Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa
File:                     1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa (raw, json)
Hash identifier:          GE1EujGgBq1MkxZ27rP/B15LXtdURVs3Zo5ID3b8Z80=
Subject key identifier:   B7:4A:B4:C9:61:38:A8:E7:50:5A:38:82:52:69:ED:88:F1:91:6C:D5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4559FA0BAC8520E013385280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     701
IP address blocks:        209.220.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:fa:0b:ac:85:20:e0:13:38:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=201becb0-ffff-44b7-86b0-8fd56d2eef67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:41:c1:f0:55:19:e5:72:36:8c:31:41:81:
                    10:91:5d:2b:ea:fd:4d:7c:25:d2:ba:e0:34:cc:0c:
                    72:d8:e8:23:ae:0b:10:15:ae:72:0e:00:4c:b2:3c:
                    77:04:38:c1:83:79:18:45:0f:b5:2a:d4:50:bd:0f:
                    c4:d5:80:36:c6:e7:a6:f6:ed:62:83:ed:3d:29:71:
                    c5:29:82:82:b3:fa:fb:e4:ae:e1:99:d2:58:c0:52:
                    e8:14:76:1e:fe:ec:d7:8c:53:00:c3:68:eb:0b:e2:
                    a8:bf:d8:ce:54:6e:ef:c9:5c:7a:d3:62:3b:67:43:
                    97:01:c3:d2:7a:40:5e:2b:e7:92:aa:85:c9:2b:95:
                    69:fa:cd:af:4b:2b:eb:a9:48:06:eb:f9:29:0f:4c:
                    f0:59:f2:49:35:90:9b:eb:0c:b1:fb:b6:35:2a:c5:
                    ea:df:99:d5:f1:c0:2f:bd:70:13:1c:c6:ea:90:76:
                    6c:64:95:73:bd:18:88:0b:a3:e2:cf:0b:22:18:2e:
                    ca:00:cc:9d:02:df:39:9b:7a:8a:98:7e:a6:44:dc:
                    62:48:ec:08:8b:76:6d:41:05:13:34:1e:e1:b3:e5:
                    69:5f:36:74:50:09:85:b3:48:84:cb:be:79:22:e2:
                    f6:5d:d9:5b:c7:f0:93:43:a4:c4:af:3a:b7:b6:ae:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4A:B4:C9:61:38:A8:E7:50:5A:38:82:52:69:ED:88:F1:91:6C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.220.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:76:f4:8d:26:52:53:82:a4:6f:1f:d6:37:94:66:3a:01:6f:
         ab:9b:2b:e1:c2:7b:03:c1:e7:e2:bb:e5:35:6f:72:a0:68:9f:
         29:4e:9a:40:41:2b:d5:40:4e:24:c0:17:0e:ad:b2:11:72:a3:
         b4:4b:d4:43:67:c0:73:52:4b:29:4b:d8:0e:9b:ed:9e:df:4f:
         89:4b:e7:d7:2a:d5:8f:7c:94:e9:a3:69:f3:55:d2:b5:61:80:
         7a:c7:4e:52:8d:c2:0d:49:22:8d:ab:4b:28:6f:b8:4e:f6:a2:
         0c:48:cc:69:a8:ff:9c:1e:8c:17:5b:60:45:ae:98:82:2d:e9:
         91:c7:78:d4:d6:23:d5:93:64:43:69:cd:40:36:aa:4e:fc:5d:
         ec:69:1a:87:a8:73:ba:ec:b2:43:9f:0f:46:77:57:84:07:00:
         04:2b:a1:f1:23:cd:32:03:35:94:b2:eb:36:ed:49:78:c5:62:
         21:a6:39:99:bd:6a:44:8b:d9:79:28:de:fd:3f:e8:c2:fc:6d:
         25:7c:16:28:17:97:5e:ae:60:46:3d:49:d3:da:45:cc:e6:a6:
         9e:b1:12:90:ad:61:0a:8d:7b:31:c5:89:f5:d8:b1:32:2c:99:
         db:86:08:3f:af:83:84:75:24:c3:69:1f:34:43:17:5a:1b:bf:
         ec:8b:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:36:37 2026 by rpki-client