Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3664426d-c4f1-385b-835d-18c7071aaaa1.roa
File:                     3664426d-c4f1-385b-835d-18c7071aaaa1.roa (raw, json)
Hash identifier:          f6O8NnYfvDsB13uPINjkLYmu7b0ZpeaaHLDVsFcrM6I=
Subject key identifier:   60:19:4A:A1:F8:49:0C:7F:06:8D:66:FF:30:F7:11:E1:71:96:87:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A1C80113CBFEEE5DD240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3664426d-c4f1-385b-835d-18c7071aaaa1.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        96.249.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a1:c8:01:13:cb:fe:ee:5d:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=d8d3c391-9368-457e-8805-efef4e29b08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:94:20:19:4b:57:38:91:5a:1e:ad:38:85:
                    7b:90:f1:88:3c:db:5b:07:93:1f:70:3d:3f:02:c2:
                    9f:94:4f:fc:f2:79:c9:d3:13:bd:be:d7:6a:ec:d4:
                    af:8f:bf:dc:e7:c7:b3:4d:be:f8:02:90:de:9d:03:
                    26:ff:e4:8d:e3:4c:4f:cb:a2:bd:1d:c6:7f:30:2d:
                    28:24:ea:43:00:cc:81:74:c6:1c:f7:04:a6:9f:9f:
                    ca:00:06:76:a1:d9:cc:75:87:d8:10:cf:ef:90:29:
                    eb:75:89:8f:b3:b1:a6:7e:1b:fa:fc:a7:2c:14:99:
                    54:61:95:69:d3:64:18:be:48:0a:c4:04:2b:07:80:
                    d2:43:17:34:17:d0:92:ea:a2:fa:a3:bb:78:37:91:
                    29:de:2d:3f:73:61:ee:53:3e:f9:9a:b7:93:c9:42:
                    10:63:77:ca:77:a9:1d:6c:cb:00:b9:21:2c:3f:9c:
                    9c:6d:79:38:fe:7e:ea:6f:a9:d4:5e:0c:b8:12:4a:
                    f7:e6:f3:ed:8b:91:8d:70:51:98:6c:c4:60:81:fe:
                    3c:68:b5:df:28:ee:bb:6b:b5:2c:13:61:a2:30:35:
                    11:b3:79:f7:f2:12:79:f2:36:e5:02:33:b5:c1:73:
                    9d:1b:d8:fb:ec:0f:f3:d6:56:e1:37:4a:b9:5b:65:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:19:4A:A1:F8:49:0C:7F:06:8D:66:FF:30:F7:11:E1:71:96:87:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3664426d-c4f1-385b-835d-18c7071aaaa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:f2:57:51:63:8b:b2:64:8a:f0:e5:cd:02:dc:40:cf:e2:
         41:86:54:f9:7c:86:55:e5:f4:5d:6b:33:5f:26:27:d0:71:15:
         08:2a:70:64:de:c8:98:33:78:0b:9d:08:a5:37:29:25:e5:cd:
         29:aa:a7:a7:d5:b1:8a:7f:b3:20:73:cb:11:de:d5:84:59:0d:
         e3:06:92:59:14:34:3f:d3:ec:cb:c7:8c:24:36:5e:d7:63:45:
         de:1f:79:c8:18:ed:55:01:84:b7:0d:09:03:e7:8f:63:a5:02:
         fa:24:d3:c8:b7:48:13:99:86:af:ae:eb:1c:f1:4d:f9:18:70:
         54:90:55:f0:68:92:ed:49:9d:0b:ef:5f:d3:e6:68:06:8b:12:
         a3:e6:51:38:13:3e:c2:cc:00:d4:67:e6:96:42:51:60:81:12:
         1b:d6:4b:ce:fb:80:89:bd:44:40:3c:63:55:5a:02:1e:c3:7a:
         f9:40:30:23:32:2b:1d:4d:26:32:40:8b:ec:ed:06:f9:60:5c:
         4f:6d:9a:04:d0:30:73:6e:b5:ae:c3:cd:28:c1:7b:26:69:ab:
         94:10:14:2d:1c:76:7c:70:fc:59:73:40:fb:8b:d8:95:e1:c0:
         ac:d6:10:3f:73:48:5f:6f:61:1b:6e:0b:3c:13:74:77:19:30:
         c5:ba:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:03:21 2026 by rpki-client