Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a407a3d-6ec3-39cd-a792-3f9987e1f500.roa
File:                     2a407a3d-6ec3-39cd-a792-3f9987e1f500.roa (raw, json)
Hash identifier:          hrZW228ug0JWAkaj1RAViNks5y6+8tuwM7OI2pbFe/U=
Subject key identifier:   FF:49:44:47:59:2D:27:A3:A9:71:FE:92:0F:D3:0C:04:D4:CD:1E:8E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A22FA813D08F3CA5DE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a407a3d-6ec3-39cd-a792-3f9987e1f500.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        173.50.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a2:2f:a8:13:d0:8f:3c:a5:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=b7bc057a-caef-4c35-99f6-f4302bf71a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:36:0e:64:6b:4d:97:f0:87:a7:a3:96:75:72:
                    b5:2f:c6:a1:26:85:2f:55:d1:a2:83:df:b0:76:44:
                    af:f7:3f:d0:79:3a:4b:de:3f:d1:6e:2a:64:6b:e9:
                    a1:36:75:0a:fe:f2:63:e7:d9:35:70:19:7b:75:38:
                    c2:ce:b5:d6:7e:8d:ca:7b:51:24:a4:72:b8:a1:9c:
                    c8:ba:53:7b:34:f3:1e:f7:5c:7e:aa:c2:b5:97:0c:
                    2d:fd:be:5d:7b:c9:ec:39:94:ca:b1:a3:fa:a7:29:
                    8e:e3:a5:2d:c6:f3:61:85:30:7b:53:a9:fe:c7:ed:
                    2b:bc:28:d9:0a:9a:9a:95:4a:dc:d1:e0:8b:35:59:
                    e6:38:e1:f1:7b:08:e5:e9:90:48:86:5e:cd:17:df:
                    a2:e9:70:d8:b0:85:39:01:c6:72:84:11:cb:00:d1:
                    57:93:fa:31:e6:37:b2:7c:71:d6:c9:df:89:10:2c:
                    6a:1e:c1:44:0b:da:07:5f:f1:72:9e:0b:14:82:cb:
                    73:83:e1:6e:5a:97:81:ff:64:f8:c0:b1:6c:3e:d6:
                    ba:28:13:0b:4b:f8:11:c4:49:58:72:42:5c:f5:e0:
                    9c:70:4a:00:72:e9:f0:c9:89:7a:f6:99:0c:20:ee:
                    80:a5:21:07:00:73:80:94:d4:d4:f9:9d:3c:62:0b:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:49:44:47:59:2D:27:A3:A9:71:FE:92:0F:D3:0C:04:D4:CD:1E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a407a3d-6ec3-39cd-a792-3f9987e1f500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.50.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5d:44:16:28:d4:2c:c4:f1:f9:ab:a1:ac:52:43:47:c8:f4:
         e5:a3:bd:a9:f6:1a:24:4d:14:aa:5c:ac:a8:43:7f:91:a3:9e:
         05:00:52:5f:42:2d:32:7c:2f:d0:7c:75:62:e4:01:05:e2:ff:
         16:e6:fd:79:4d:b0:4f:35:ab:f1:1b:52:e1:c0:ec:bd:84:1b:
         70:74:9c:e4:82:73:77:4e:e7:47:44:c0:a5:06:46:fc:c1:b6:
         c6:e2:c9:c0:db:46:aa:67:dd:07:be:46:c3:12:a9:b2:81:d7:
         3a:60:43:67:b2:aa:89:ec:34:49:02:0f:7a:ba:5c:2d:47:62:
         62:7f:6a:d4:38:c1:25:63:e9:bb:67:54:e6:e9:92:5d:fc:e6:
         14:85:86:2d:3e:20:75:00:2d:1a:8a:32:ed:6d:42:74:f9:b6:
         aa:fd:fc:75:31:f6:a3:31:cf:c3:7e:9e:7d:e9:e6:d3:57:63:
         03:a7:ad:bb:38:6c:1d:33:d0:a4:73:a1:36:66:a4:f7:e4:79:
         14:b3:9f:02:8c:23:22:4e:b5:2d:47:bb:39:27:c5:b7:94:d4:
         01:37:6e:e9:b7:e4:d5:01:ed:9e:91:48:40:c0:06:30:21:6c:
         11:eb:4a:a4:7e:4f:d4:c4:48:d2:6e:76:47:fd:e6:1b:9a:42:
         b3:f0:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:02:36 2026 by rpki-client