Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa
File:                     ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa (raw, json)
Hash identifier:          Gj6a4UucL5qut0xLfi02lapW+1XujtygjGtDfRfLSCQ=
Subject key identifier:   FA:FE:FD:B4:3B:AB:BD:72:83:39:E8:1D:49:2C:FF:BE:D5:48:E7:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D7A05367D4CB067EC58989140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        72.104.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:36:7d:4c:b0:67:ec:58:98:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=e7a366e5-2c5d-4c8d-98eb-a175d02a9e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:95:d0:bf:c7:bf:c7:27:bf:d7:4c:37:07:
                    d6:97:41:42:ea:e2:f3:fa:e7:83:b6:c5:9f:69:ff:
                    c2:c3:64:90:65:9a:41:f6:e7:1f:7c:88:e6:82:49:
                    61:3a:50:e4:1a:58:d8:87:ea:75:6e:d9:b1:bf:01:
                    e9:0d:a4:59:a9:8a:e6:0a:0b:39:02:ee:5f:ca:0e:
                    e7:3e:3a:0b:e3:bb:04:ef:6c:01:e1:7c:77:53:77:
                    c7:7f:ac:71:5d:e5:74:98:ab:61:cc:a1:65:4f:97:
                    49:93:e4:e4:d6:07:19:5a:48:e9:33:9f:c0:ed:60:
                    0e:2d:fd:81:78:5d:22:22:fd:e8:9b:93:e6:1c:e6:
                    6e:92:e8:38:90:c1:3f:75:0e:fd:55:d8:04:bc:67:
                    6d:b1:a3:f2:bc:ac:f1:5d:e1:69:be:1e:5a:fd:94:
                    99:7f:18:ad:8a:58:91:e1:fc:6d:9c:a2:c0:75:5d:
                    fc:ac:e7:b8:a3:7a:13:80:0b:8a:ca:2c:fd:23:8a:
                    42:87:1f:1d:2f:33:a9:ff:5c:13:7f:50:d8:e6:3e:
                    b9:ad:82:43:ee:4b:ae:f4:76:3e:fa:35:dd:62:46:
                    07:af:00:b5:4a:e7:bd:d5:95:5a:51:9d:3b:44:8f:
                    fa:86:27:65:19:8a:5e:5f:ec:1c:3d:25:a0:10:30:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FE:FD:B4:3B:AB:BD:72:83:39:E8:1D:49:2C:FF:BE:D5:48:E7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba03007e-ca1a-3fc5-826b-4fe9ded68c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:e4:fa:5c:b7:be:e2:58:78:a5:9e:85:e1:6f:40:35:26:
         71:4d:23:c7:1f:0f:50:2f:4f:db:0f:cd:62:77:4d:6d:b6:d9:
         16:1c:8c:86:37:9e:81:73:4d:8b:50:bb:77:9e:73:b9:1c:83:
         3a:84:a9:97:a5:4e:48:d2:02:9b:88:b6:16:3b:3d:89:69:9a:
         5e:d4:c9:d3:c2:6b:33:4d:69:fd:f2:c4:8b:ae:52:bc:ff:bd:
         1e:96:a5:78:e2:ed:53:13:63:95:23:97:66:52:b5:38:89:54:
         a4:e3:c9:97:4d:c4:80:d6:f8:72:1b:26:b3:ca:cf:26:b4:38:
         e6:d4:03:65:47:b2:7e:40:0a:4c:3e:57:1f:dd:95:1e:f5:86:
         0e:f6:c2:44:b6:05:17:3c:c5:2d:5d:10:33:10:cc:9f:c5:87:
         82:89:7b:0f:b4:70:f5:03:18:34:80:15:11:63:97:c9:1d:f1:
         54:bd:7e:81:5a:0d:a1:69:6f:12:be:94:7f:43:1e:8a:61:0d:
         40:3d:98:25:fd:74:5b:d9:f0:be:54:b0:c0:ae:4f:07:55:8f:
         c4:db:2f:14:18:f4:21:ae:19:5a:f5:15:19:33:f8:5b:c1:3f:
         77:df:00:c1:b6:cd:eb:c9:73:05:4a:dd:eb:d4:61:48:c5:50:
         4c:b5:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:24:37 2026 by rpki-client