Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75199183-93be-3493-b2f1-6bd9992b440c.roa
File:                     75199183-93be-3493-b2f1-6bd9992b440c.roa (raw, json)
Hash identifier:          7S5ROZFnUxpbSqDR+7iSSMET8X5MyrkIE/fLcgSBSlY=
Subject key identifier:   1B:36:9F:E2:47:C6:81:FF:07:93:4C:8D:99:94:03:2C:4E:E5:B4:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F90A31BCFAF0D7D38444702A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75199183-93be-3493-b2f1-6bd9992b440c.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     701
IP address blocks:        96.228.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:1b:cf:af:0d:7d:38:44:47:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=f44bffce-bb82-4976-bc13-9c5fd1a5eaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:e0:0a:68:b6:25:4c:ba:07:85:a7:3c:c1:
                    dd:84:4a:d8:00:b8:22:ad:04:2d:8e:99:8f:7a:7b:
                    b1:79:52:02:0d:f1:01:b3:33:85:0b:8a:d9:bf:e8:
                    0c:be:be:62:1f:4f:ab:da:b1:ef:e0:40:a9:e2:ac:
                    ab:ce:1d:8a:8f:6b:77:b2:0c:8a:f7:99:e0:77:0f:
                    c1:8e:2c:8f:3e:21:3e:1a:6b:55:b9:ee:2d:56:be:
                    2c:66:9e:92:dc:0f:4e:8b:19:89:c7:63:ed:1e:c6:
                    d4:1a:09:d8:05:cc:6e:3c:dd:18:ac:14:f5:c8:77:
                    1c:ab:07:ba:12:be:c9:6b:bf:36:2b:4f:82:51:2a:
                    2a:18:d4:2d:79:21:aa:c7:0d:a9:9f:a4:ea:10:4a:
                    63:e4:df:ff:cf:8e:88:f4:e5:f2:b5:e3:19:b4:9f:
                    ae:4c:a5:18:1d:77:7d:7c:a0:2b:f7:68:28:c6:1e:
                    17:e3:c3:5e:35:51:7f:5d:bf:de:08:60:ef:f9:02:
                    34:3a:6e:41:8f:ce:74:3f:b9:59:d9:1f:ae:1b:9f:
                    41:fe:26:63:f2:4e:fe:7b:d1:52:94:db:1d:6c:73:
                    d2:e8:c2:c7:52:7f:15:ee:dc:52:8b:bb:47:1d:02:
                    89:c0:df:9e:8a:2c:aa:7a:ac:91:75:71:64:2e:57:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:36:9F:E2:47:C6:81:FF:07:93:4C:8D:99:94:03:2C:4E:E5:B4:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75199183-93be-3493-b2f1-6bd9992b440c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.228.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:ef:e3:94:23:50:20:13:4f:e8:ed:37:ae:24:97:16:f8:
         24:9e:bc:32:dd:e3:e5:ec:e3:2a:24:ab:43:65:98:ef:04:e8:
         07:74:0e:71:51:3e:ee:37:46:e9:9b:1a:08:db:ee:a3:b3:07:
         09:d4:fe:4c:7a:5d:34:3f:3d:a0:f5:8c:e0:3e:a6:1c:b3:7f:
         14:14:1c:87:0b:07:36:74:1a:f4:75:bc:dc:42:4a:b6:44:00:
         22:ac:b0:77:c0:c7:4d:a0:88:6a:0c:4e:be:20:13:f0:fa:48:
         59:77:06:3a:19:89:fd:7b:90:09:8a:00:59:62:7a:45:83:95:
         27:18:bd:be:dd:8d:a1:23:6b:25:9b:58:36:83:ab:2a:b7:d0:
         21:31:26:5b:cd:41:47:58:42:50:f9:7e:31:69:ae:48:8b:ee:
         62:20:84:68:8f:25:8e:b7:6b:57:c4:d2:61:71:b1:d2:32:16:
         a2:ea:3e:a1:7c:2b:b9:6a:8d:24:a6:f5:d5:96:1b:63:48:48:
         59:70:c8:9c:8e:c5:69:f5:dd:b1:6e:47:82:e7:3d:c2:3f:65:
         de:95:7a:32:59:b3:b3:be:12:91:37:9f:10:a1:50:e6:92:a2:
         f5:81:1b:9a:f1:5d:9f:fa:62:a0:f6:8a:56:19:22:d2:b8:d5:
         a5:71:71:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 05:53:21 2026 by rpki-client