Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d2f817b-828c-3ba2-9e22-67ffdc29ccff.roa
File:                     3d2f817b-828c-3ba2-9e22-67ffdc29ccff.roa (raw, json)
Hash identifier:          5VlnzZ0jMjvHsCzzSW/WoK/Kjm43VE5VCu45mbFE7lc=
Subject key identifier:   74:4B:9A:8A:A0:52:DE:C1:97:90:F2:CD:BE:C6:BE:A9:62:6D:60:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A11202DCB75843A1DB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d2f817b-828c-3ba2-9e22-67ffdc29ccff.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        96.245.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a1:12:02:dc:b7:58:43:a1:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=8d08eee8-09bc-4015-abac-9d89bd52cf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:41:57:7d:2a:48:6e:bd:e6:c0:e1:99:b7:
                    25:f1:dc:b9:1e:61:fc:9b:de:7c:55:38:03:49:92:
                    d2:b4:6f:b8:80:6e:bb:4d:b8:fc:c8:c4:b8:ac:e7:
                    fd:a0:fb:56:14:de:40:6b:5f:b2:57:e5:0b:a0:9c:
                    8b:fc:b4:d3:6b:72:b7:a8:77:28:2c:a1:89:15:4c:
                    90:eb:1a:ba:2e:05:f7:d9:0c:28:30:1b:07:af:8a:
                    64:62:77:7f:9b:71:73:48:ea:39:67:94:41:28:02:
                    b3:43:d6:7e:00:46:34:e0:2c:43:1f:ee:59:cb:15:
                    c1:8f:72:44:65:99:9d:08:55:37:e3:0b:89:52:94:
                    4f:b7:e7:e7:89:12:4a:c2:ce:01:33:7b:80:64:72:
                    d9:32:d2:e6:a7:d9:5a:0b:22:83:30:f5:14:72:c9:
                    e7:f4:6c:0e:9c:c0:6c:3e:13:45:45:5d:1d:9f:f0:
                    b2:a2:49:d4:3a:e4:3f:f7:5c:22:1f:88:90:fb:a6:
                    66:ef:c7:45:0a:d1:ec:36:90:dc:4b:c8:50:34:b0:
                    6f:2a:13:94:3c:07:05:43:a8:45:5e:cf:e9:64:4b:
                    14:dd:e1:61:eb:a1:b3:68:38:b6:b0:31:e4:c4:ba:
                    37:7e:72:08:d2:1c:bc:68:ff:9c:ee:b5:f0:8d:8e:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4B:9A:8A:A0:52:DE:C1:97:90:F2:CD:BE:C6:BE:A9:62:6D:60:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d2f817b-828c-3ba2-9e22-67ffdc29ccff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.245.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:40:b0:62:e5:48:26:34:da:55:a6:9f:13:90:6e:44:c9:7a:
         20:e3:d3:85:b4:2d:28:a5:3b:a1:e5:5f:5d:1e:e1:2f:17:13:
         21:e8:15:13:38:be:c2:6f:f2:58:fc:67:b9:ea:c3:db:91:a1:
         95:5a:b7:ae:48:66:56:07:47:8e:90:44:54:52:a8:5c:e5:67:
         85:5d:5f:60:94:c4:54:7b:66:18:17:a2:ca:f2:eb:6c:68:c8:
         1b:10:aa:01:b6:b4:bc:4a:0d:43:e3:08:4a:80:71:cf:dc:cc:
         51:c4:29:b4:45:ca:21:9b:ff:50:58:df:e8:7a:62:f4:68:2c:
         10:e2:42:c0:3f:b0:fa:1a:d0:a9:9b:9e:66:da:9f:a0:45:00:
         0f:da:07:53:39:da:99:f3:54:9c:45:db:15:a9:3f:3c:e7:22:
         1a:4a:60:d7:e4:a9:d1:f5:67:ac:ec:16:de:48:e4:1b:ca:26:
         c0:35:97:ab:01:97:75:3e:b5:e8:ff:ed:4c:63:29:d9:73:ba:
         b1:5a:6c:fa:c3:70:a2:6c:c7:03:87:01:d5:72:5d:7b:90:a9:
         e3:b2:3e:e7:6d:da:bb:9b:72:20:7e:df:0a:8d:94:9a:a6:ef:
         b8:68:d3:08:ce:4e:2d:16:b5:d1:8f:58:54:2e:96:29:6b:8a:
         40:f2:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 17:24:46 2026 by rpki-client