7b:57:c2:66:88:30:93:76:fc:9f:a9:90:f5:bc:bb:
         36:99:3e:83:13:86:d3:be:07:96:f1:d8:72:0b:7d:c5:94:72:
         2f:74:0a:f1:00:41:db:cd:0d:6f:be:3d:49:82:66:92:a1:a6:
         2d:48:b7:27:b9:ec:76:d6:14:70:fe:76:18:07:25:4e:95:96:
         00:6e:db:97:05:4e:0b:a7:50:6c:bd:be:32:12:a8:f1:2d:ac:
         49:1e:77:98:3c:e2:7f:9e:44:5c:e8:ac:40:db:c8:2f:dc:58:
         75:a1:ae:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:27:43 2026 by rpki-client