Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fc5629c-bb44-38b4-a93c-d82d25e7cfcd.roa
File:                     4fc5629c-bb44-38b4-a93c-d82d25e7cfcd.roa (raw, json)
Hash identifier:          ZhsDujSxvDYR6jdULWHUKJDWbY+JPDyVZBsFjXnUSh8=
Subject key identifier:   FE:F3:70:01:CF:2C:B2:D7:36:62:E4:9A:68:B8:77:65:79:C7:70:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F89A88474B38B0FE2B17B5400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fc5629c-bb44-38b4-a93c-d82d25e7cfcd.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     701
IP address blocks:        165.117.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:84:74:b3:8b:0f:e2:b1:7b:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=5e73bde6-a7f7-49c4-b734-02d6dbce59ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:76:d8:35:bd:cd:4d:ab:58:f1:7a:22:cf:
                    d8:f8:72:50:ba:7f:6e:27:3d:0f:fd:83:a0:25:af:
                    90:1b:05:56:6f:fa:bf:2c:a1:be:f4:a0:0e:9f:f1:
                    04:0c:4d:b8:f9:2c:62:30:b9:b5:6e:d4:fc:8d:77:
                    ff:16:89:83:4b:32:c1:68:b5:b5:67:03:dc:45:7c:
                    c2:3d:a1:32:02:c4:c5:e4:83:21:dc:c9:aa:d7:09:
                    ab:bd:02:b8:39:e1:5e:06:cb:4e:a0:b9:04:f5:28:
                    6d:ca:60:53:e7:48:47:0f:85:f7:74:ec:c5:d0:f6:
                    b0:45:79:25:08:df:4e:5a:c2:23:ea:6f:82:aa:3f:
                    74:14:85:8c:a7:df:3f:d4:6b:1d:3d:2a:9c:22:77:
                    47:bb:fb:24:d0:ef:5c:17:49:e5:3f:a3:5f:c3:09:
                    79:c7:28:e1:78:79:c0:0f:c1:c0:72:0f:c3:72:10:
                    7c:39:15:dd:d2:68:f3:bf:44:9a:98:ae:e8:8e:cb:
                    87:8d:ec:ed:5c:d5:4a:18:a1:b3:d1:4a:47:15:64:
                    07:7d:2b:07:ad:c1:9d:d3:6c:eb:57:84:09:61:46:
                    77:37:1e:c2:f3:25:72:26:c7:b7:c1:0c:e3:5e:bd:
                    a0:f0:57:9c:75:6a:fe:a4:8e:b1:91:ca:33:f1:83:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F3:70:01:CF:2C:B2:D7:36:62:E4:9A:68:B8:77:65:79:C7:70:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fc5629c-bb44-38b4-a93c-d82d25e7cfcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.117.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d6:be:dd:16:61:d1:d1:98:dd:ad:88:10:12:08:aa:74:e6:
         95:f3:6a:37:c8:7f:e3:ee:20:10:e2:d0:43:9a:f3:a6:01:af:
         ec:30:34:8e:79:25:09:81:97:d6:e1:5c:b7:f4:8f:e7:a8:b1:
         96:ac:d8:7f:0f:d2:17:3c:36:af:e2:ca:fe:37:62:4c:7d:ca:
         5b:5d:f0:1b:9e:65:e5:67:b9:fe:55:78:37:bf:f8:e7:84:1b:
         b6:50:d9:62:3e:95:1d:62:7d:b3:46:b3:0c:9c:9c:19:12:70:
         98:f6:23:e9:45:d4:9d:99:4a:18:72:7b:c9:31:94:01:04:da:
         f8:cf:87:81:5d:ab:fc:63:60:9a:90:16:ae:41:0c:fc:96:4f:
         01:3c:2e:90:a0:62:b7:31:d7:8c:b0:1d:aa:da:f2:ba:9c:90:
         fd:c2:7e:fe:8b:b5:c3:76:ee:e3:b3:37:bd:9d:e8:f3:b2:b6:
         d0:b6:fa:5d:87:54:17:b1:84:46:19:e2:c5:86:90:d0:76:f8:
         e8:59:41:9e:ca:c6:67:6e:66:79:ac:bd:65:e0:80:5c:0f:dd:
         c5:d4:dc:d9:fe:f6:cc:9c:6a:1d:f1:b4:d3:33:38:4e:f4:16:
         78:6a:78:55:f5:02:9d:38:9a:3c:2b:09:45:9e:5f:cb:ca:60:
         4c:23:5d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:37:06 2026 by rpki-client