Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75ea4824-9b96-3d9f-b021-7503d471ce24.roa
File:                     75ea4824-9b96-3d9f-b021-7503d471ce24.roa (raw, json)
Hash identifier:          om8zYYrzmIuIEwNAESwWQrdwSHoIQjQtcHWVZfvEOgw=
Subject key identifier:   AA:3F:B9:AD:5D:46:1B:82:68:41:B7:86:01:C6:7A:0C:B9:EB:29:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584C93D1E7EF4FE7FD938545C980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75ea4824-9b96-3d9f-b021-7503d471ce24.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     701
IP address blocks:        71.244.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d1:e7:ef:4f:e7:fd:93:85:45:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=3b579a1c-1e25-4e65-b89f-2b37f7370cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:97:15:2b:f5:a2:0f:da:76:58:d5:dd:38:
                    24:38:e7:14:fa:ae:a6:3d:53:c5:98:d9:22:ca:2e:
                    ff:ad:a6:f5:ab:46:f4:30:8c:6a:7e:9e:51:a0:15:
                    9c:a2:a1:5a:75:f0:6d:6e:3c:15:d1:4e:6f:71:ed:
                    ed:fa:53:c2:fd:06:54:f5:3e:c7:81:f0:6a:f9:50:
                    7c:23:95:b9:ab:11:52:77:6c:83:2e:98:f3:4d:8c:
                    e7:dd:82:c3:b2:4b:33:17:ba:08:c3:c2:82:39:bf:
                    d1:d4:04:32:25:70:da:53:3f:1b:a5:c5:d0:7f:3d:
                    0c:3c:f9:da:11:b0:ef:fd:ff:31:67:aa:84:0c:c5:
                    04:7e:2d:d7:b6:9c:f5:c9:7a:51:5c:59:d6:c0:d4:
                    73:27:32:d5:a9:41:ef:81:61:0f:08:fa:c8:50:17:
                    1b:4b:ba:3c:41:ea:01:61:b5:43:d2:4b:d6:8e:1f:
                    18:8f:80:05:3a:a5:0b:56:34:7d:cf:59:d3:e2:f3:
                    3e:7f:d7:e2:fb:36:b3:59:53:f1:b4:6f:c2:b0:5c:
                    7b:cb:b2:ef:e2:5b:8a:22:97:3b:9b:59:c9:8c:1b:
                    ff:45:51:d8:34:f7:ab:04:9e:37:3a:6a:d6:2b:e4:
                    9b:18:04:4a:10:4c:f8:c9:63:08:97:e3:97:fa:87:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3F:B9:AD:5D:46:1B:82:68:41:B7:86:01:C6:7A:0C:B9:EB:29:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/75ea4824-9b96-3d9f-b021-7503d471ce24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.244.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2a:d1:7d:a5:16:36:85:e6:18:7f:da:94:b7:3e:39:28:39:
         53:fb:64:f5:8f:55:11:25:01:04:82:44:13:25:dd:c3:b2:ac:
         4e:a2:d7:3f:dd:60:66:c3:0d:8f:35:dd:e1:80:7f:15:07:dc:
         05:9a:ca:c3:a7:87:95:9a:9c:9b:ad:01:01:f9:5d:a2:8e:42:
         66:c5:26:2e:47:4c:02:86:54:fa:7b:7a:07:1d:c1:61:3f:7f:
         af:5c:1f:10:fd:8b:1e:ea:27:77:f5:21:3f:37:6a:5d:c2:0a:
         c6:09:58:a7:f3:af:81:aa:44:42:50:db:6b:d1:23:03:68:46:
         5e:06:70:6d:7c:2c:08:69:57:e8:00:8b:bb:ff:b0:39:12:52:
         5c:20:80:25:28:2d:1b:56:25:14:0f:2d:13:eb:50:4b:11:43:
         49:c8:2c:9a:a3:66:4a:ea:8e:b3:60:0f:ec:c7:9b:f4:4f:42:
         84:2e:8b:7f:1f:41:e6:cc:15:fa:7c:39:20:2a:bf:81:ff:d4:
         07:85:c8:45:f4:72:4d:d2:65:23:51:41:ff:2a:62:23:23:2f:
         14:76:67:81:5d:1e:8b:77:96:cb:05:e8:e5:d3:bc:37:b8:c3:
         96:21:43:00:87:12:5b:78:ff:70:58:e6:ac:1b:80:e2:f4:97:
         d6:08:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:21:28 2026 by rpki-client