Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb115771-8192-3f12-b04d-c71d1ee4ae0f.roa
File:                     cb115771-8192-3f12-b04d-c71d1ee4ae0f.roa (raw, json)
Hash identifier:          KdT/hez4A53QiNJ9mXPNC1oy5pubgcn/V5+L45bgVfc=
Subject key identifier:   E9:59:71:87:49:A4:92:A5:CF:B1:C7:4D:6A:30:05:01:08:E6:A9:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F225D0D8EB4E6FC08799B3100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb115771-8192-3f12-b04d-c71d1ee4ae0f.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        72.107.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:0d:8e:b4:e6:fc:08:79:9b:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=9fc7922a-acdd-4dc0-b97b-acbf743101eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:77:2f:6d:81:41:d0:42:91:28:ca:0d:b0:27:
                    f2:f2:31:b5:d0:3b:30:71:99:e2:e2:41:e3:62:36:
                    d2:c3:66:24:4a:9a:75:e5:b7:c6:2a:13:ac:04:f6:
                    c3:ca:9c:8d:3c:42:75:be:0c:11:0d:b9:79:92:00:
                    47:04:0f:6a:78:21:60:1d:9b:23:55:80:68:7e:2b:
                    9e:81:d0:98:06:9a:65:b0:d2:fd:22:9a:10:c1:8d:
                    3d:2d:81:1d:c1:eb:41:02:27:76:92:5f:8d:08:a1:
                    3e:61:bc:eb:ef:be:62:f8:fe:5e:89:7e:b3:a8:9e:
                    e9:c7:62:1c:bd:40:82:0c:57:0b:2a:aa:f9:b4:07:
                    ad:b2:ea:7e:12:4d:d5:0b:0a:dc:b6:34:8d:9a:4f:
                    31:61:05:d4:e8:12:fa:41:97:b7:30:af:be:35:e5:
                    6d:1d:60:1a:22:b5:d4:d9:18:aa:84:4f:25:b1:dc:
                    c4:70:8f:fd:85:4e:49:6e:79:d0:be:35:0c:46:54:
                    57:fa:c7:fc:e8:9f:db:9f:73:8a:11:cd:8a:76:3b:
                    c6:6a:b3:b5:e5:28:28:86:03:f2:dd:5e:42:cb:b6:
                    db:18:aa:3a:0a:e7:2b:f0:93:f1:f3:04:6c:12:ce:
                    e9:ad:20:ac:51:fe:10:dc:e5:c1:e8:e1:49:18:5b:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:59:71:87:49:A4:92:A5:CF:B1:C7:4D:6A:30:05:01:08:E6:A9:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb115771-8192-3f12-b04d-c71d1ee4ae0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:16:7b:44:94:3a:08:b0:af:f7:46:ed:55:49:ce:e9:44:
         c2:0b:89:21:a9:a5:5f:54:12:a2:47:3b:41:6c:4c:d9:72:de:
         a8:7d:d6:88:47:f6:66:c8:cd:86:fb:10:8e:9f:b5:06:13:c4:
         ce:ec:04:8d:c5:f4:04:dd:ea:5b:5c:ae:80:5e:38:f6:27:1c:
         05:f8:60:71:01:88:da:84:4c:e3:1c:80:8d:f9:d4:78:e8:d7:
         53:5b:5e:54:b1:ed:78:d4:f4:c7:4f:4f:2a:3f:b6:f1:3a:2f:
         e7:c6:e2:38:45:f8:f5:67:4b:95:e5:eb:13:11:56:09:4b:4b:
         d2:7c:7a:bf:d6:3c:88:70:ca:50:63:3a:d5:48:b3:6d:de:b9:
         38:44:73:db:ea:39:8e:4d:c3:05:55:44:b8:a4:7e:7b:6b:a5:
         e1:38:d1:7e:96:0d:10:40:72:ae:47:17:8c:c4:b4:85:bc:5f:
         d5:3b:53:4d:c6:11:e0:48:56:7e:5a:88:3b:a5:9c:57:83:ae:
         1e:b0:60:24:90:3d:19:44:31:a2:69:22:56:fd:29:ad:ba:45:
         75:72:34:06:b4:54:41:99:23:83:8b:5e:fb:63:c0:24:9b:45:
         e2:6f:02:b4:cb:3e:82:8a:e8:1b:9a:f5:6d:e6:65:dc:d4:44:
         4b:7d:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:45:55 2026 by rpki-client