Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d8e8c73-5cbf-3cad-9de3-87569f3dfe66.roa
File:                     5d8e8c73-5cbf-3cad-9de3-87569f3dfe66.roa (raw, json)
Hash identifier:          r1UAGKxRW5uu2ODuKTsjQRGqXNXBzsX3hWloLpg3hQQ=
Subject key identifier:   2F:C0:B3:EF:36:B7:4A:8B:56:D0:E9:4B:22:74:BE:DC:17:C2:57:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E346AF548E62EF54475BB60A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d8e8c73-5cbf-3cad-9de3-87569f3dfe66.roa
Signing time:             Wed 17 Jun 2026 19:26:03 +0000
ROA not before:           Wed 17 Jun 2026 19:26:03 +0000
ROA not after:            Tue 15 Sep 2026 19:26:03 +0000
asID:                     397056
IP address blocks:        63.71.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:34:6a:f5:48:e6:2e:f5:44:75:bb:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 17 19:26:03 2026 GMT
            Not After : Sep 15 19:26:03 2026 GMT
        Subject: CN=86534178-5a7c-42d5-8937-2c1e22455012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:33:11:8f:2d:e3:11:42:49:6e:b6:27:f6:4f:
                    ea:18:30:4f:9f:04:ac:b6:57:14:d9:bf:ca:6f:a6:
                    e9:1b:87:7a:53:bd:7d:48:5a:cd:36:ad:24:9b:10:
                    26:43:53:7a:47:90:77:dc:b1:17:23:94:9c:70:d4:
                    97:35:47:a8:74:01:a2:8a:6c:5a:c1:be:a1:12:36:
                    84:cc:96:47:ca:19:d8:b9:a9:1b:f3:11:5b:9d:9c:
                    43:1a:80:e9:0b:8d:a4:fd:fe:b8:b5:10:09:67:8e:
                    b1:d9:06:3e:dc:c5:e6:e7:69:d7:02:c7:a4:ad:47:
                    39:48:4f:d9:c6:a1:b8:3b:df:c2:18:6f:8d:f5:2a:
                    2a:55:1a:51:61:4e:f1:c7:0c:a6:39:c7:2a:cc:76:
                    fc:b0:2a:5c:c8:bc:f1:67:7a:33:fa:87:88:52:02:
                    46:75:34:49:68:08:b2:25:c9:e4:e5:18:11:e1:c9:
                    47:2f:43:ec:75:6d:bb:17:53:cc:3d:9e:1c:1c:e3:
                    09:20:cf:de:71:34:f9:7b:ca:2f:ca:cb:33:dc:3c:
                    c0:94:de:12:14:dc:e5:5a:f2:80:c3:e1:41:79:ee:
                    1a:d3:b1:71:e8:46:9a:23:84:6b:d8:e6:0f:ae:2b:
                    a5:9e:eb:5e:cc:7c:74:4a:78:af:e6:4f:5e:7b:82:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C0:B3:EF:36:B7:4A:8B:56:D0:E9:4B:22:74:BE:DC:17:C2:57:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d8e8c73-5cbf-3cad-9de3-87569f3dfe66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.71.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:20:15:02:da:03:bb:79:99:93:7c:16:ce:3f:71:7a:0c:d4:
         62:3a:e2:87:50:24:10:fa:09:07:9e:90:27:6a:bc:9b:d9:9d:
         2d:16:03:5d:1e:87:b9:c6:e6:3d:c3:f0:e2:30:2d:b7:d7:cb:
         73:b3:51:df:76:94:de:62:f3:db:d1:89:69:3d:02:fe:75:94:
         81:6b:00:f9:f7:c6:f3:5c:fd:90:51:8f:2b:fe:5c:07:0f:e4:
         eb:fa:ce:ca:12:c6:ba:c3:de:2f:1d:81:e9:63:b0:83:b6:20:
         81:5c:52:de:e7:b4:b6:c3:10:cf:c2:c8:80:98:78:30:d9:48:
         0c:6c:4e:ef:03:09:b2:f1:0d:25:01:b7:95:6d:3a:ca:63:af:
         f2:43:71:36:03:24:04:9d:b2:93:32:59:ef:df:c1:9a:1a:80:
         0a:bd:9a:cd:76:66:ec:07:26:ef:c3:87:da:21:8d:d1:98:c6:
         39:ec:99:5f:92:08:c1:a3:c0:e9:b3:5a:3a:68:9a:45:a0:74:
         b7:f1:1c:55:f3:87:e9:32:bd:2e:ac:e1:35:67:fd:3f:52:d1:
         59:f2:22:cf:bf:e2:18:a3:2f:a5:62:8a:39:c6:0b:06:db:3a:
         e7:f3:73:4b:86:6b:66:fd:12:0f:a8:d8:e0:76:e3:8e:3a:8e:
         8e:08:68:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE40avVI5i71RHW7YKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYxNzE5MjYwM1oXDTI2MDkxNTE5MjYwM1owLzEtMCsGA1UEAxMk
ODY1MzQxNzgtNWE3Yy00MmQ1LTg5MzctMmMxZTIyNDU1MDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TMRjy3jEUJJbrYn9k/qGDBPnwSstlcU2b/K
b6bpG4d6U719SFrNNq0kmxAmQ1N6R5B33LEXI5SccNSXNUeodAGiimxawb6hEjaE
zJZHyhnYuakb8xFbnZxDGoDpC42k/f64tRAJZ46x2QY+3MXm52nXAsekrUc5SE/Z
xqG4O9/CGG+N9SoqVRpRYU7xxwymOccqzHb8sCpcyLzxZ3oz+oeIUgJGdTRJaAiy
Jcnk5RgR4clHL0PsdW27F1PMPZ4cHOMJIM/ecTT5e8ovyssz3DzAlN4SFNzlWvKA
w+FBee4a07Fx6EaaI4Rr2OYPriulnutezHx0Sniv5k9ee4JAGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/As+82t0qLVtDpSyJ0vtwXwlfCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWQ4ZThjNzMtNWNiZi0z
Y2FkLTlkZTMtODc1NjlmM2RmZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP0f+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALggFQLaA7t5mZN8Fs4/cXoM1GI64odQJBD6CQeekCdqvJvZnS0WA10e
h7nG5j3D8OIwLbfXy3OzUd92lN5i89vRiWk9Av51lIFrAPn3xvNc/ZBRjyv+XAcP
5Ov6zsoSxrrD3i8dgeljsIO2IIFcUt7ntLbDEM/CyICYeDDZSAxsTu8DCbLxDSUB
t5VtOspjr/JDcTYDJASdspMyWe/fwZoagAq9ms12ZuwHJu/Dh9ohjdGYxjnsmV+S
CMGjwOmzWjpomkWgdLfxHFXzh+kyvS6s4TVn/T9S0VnyIs+/4hijL6ViijnGCwbb
Oufzc0uGa2b9Eg+o2OB24446jo4IaKQ=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:32:54 2026 by rpki-client