Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fe8c01d-c7c1-3b03-877b-542f96133daa.roa
File:                     6fe8c01d-c7c1-3b03-877b-542f96133daa.roa (raw, json)
Hash identifier:          zEaxQABbm/tVYLIFFl0MoL21vNVDVITyGdIjNtru4os=
Subject key identifier:   31:2D:30:FD:B7:65:03:B0:8E:B6:DF:75:1F:73:6F:E1:06:CC:AB:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB76B768EE827654ED88880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fe8c01d-c7c1-3b03-877b-542f96133daa.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        96.239.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:6b:76:8e:e8:27:65:4e:d8:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=dab8b369-35ed-411b-a737-0e926f60e5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:be:8f:84:56:02:c5:a5:59:23:83:1b:b6:be:
                    26:8f:9e:4f:38:b8:3b:51:40:0c:9d:cc:eb:11:e5:
                    c2:c8:ff:91:43:d3:7d:71:b7:3f:61:50:3e:30:0b:
                    a9:53:20:a4:a9:70:36:dc:e4:33:15:17:87:11:98:
                    3e:31:e5:70:03:38:ad:39:24:51:b4:9a:1d:c3:ea:
                    86:0e:c6:84:a1:ea:a2:4b:c5:14:93:55:c2:b9:52:
                    43:9e:f0:97:34:fd:b3:b8:40:29:78:6d:02:4d:4e:
                    47:58:97:e9:8d:52:a8:14:06:8f:ff:8d:be:93:e9:
                    72:e5:0d:4c:d3:d5:6d:a9:7d:46:08:6a:0b:bd:7a:
                    c6:a6:06:51:eb:0b:31:fa:e6:b9:0c:26:39:d2:76:
                    9a:6c:00:13:dd:bb:95:bd:39:bc:46:68:84:2f:67:
                    84:2d:a5:af:0e:23:05:79:8b:e9:e4:35:47:09:d8:
                    80:66:b5:be:da:5a:a3:89:3a:00:d9:45:57:8a:a9:
                    f4:36:aa:7f:cd:7a:81:30:7b:ee:b0:6f:43:b8:3b:
                    db:85:a4:09:47:1b:09:b4:0f:f4:2b:4c:7e:90:71:
                    a5:66:80:5d:a0:a4:08:2f:70:e5:30:cc:94:8d:1c:
                    d4:a4:b3:c8:1b:0d:6e:51:a8:87:f7:3d:8b:4f:63:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2D:30:FD:B7:65:03:B0:8E:B6:DF:75:1F:73:6F:E1:06:CC:AB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fe8c01d-c7c1-3b03-877b-542f96133daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.239.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d7:69:08:44:d3:f5:2a:e3:c2:a1:3e:35:3b:e7:e8:0b:f1:
         61:33:5c:b8:65:3c:a5:3e:bc:b7:3a:b0:dc:54:db:5f:77:1c:
         ec:54:8d:aa:f3:7b:92:bd:a4:4a:45:ff:42:52:c6:c7:0a:fb:
         4d:84:32:74:87:03:e1:af:45:5f:3b:56:2a:8b:5f:43:03:b4:
         6f:5e:a1:b2:2d:21:64:5a:bb:68:aa:2a:e0:14:43:ad:f5:fc:
         71:7f:5a:49:f3:5e:59:f2:78:69:9a:1a:c7:fa:c6:21:a9:e9:
         72:0f:18:e0:16:25:01:f1:ac:5d:39:8e:88:1a:2c:b4:db:8a:
         b8:b8:8d:ce:59:dd:36:59:9c:d1:c5:00:95:be:9a:2b:42:f8:
         7f:ec:a2:6d:26:18:32:81:05:57:ef:70:d9:63:61:80:b2:2f:
         85:d1:67:ab:2a:a8:cf:83:d2:ee:c8:64:1f:b4:ce:69:0c:4b:
         6e:cc:75:34:41:ef:e2:07:b9:a8:32:52:92:07:ee:e4:89:80:
         2c:3c:66:33:20:d7:2a:28:e7:f9:b0:5e:a3:64:0c:53:30:7f:
         a4:85:ca:c0:9a:36:95:ee:7c:e4:57:72:86:64:73:02:98:fa:
         5c:2d:29:a2:0f:53:e8:eb:69:4c:6e:23:91:65:cd:cf:e3:90:
         cd:97:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:04:35 2026 by rpki-client