Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75199183-93be-3493-b2f1-6bd9992b440c.roa
File:                     75199183-93be-3493-b2f1-6bd9992b440c.roa (raw, json)
Hash identifier:          3ipG0OP852MjBlX58/v41JsQ4pU9iMKCd1inR3b/2kc=
Subject key identifier:   64:DD:BF:8E:42:05:D4:05:5D:42:2D:B4:C4:31:B9:83:FF:38:F3:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB76C566AE914DC3FDACF60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75199183-93be-3493-b2f1-6bd9992b440c.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        96.228.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:6c:56:6a:e9:14:dc:3f:da:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=060e9a0c-24b5-4f5c-bccf-9d43d6b06498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:44:1e:b2:f0:7b:67:c6:a6:02:b6:2a:1c:
                    0e:c8:35:9d:1e:7d:21:05:d7:f2:f8:f6:ce:b6:6d:
                    47:e4:4e:b6:31:13:46:06:53:a2:7d:f5:7e:7a:ab:
                    1f:b1:6f:7f:f1:c6:1a:a1:8a:9b:d1:da:c9:bc:e2:
                    c8:c1:e5:bc:f4:c2:1e:da:51:3d:6d:15:7f:b3:89:
                    b0:2c:8b:01:37:e2:69:2a:70:4b:ed:b4:d8:11:db:
                    d1:f5:71:40:46:d0:a7:76:9e:a1:00:c3:be:4d:a5:
                    09:b5:b5:2a:ee:f5:6d:d6:ea:02:af:13:4e:6c:64:
                    47:fc:5c:e0:2b:8e:09:23:fb:99:e8:18:00:57:2b:
                    4a:28:9b:af:ed:43:14:b7:9a:e2:84:cb:54:19:fa:
                    ff:4a:c6:40:0b:61:59:0e:9f:00:43:e8:a3:88:32:
                    3a:4d:8a:03:7c:85:8a:e1:d4:65:55:86:a9:ae:8d:
                    e4:10:fa:9b:a8:0d:77:cd:d0:b0:6b:6d:48:b8:91:
                    3d:a3:c3:4c:0e:a9:b5:a8:5e:5e:9f:24:99:ee:34:
                    66:54:73:4d:28:26:6b:2f:c7:c4:5c:1c:89:4c:26:
                    bf:16:f4:59:8c:53:1b:3c:cb:93:e9:1f:33:99:05:
                    0b:ee:a1:7f:0e:78:cb:3a:b3:44:b2:05:05:55:65:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DD:BF:8E:42:05:D4:05:5D:42:2D:B4:C4:31:B9:83:FF:38:F3:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75199183-93be-3493-b2f1-6bd9992b440c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.228.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:98:45:48:a6:42:b8:ba:28:ef:a2:b3:af:68:68:a0:e6:
         2b:02:36:76:7f:2f:78:45:84:c9:97:8a:0a:2c:cf:f8:55:07:
         13:a4:43:27:4d:1f:f0:74:76:af:24:96:be:85:ea:57:c1:78:
         11:31:b5:84:20:69:83:43:dd:a4:f4:64:2a:de:a4:e1:a4:8d:
         c9:6d:da:20:0d:56:c9:ca:d6:c1:95:6f:aa:43:cb:67:76:c3:
         79:44:c5:9e:ea:00:91:48:ce:82:14:c8:2f:b0:ca:76:6e:4b:
         10:59:0f:f3:4b:fb:9d:1b:4f:0d:24:62:2b:57:c6:b6:ef:27:
         89:49:58:45:eb:92:4e:0c:a6:02:c5:92:5e:9a:98:ed:c7:ab:
         cc:76:bd:88:01:f7:40:3c:6d:9b:b4:36:35:67:e6:ee:6d:de:
         bd:0d:1d:e9:35:c0:c8:c8:a6:f1:57:63:95:0d:07:dd:92:f7:
         5d:23:f0:36:d3:4a:a7:d0:cb:ca:78:5b:33:43:c1:79:30:0e:
         8f:20:20:cf:85:d1:f5:44:57:ad:da:40:c1:6d:41:b0:1d:9c:
         b9:63:78:1c:8d:b5:3c:cd:7f:01:af:a2:7e:a3:f7:2c:dc:fa:
         ed:d7:bb:83:bb:a9:82:9b:1b:31:04:67:cf:0a:cc:68:cd:05:
         31:ca:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:41:42 2026 by rpki-client