Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa
File:                     5116f738-3a7a-36b6-ac6e-1500d371e106.roa (raw, json)
Hash identifier:          Frm5l6MbYLkpB5ltCl1ct34VTeBtzzbBEa7lZ8wL4zA=
Subject key identifier:   47:1D:AE:1A:74:D6:FA:E5:1A:B0:AA:FB:00:29:76:5A:64:79:21:68
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6C0FCBB721A5D03806B95F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     701
IP address blocks:        72.65.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:cb:b7:21:a5:d0:38:06:b9:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=7e7259d3-967f-4425-a597-295979a35e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:73:cd:99:53:d9:66:25:b4:e5:f1:13:25:
                    af:35:a5:82:a5:7d:e4:d3:d5:52:ef:09:e2:b6:23:
                    ad:34:82:44:7c:72:7d:da:e6:41:41:a3:11:4a:4f:
                    da:23:26:60:0c:c8:07:7f:98:da:d5:5d:aa:e2:ca:
                    25:a8:fa:e5:bc:cd:18:ff:5e:ca:a1:40:b4:eb:cc:
                    c9:8d:9b:3b:d1:5f:29:ef:f7:7c:bc:1f:5b:36:c2:
                    c2:e2:15:54:15:4e:fa:43:74:04:12:e3:b7:f6:fa:
                    f2:5a:03:3e:64:6e:f5:d6:90:53:3a:3f:28:47:99:
                    b2:61:ca:9a:cf:10:8c:d8:f4:86:fd:ba:c1:af:1f:
                    8d:c6:30:4a:06:f8:74:dc:5a:c1:dd:9f:68:d6:3a:
                    f7:2a:11:36:77:5e:30:9e:bf:d5:be:11:94:95:98:
                    52:86:e7:4b:df:9b:c7:be:ae:38:f5:8d:71:aa:2e:
                    de:5e:ff:43:e0:7f:af:02:56:98:43:b3:8c:2f:ae:
                    20:32:62:89:24:fc:2e:94:0d:d7:1b:10:41:26:74:
                    f1:d3:2f:50:0c:5b:8b:63:41:19:55:15:90:33:23:
                    12:8a:f2:1e:cf:0e:74:ab:de:7b:f4:58:5f:cb:d7:
                    c1:7f:cb:38:18:b4:97:d9:1e:ea:e5:3d:1c:da:eb:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1D:AE:1A:74:D6:FA:E5:1A:B0:AA:FB:00:29:76:5A:64:79:21:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.65.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b2:77:d7:77:90:ea:c1:85:c7:4a:49:b7:b5:6f:d1:a3:4a:
         d4:c2:be:87:8c:cf:85:32:55:e3:c9:18:92:2d:3c:cd:c9:00:
         04:95:49:75:16:80:f7:01:b8:7d:87:f3:2d:b7:41:18:e6:01:
         5d:34:35:eb:1c:19:36:c9:8b:b5:7a:6b:45:b2:95:e2:e3:8a:
         44:63:69:bc:59:38:4a:40:93:6c:16:43:3b:04:87:71:15:b0:
         a8:df:47:0f:43:10:c4:12:c6:c6:c6:ec:85:b5:48:5f:19:36:
         a9:1a:ec:94:f6:df:d3:e7:14:eb:37:9b:58:26:40:3c:dd:a2:
         ef:f7:0a:a1:40:a1:56:3a:4f:c0:49:7d:42:9c:d3:17:4d:eb:
         ad:4e:91:d3:6e:db:3d:9e:f5:e4:c7:d9:ec:d3:68:f5:eb:1b:
         81:e6:ee:3c:be:1c:c8:63:96:f7:d8:25:bc:27:84:c2:ca:3a:
         41:2e:ee:ba:a4:9b:6c:62:32:6b:f8:01:34:2f:12:4f:40:10:
         57:86:e1:23:03:b8:4e:ad:fc:75:cb:e4:ca:67:87:6c:d1:50:
         2f:36:4b:e1:be:bb:e2:97:e1:68:14:71:a1:e0:46:86:65:b1:
         d4:d0:56:95:34:a3:1f:c3:6d:b0:ff:b0:88:f4:a1:86:36:7d:
         73:e3:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:59 2026 by rpki-client