Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8836c8a6-2f8e-39b9-895e-eb4abe5a084d.roa
File:                     8836c8a6-2f8e-39b9-895e-eb4abe5a084d.roa (raw, json)
Hash identifier:          v5LFbMp21lrBupdH00Ii34ibw7y9ZLYiyW7a6ZWLgeA=
Subject key identifier:   F9:F8:BA:FE:B4:94:07:83:1C:4F:0C:71:3D:12:D3:36:B7:45:59:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F32378F05DE1CD23D25F5E640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8836c8a6-2f8e-39b9-895e-eb4abe5a084d.roa
Signing time:             Wed 16 Sep 2026 17:17:49 +0000
ROA not before:           Wed 16 Sep 2026 17:17:49 +0000
ROA not after:            Tue 15 Dec 2026 18:17:49 +0000
asID:                     6167
IP address blocks:        72.96.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:37:8f:05:de:1c:d2:3d:25:f5:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 16 17:17:49 2026 GMT
            Not After : Dec 15 18:17:49 2026 GMT
        Subject: CN=1b8187bd-b415-4c79-9c02-7eebd038dd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:48:3c:1a:53:fe:c4:38:8d:f0:46:e7:81:
                    51:c2:cb:6b:fa:05:67:79:ef:6c:78:0b:94:fc:27:
                    95:07:94:a1:d6:5b:d6:88:e8:45:e5:24:3b:d9:5f:
                    c8:6f:28:f3:a5:e7:b8:d1:90:3f:2e:b6:d3:89:d4:
                    13:4a:ea:f2:a5:cd:7b:d9:63:62:fc:cc:20:c9:a8:
                    c8:93:0e:e2:0b:2c:8e:e3:ee:d2:eb:00:f4:46:bb:
                    77:f9:cc:19:b5:38:21:b2:5a:00:74:6e:bc:60:c5:
                    8d:d7:96:b1:fd:de:22:28:5d:84:26:3e:93:30:53:
                    01:00:bb:76:da:e7:20:b4:ec:05:87:05:b5:e7:24:
                    1b:52:bb:87:ea:5e:c9:dd:b3:5a:ea:69:77:80:d4:
                    7c:0e:ae:d5:cf:0e:26:ef:ab:b5:ca:15:8b:11:c2:
                    47:a0:e6:4a:3f:53:fb:aa:22:9e:e8:1b:a0:ca:de:
                    6f:6e:d3:d5:88:42:6d:b0:32:c3:2b:4a:9a:91:76:
                    0f:ec:52:ed:b1:f2:e8:59:4d:d4:fe:c3:3e:58:e1:
                    b3:9b:ed:a9:20:12:d6:7b:98:ad:6f:82:da:1c:18:
                    25:02:17:18:6b:26:fb:0c:db:e7:10:b8:c9:c0:51:
                    b9:9e:1d:a8:21:19:d6:e9:49:c6:bb:a8:a0:03:47:
                    15:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F8:BA:FE:B4:94:07:83:1C:4F:0C:71:3D:12:D3:36:B7:45:59:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8836c8a6-2f8e-39b9-895e-eb4abe5a084d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ee:ca:2e:f8:18:4f:ec:c1:5c:b6:b7:ea:e1:ba:8b:0d:2d:
         39:69:c5:76:2b:e2:dd:a3:90:d7:bd:31:bf:ea:5b:9b:58:81:
         ca:a2:38:be:c0:e3:c6:4c:6b:71:3d:7f:df:fe:84:02:0b:43:
         6d:01:39:24:e7:92:25:d6:6e:72:d1:6e:78:35:9e:d9:96:3d:
         16:f7:27:71:59:ef:c4:7b:6b:64:cb:27:ea:d7:2d:21:b3:d5:
         4a:33:d2:8d:53:cf:36:b5:1c:cb:19:b6:e2:31:45:3c:5f:bc:
         ff:7c:2a:ec:d8:93:3b:3d:53:4f:66:1a:28:40:31:7d:9a:cb:
         14:dc:e1:c4:c9:c0:d8:0f:bc:33:34:f1:c8:08:9e:70:91:f9:
         f7:d3:7c:a3:da:ca:65:df:e2:8e:e6:f9:17:08:09:de:c9:b8:
         c2:61:1e:0c:bc:a7:99:cb:79:23:97:7d:14:9c:59:b4:5e:70:
         a1:2d:e0:91:d3:7b:76:53:d2:1f:8d:93:ef:b3:9f:90:2e:77:
         3b:49:2a:32:47:97:39:c0:ed:df:15:c3:bd:47:ec:32:4f:59:
         4f:67:0d:11:6a:64:30:1b:0c:41:35:3f:1a:ec:34:78:38:e5:
         7e:a6:1e:a9:e7:79:44:f7:d6:de:65:66:9a:3a:0c:61:0d:50:
         3f:b5:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:11:30 2026 by rpki-client