Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d6f5182-c339-3c6d-ba39-69cd82b25fd6.roa
File:                     9d6f5182-c339-3c6d-ba39-69cd82b25fd6.roa (raw, json)
Hash identifier:          Kfm3XoXTtlhYhBkXORd2GTDDNjTMr5tpGO5JZzANH2A=
Subject key identifier:   20:66:27:8C:4A:38:FB:38:4B:60:3D:5A:D0:85:87:B3:79:9C:E1:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F32378EE4D3168DB20A61E2C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d6f5182-c339-3c6d-ba39-69cd82b25fd6.roa
Signing time:             Wed 16 Sep 2026 17:17:49 +0000
ROA not before:           Wed 16 Sep 2026 17:17:49 +0000
ROA not after:            Tue 15 Dec 2026 18:17:49 +0000
asID:                     6167
IP address blocks:        72.96.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:37:8e:e4:d3:16:8d:b2:0a:61:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 16 17:17:49 2026 GMT
            Not After : Dec 15 18:17:49 2026 GMT
        Subject: CN=00a6b059-2614-4ce6-b6fe-500ff14964be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:0d:91:10:45:27:2c:79:e2:3f:df:ad:b9:
                    c6:b3:82:65:aa:e9:b8:55:15:64:51:19:e8:60:f9:
                    ac:a2:41:60:55:74:4d:38:df:bc:21:67:3e:11:bd:
                    4d:c0:53:03:0e:8b:a5:f4:6f:4d:41:f5:38:63:94:
                    db:27:14:9b:81:28:a3:3c:b4:80:2a:7e:93:53:e0:
                    b2:2d:10:7e:a9:05:45:65:97:a9:d4:fd:ac:d5:80:
                    5c:8b:1c:2d:62:65:db:13:12:39:54:68:4c:28:7c:
                    4f:42:0d:8a:7d:ba:3b:d0:79:76:50:df:f6:86:fa:
                    de:9b:b2:f4:e3:68:4e:73:13:9c:f1:9e:69:c8:ab:
                    8f:d0:5f:43:08:cf:68:d3:30:e9:a5:e7:39:ae:83:
                    9f:28:ac:61:e2:84:20:8a:45:5c:11:c9:ce:ed:d2:
                    1d:da:b4:bb:1e:83:89:64:66:7a:09:22:58:c3:41:
                    10:11:3c:65:c3:0f:10:fb:f9:1e:4b:13:34:4b:79:
                    43:7f:f6:08:3a:c1:0b:fd:1c:0a:a2:26:2d:b8:ac:
                    5d:c3:6d:7e:49:7d:27:85:eb:3b:28:a0:48:6b:7c:
                    c6:dc:ca:2d:91:74:d5:10:7c:10:38:48:8e:b3:bf:
                    a8:05:4d:4d:d1:a1:ad:c7:7b:3a:f5:1b:56:d5:44:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:66:27:8C:4A:38:FB:38:4B:60:3D:5A:D0:85:87:B3:79:9C:E1:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d6f5182-c339-3c6d-ba39-69cd82b25fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ef:8d:86:57:ef:86:da:e3:5e:a7:56:0f:c6:a4:d7:da:1a:
         ad:39:f8:7c:b2:5c:5b:ac:5d:c9:2c:a3:53:10:48:c5:07:2b:
         9c:29:d0:75:fc:76:f5:ee:9e:ec:16:38:d8:3b:e2:83:bf:a4:
         eb:ed:ca:e1:92:43:e5:0d:cc:48:0c:a1:bb:67:97:57:7e:99:
         7b:28:19:e4:13:85:74:11:61:7f:50:ad:e1:6b:8a:41:c7:17:
         a8:8b:c3:05:fa:46:d3:39:37:5a:c1:c6:a7:24:f5:2f:c4:da:
         36:9d:ad:41:c9:2f:0a:bb:f3:e9:9d:10:13:db:ee:ad:ed:b1:
         2b:b8:72:3b:ab:29:11:5e:ff:57:11:03:57:eb:83:76:9b:25:
         83:74:88:ae:e6:00:14:71:da:13:7a:d8:4f:ab:ff:12:8d:4e:
         1c:c6:1f:31:00:b8:d9:11:f7:0c:d2:b3:0d:68:eb:04:5b:0d:
         22:d6:06:25:5d:fb:f8:31:7a:83:88:30:a5:64:a1:5b:28:d2:
         9d:93:7a:85:3d:a1:64:09:58:34:bc:97:a0:b7:ba:8f:ba:ce:
         f3:a3:16:27:f9:49:b3:1f:02:9e:a7:dc:a8:d0:7b:f1:77:6a:
         12:a1:ed:e4:09:30:6b:b4:c1:4a:82:9e:53:11:69:12:f2:31:
         a7:37:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:03 2026 by rpki-client