Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5d5de87-cfd7-3d5c-ade5-837af6a6e5e2.roa
File:                     f5d5de87-cfd7-3d5c-ade5-837af6a6e5e2.roa (raw, json)
Hash identifier:          iJHF2ZwHhNorWn7MsFR4/kFOJz7Yl+NFfpDwVwndeEk=
Subject key identifier:   B6:91:A5:D8:2A:D1:FF:E2:7B:19:B2:A8:2D:F9:CA:57:58:93:49:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D7A053F503F4747C0C8B33B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5d5de87-cfd7-3d5c-ade5-837af6a6e5e2.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        72.96.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:3f:50:3f:47:47:c0:c8:b3:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=05cbbb61-ceef-4631-a023-37e38f85df9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:b4:09:5e:6d:b3:a2:c6:12:ef:4c:e3:0b:
                    34:b7:e5:42:2e:f8:00:92:82:11:1a:6d:7c:ee:8a:
                    3c:2c:41:5a:ef:83:c9:2b:63:ff:8e:df:74:f8:13:
                    a5:4a:df:be:ec:7f:21:98:c1:f3:03:cc:b9:84:f9:
                    83:d2:ab:cf:89:c7:f3:76:09:90:04:2a:15:9d:c8:
                    9b:89:e2:6c:b9:64:9e:3b:69:3a:bc:b0:10:f1:bd:
                    ce:45:0c:be:2b:99:57:6e:ff:62:cc:bd:96:d4:9e:
                    42:45:ab:e3:80:fa:62:7a:10:f6:a0:cb:5d:c0:2c:
                    d1:a0:19:42:45:8f:68:59:ed:62:0c:91:11:9d:3e:
                    cb:b4:0d:92:71:d3:d1:fa:dd:de:a4:6f:17:1a:63:
                    13:ef:34:97:1f:fa:4e:5e:7d:56:14:72:2f:fc:11:
                    4f:d5:b5:b1:18:82:a3:c4:18:44:85:8b:4d:7a:f0:
                    ba:33:e5:11:04:c3:16:af:92:bb:95:fe:93:f4:58:
                    88:0a:45:53:65:ee:85:7c:b1:10:fa:ac:25:d3:a6:
                    1f:cb:c8:25:99:68:4b:b4:3c:aa:6f:67:f8:04:4a:
                    2f:fd:a4:c7:ef:92:6d:3b:82:dc:c9:ed:d3:96:27:
                    78:be:79:9d:c2:b1:18:f4:24:3a:e5:e7:39:fa:88:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:A5:D8:2A:D1:FF:E2:7B:19:B2:A8:2D:F9:CA:57:58:93:49:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5d5de87-cfd7-3d5c-ade5-837af6a6e5e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:12:08:45:1d:fa:0d:a1:2a:ac:37:9e:cd:60:b9:f2:e4:c2:
         c0:58:55:53:80:24:bd:be:1c:2c:c4:ae:c7:65:f1:e4:aa:11:
         f7:be:7f:44:49:64:e2:ee:4a:d1:69:64:ff:3d:5b:d2:c5:1b:
         d6:3c:3a:37:8b:89:97:96:40:49:16:5f:a2:e1:b8:8f:0e:82:
         65:c8:c7:26:1b:19:b7:12:91:bd:c7:b7:e9:1d:a8:a4:82:58:
         42:14:20:f2:19:ac:67:f1:2d:b8:fe:f9:cf:71:9a:d1:87:c1:
         24:4d:30:d8:53:0c:64:8f:13:61:3c:1b:c0:5a:db:fa:a5:3a:
         e8:97:b8:4c:57:85:d0:a1:b7:a2:b1:f6:37:2b:f3:b4:9d:8e:
         06:e9:07:96:e9:50:b3:b2:c5:20:e0:fc:c3:38:8a:e7:24:54:
         c7:5c:b4:95:a3:08:51:c3:5f:81:83:71:fc:c9:af:e5:b4:70:
         84:88:e8:ba:97:84:c5:22:79:3b:bd:58:fd:3f:9a:12:b4:bb:
         db:ce:1d:9b:46:81:cd:e9:e0:55:ed:5e:99:04:36:5b:28:99:
         67:34:ed:12:3f:bb:01:9e:fc:b7:ba:63:a5:d2:c8:e0:85:c9:
         2c:24:4b:4b:e2:49:66:c8:78:65:a1:9d:9d:a2:9e:2a:4f:a4:
         41:93:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:15:37 2026 by rpki-client