Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa
File:                     95b587f1-4d49-3edc-9113-693a27695af4.roa (raw, json)
Hash identifier:          dGZmQliXupIjnFC16kFMRRsgBZFsQ7NlTDk+YbtgorQ=
Subject key identifier:   D9:29:BE:17:E0:03:E8:BF:E5:A8:9F:C7:40:80:AA:DF:08:9C:AC:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E5A4A146113BFEB207F522100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        72.106.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:14:61:13:bf:eb:20:7f:52:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=e09f7563-2a77-4b15-9e69-96777e30dfa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:c2:db:27:ef:56:1d:c0:6f:6a:2b:b3:97:
                    24:20:6c:f1:e6:61:40:c6:43:c0:c1:12:3c:f3:5b:
                    be:d8:1b:84:c0:41:35:e6:51:46:ef:c7:00:ec:97:
                    c4:65:db:34:6e:ad:6a:b3:30:c3:e8:36:5d:99:03:
                    73:b4:95:44:84:24:ea:c8:9c:a5:eb:d9:ad:80:73:
                    b9:df:1e:85:a7:95:85:86:c0:6c:a7:7b:54:b4:3f:
                    92:30:d8:46:72:15:1e:06:16:ce:ce:de:4f:d9:ff:
                    61:d3:3d:28:5d:96:4c:57:71:1b:1e:2f:f6:f1:a1:
                    38:ab:54:3f:c7:fa:29:2b:d6:2b:f1:fc:99:9c:1c:
                    d4:ac:a8:7c:b4:56:a1:46:7f:35:9e:d4:34:05:52:
                    bc:66:81:8d:7f:92:d4:d0:02:af:ef:87:f9:ad:ae:
                    6a:9e:98:50:d1:55:dd:f1:95:37:10:0d:d9:e2:b4:
                    7a:10:cb:98:65:0c:f5:b8:d0:7d:39:f0:64:46:c4:
                    dd:bc:bf:ed:8f:68:80:c0:d6:ef:81:04:9c:aa:73:
                    c2:03:4b:cd:d0:02:be:fa:2a:55:c8:fa:93:26:12:
                    87:c0:d7:23:a6:c5:33:cc:95:c6:ab:72:6a:b4:27:
                    a3:b5:96:00:c4:af:e9:66:ab:cf:8e:37:a0:9e:5a:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:29:BE:17:E0:03:E8:BF:E5:A8:9F:C7:40:80:AA:DF:08:9C:AC:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b587f1-4d49-3edc-9113-693a27695af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:81:7c:c0:b5:d4:91:8d:f6:95:7a:f9:c0:0a:4b:81:7c:7c:
         89:24:72:ea:1c:62:84:a8:30:0f:db:fe:72:26:86:24:c7:3b:
         32:5f:6b:37:63:77:ac:c8:9b:75:2b:27:ea:8f:d3:43:5d:6a:
         ec:6b:f9:a9:92:7b:32:66:d8:96:65:80:ac:18:d5:45:5d:5f:
         a4:2d:6d:75:99:98:d2:f1:cc:90:04:bb:ce:18:a9:e5:11:15:
         3a:d0:79:7a:d1:f8:df:35:05:71:43:34:e0:8d:c5:50:65:2c:
         48:39:0b:c0:1b:e3:15:d6:1b:69:85:b0:6e:dd:4d:66:84:36:
         8b:62:9d:64:b0:fe:d5:4e:63:9d:f6:d9:59:d0:b7:99:42:f9:
         07:aa:5f:d9:32:65:25:f2:68:89:0a:53:19:0f:e5:10:49:a5:
         01:3f:a3:73:ac:2b:b1:b3:46:a0:19:ec:1e:6d:09:3a:da:b2:
         8e:ee:f4:be:38:9a:bb:02:c5:ac:6e:b9:83:c9:f5:6d:5a:ba:
         e8:41:0d:dd:42:c7:d2:3c:62:e6:54:8c:e2:40:62:6b:19:30:
         d5:ac:8f:e4:9f:33:46:d1:e9:45:68:4b:a0:9d:6a:57:98:28:
         45:17:58:d2:26:67:cf:e5:0c:e8:95:bd:04:29:44:e7:c1:23:
         52:31:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:46:16 2026 by rpki-client