Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a2a984b-34dd-35c8-915d-5133a987d420.roa
File:                     9a2a984b-34dd-35c8-915d-5133a987d420.roa (raw, json)
Hash identifier:          p4HPK+AFdMKOMRQPfitq8m+V+m1H8ZWRDefj0cD/2ag=
Subject key identifier:   4A:4B:5E:6E:D8:F7:3C:1F:F6:59:DF:BB:FF:39:2C:14:E3:74:96:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D7A0536CF2CD8B67AC7991B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a2a984b-34dd-35c8-915d-5133a987d420.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        72.104.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:36:cf:2c:d8:b6:7a:c7:99:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=add93fe1-fe66-4a69-9983-720ec745b5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:e2:59:72:14:81:cf:35:77:99:5d:47:85:
                    1c:eb:28:e0:74:84:c4:2f:6d:4a:88:0f:0f:d0:4e:
                    76:21:a7:bf:26:f1:bd:1c:d1:b9:c6:43:63:b3:59:
                    62:4c:bf:67:a6:22:d7:96:51:88:13:c2:2a:92:e9:
                    ee:7d:ab:51:5e:7b:92:52:6d:c4:62:7f:7c:ee:83:
                    f9:15:f0:cf:d6:90:01:f1:c0:e3:c2:e0:4f:b1:f8:
                    c2:34:b3:05:b9:59:3a:60:66:b7:f4:ae:4d:f7:2e:
                    2f:f0:df:be:65:60:bf:ef:62:79:08:2b:64:22:49:
                    8a:57:df:e0:35:01:4d:ce:5c:5c:6b:69:1e:15:1c:
                    b2:71:88:ed:0a:54:85:df:c4:cf:e3:ca:c3:10:ca:
                    a5:56:7a:3a:1f:7d:0b:26:b5:5d:27:2f:0f:7e:59:
                    d4:46:af:b3:8d:91:85:71:8f:d1:51:12:e7:b4:a8:
                    52:c2:3f:d3:43:18:d7:cf:6f:9d:95:ef:43:3d:93:
                    6d:52:4e:ed:89:c4:32:4b:0f:3a:0d:c1:ea:d9:ef:
                    d0:50:0c:1f:b5:b2:f1:b9:27:92:fe:87:16:e4:aa:
                    93:dc:c3:1c:53:45:66:3a:8d:41:91:b0:e1:d5:03:
                    21:74:a8:ad:dc:9c:2b:74:7f:0c:e9:ee:f5:65:bc:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4B:5E:6E:D8:F7:3C:1F:F6:59:DF:BB:FF:39:2C:14:E3:74:96:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a2a984b-34dd-35c8-915d-5133a987d420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:3c:b1:70:c7:d1:45:56:20:b7:03:cf:b5:63:48:11:52:67:
         6b:29:1c:4f:ab:5e:8b:63:ac:2b:a6:ab:67:6f:26:45:a8:b7:
         66:f8:c3:03:6d:b0:b6:7e:e0:d7:af:ca:cb:3e:bf:52:7a:ee:
         f1:96:20:20:26:e0:e4:d3:c2:ee:68:35:4d:df:c0:fc:7d:db:
         d9:34:d6:fb:86:9f:ec:28:3f:0e:90:c1:1a:b3:05:62:44:86:
         13:d4:9e:30:8a:d9:9b:00:8c:8e:61:58:db:1c:00:06:22:84:
         4b:f7:49:ee:6e:52:19:6b:a0:7f:46:0a:b1:2a:8f:4d:54:68:
         a8:60:12:1d:ea:21:cd:de:1e:43:2e:09:ba:52:f2:e2:d0:a8:
         ff:39:2d:54:16:f3:a1:dd:0a:0a:99:70:11:24:e9:48:56:99:
         c7:5e:0f:ff:b6:ac:e2:32:a0:08:8a:d9:94:45:b4:37:05:36:
         4b:01:a5:f9:08:04:e3:79:b3:e6:6a:a4:5b:77:50:a7:1b:de:
         a2:e2:8b:ef:38:4f:d6:ca:08:33:d6:1c:48:64:4f:1f:b1:e2:
         a0:53:d5:4b:bf:85:8a:4c:52:7f:6c:23:6d:cd:29:aa:2f:91:
         7f:94:4c:94:4d:af:92:12:5e:80:1b:10:1f:2e:86:3d:a9:0e:
         8f:ba:bc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:21:08 2026 by rpki-client