Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de5efcc6-c4d4-3729-b5dc-3d2acff73625.roa
File:                     de5efcc6-c4d4-3729-b5dc-3d2acff73625.roa (raw, json)
Hash identifier:          Cl6Z59z7cF+/YSzhbFzSQy6iBBqCoQFK0OGiOCh9NfU=
Subject key identifier:   BA:5E:A4:28:3F:68:9F:B3:8C:A0:D5:B2:55:B7:20:E6:6C:10:F9:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D7A0540D606EC3EE834DA5080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de5efcc6-c4d4-3729-b5dc-3d2acff73625.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        72.104.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:40:d6:06:ec:3e:e8:34:da:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=14735f81-faca-44a4-8b5b-47b6ee5501fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:a6:15:52:7f:fb:5a:38:0e:be:47:e6:5e:
                    01:49:4c:69:5e:94:b6:0d:a5:d9:6f:a8:26:63:32:
                    d9:22:b9:44:05:84:fd:f4:10:cf:ab:3a:f9:93:1e:
                    bd:ec:43:35:b7:3e:f6:34:21:0b:45:bd:c1:32:b8:
                    bc:75:31:fe:26:9a:03:f3:34:25:34:8e:1d:a7:05:
                    94:81:60:e4:07:fb:72:0b:43:a8:51:1b:3a:30:63:
                    7c:3e:8b:61:17:16:4b:0d:0c:b6:e6:37:e8:52:92:
                    b6:f8:c4:de:0e:1a:fb:5a:a6:0e:da:4c:57:63:df:
                    2b:73:f0:a5:5e:2e:75:f0:18:65:b4:7f:39:7d:cd:
                    47:ff:ae:13:a1:d3:78:1e:70:d5:84:c9:bd:d9:cb:
                    65:74:39:2a:31:6d:02:25:36:06:53:9d:df:ce:98:
                    f7:41:21:aa:90:55:4c:8a:b2:10:43:c9:58:16:98:
                    19:9f:1a:c8:56:77:a3:7d:ff:3d:78:29:d9:03:69:
                    38:1c:86:75:47:5a:b5:da:bd:c3:be:ae:d2:11:e5:
                    b2:fc:19:13:5e:7c:66:cc:2e:45:43:d0:11:a8:b0:
                    b6:28:55:d8:94:17:9b:69:80:ed:15:21:72:c9:7d:
                    d8:75:91:34:28:30:d0:46:ca:4e:92:a2:b0:9f:7e:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:A4:28:3F:68:9F:B3:8C:A0:D5:B2:55:B7:20:E6:6C:10:F9:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de5efcc6-c4d4-3729-b5dc-3d2acff73625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6f:b8:2f:74:46:5b:ca:af:66:70:ea:d6:be:c6:1c:38:19:
         b3:94:5a:09:bb:b5:7c:fd:e0:56:17:db:50:2f:91:f1:ed:4f:
         ca:20:59:37:47:2b:b7:ea:d6:f0:83:6b:4c:36:dc:18:5c:0e:
         34:bf:c5:29:a0:6a:ff:e3:47:a7:95:f3:b5:2d:44:b7:e6:67:
         48:a9:9f:54:70:7c:de:df:99:12:4d:d9:27:7a:7d:c4:3a:f4:
         23:83:ec:58:c6:c3:31:2b:94:ff:33:39:b9:6c:62:ff:ee:fb:
         b8:2e:06:b1:95:34:0c:c2:fb:79:37:3d:2e:b2:1e:e1:75:a6:
         89:d6:0b:73:2b:f3:c0:6d:13:94:b4:da:b6:47:bb:d5:38:99:
         a6:3d:00:90:d8:71:03:64:5d:1f:b2:87:88:7b:d1:ac:7f:b2:
         35:e0:b9:0e:b3:8b:0a:22:2c:9e:e1:8d:91:bb:35:31:f5:bb:
         a5:38:25:41:b7:07:d8:0f:8b:72:e3:0f:aa:73:ad:4c:ab:e8:
         0b:f0:24:8b:a5:41:51:cf:a9:d5:d5:07:31:21:ef:72:e0:0b:
         eb:06:9f:36:8e:ed:44:ad:e0:6a:d1:01:e7:8e:e9:80:ac:50:
         ed:89:00:fd:90:4b:ca:c0:e0:45:6d:68:0f:11:ea:cd:01:9a:
         3f:fc:89:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:15:37 2026 by rpki-client