Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa
File:                     972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa (raw, json)
Hash identifier:          p1xBDjPvehP//qQHyHUMWHabyFDCsaks2AIO1xMwjZU=
Subject key identifier:   E8:C9:3E:BE:7D:7B:ED:88:48:0A:45:B2:D6:C3:73:BA:A5:99:9B:39
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D747000DAC687229B984C4540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        72.87.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:00:da:c6:87:22:9b:98:4c:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=0d937565-b9fd-47b0-95d8-32ce6fd0dfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:24:a4:00:8c:21:69:87:38:e3:1b:be:9f:
                    8e:33:62:6e:3e:7a:99:4e:ae:36:bb:35:e8:02:05:
                    66:8d:8d:dd:9c:33:13:2f:2c:3d:4a:64:b5:33:40:
                    d4:8f:e1:bc:fa:7c:ab:d4:b3:09:06:7d:c3:2a:73:
                    dd:b4:b4:46:fa:36:24:31:51:ab:f3:78:8f:3d:c4:
                    95:bc:75:f8:ee:85:25:e6:67:2e:97:6f:81:7f:33:
                    35:18:23:f0:52:1e:09:0a:89:50:b6:fc:18:fb:60:
                    48:66:81:d3:00:09:40:c9:20:8c:a2:c2:41:4d:bd:
                    eb:14:d8:5d:26:0f:4a:3f:78:7f:30:35:d8:6e:5e:
                    03:81:e2:7f:93:7c:6d:2f:05:f5:67:65:62:33:ff:
                    2c:04:8f:46:7c:07:3f:23:12:32:f8:1a:98:9c:17:
                    07:2c:d5:51:86:9a:48:82:35:23:ac:83:ff:9b:8c:
                    75:05:47:4f:29:5e:ad:88:40:03:ca:1b:9c:99:04:
                    ab:45:74:4c:76:46:44:0a:da:8a:11:40:73:26:8e:
                    6f:34:50:f8:21:31:f0:0d:82:f3:62:f2:33:24:e3:
                    41:4a:8d:80:52:55:f8:97:13:21:11:0d:eb:f0:b4:
                    b6:e0:fd:e1:48:85:0b:a0:97:c1:af:70:7f:0e:0a:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C9:3E:BE:7D:7B:ED:88:48:0A:45:B2:D6:C3:73:BA:A5:99:9B:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/972d0e3b-bb4e-37e6-91df-314a8c90b94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.87.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:00:ab:fa:4f:ce:df:3f:cc:d7:fe:b2:1c:b5:cf:2a:43:b4:
         ed:06:6b:e3:a8:8c:69:79:bb:91:39:d7:62:6b:37:e8:f6:3c:
         e8:68:f5:5b:cc:58:83:55:9f:4b:4a:ae:6a:38:a5:6b:01:62:
         23:a1:36:21:1b:45:53:97:0f:ab:81:fe:7b:fe:18:d6:0e:0b:
         e5:a2:8e:b0:cf:2a:7a:09:79:3e:fb:9f:c6:0a:05:e9:30:03:
         52:88:27:c9:15:34:a9:0d:cb:22:89:8f:86:49:f6:a1:c9:b5:
         81:be:7e:55:c8:b0:6b:4f:61:19:1a:06:9e:78:68:4b:ea:e4:
         fa:36:1b:70:d6:88:46:6f:3c:fa:6f:bf:6e:e6:e2:a1:3d:43:
         b6:2e:25:a5:0f:55:3f:1d:3a:f3:56:c2:35:98:3c:24:e0:f4:
         8c:2b:da:f8:e6:0c:dd:29:9c:50:9c:bc:fb:4e:b8:7d:a4:c3:
         41:6f:e1:0c:14:95:7f:42:64:e9:8b:9a:1b:f5:d7:d6:2e:5c:
         09:40:db:01:af:56:93:06:f7:20:23:66:93:d4:fa:f6:f8:0b:
         38:36:7d:28:eb:62:cc:46:f2:35:87:55:c7:d8:3d:ed:6d:8c:
         3f:17:db:3e:45:97:4d:3a:7e:57:d2:be:14:b8:db:83:e7:a5:
         3e:a3:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:10 2026 by rpki-client