Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7db3851e-1448-3dc2-8743-74b6c158a3ad.roa
File:                     7db3851e-1448-3dc2-8743-74b6c158a3ad.roa (raw, json)
Hash identifier:          BxGq1V35XTdD6FF0kmiKTijBZZV3l0ljQyvdUZbg91M=
Subject key identifier:   7E:3C:7B:B9:5F:1A:5F:C7:B0:86:E4:0C:F2:E5:EA:48:09:7B:B9:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A97C2D615D8FED3F9580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7db3851e-1448-3dc2-8743-74b6c158a3ad.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        152.63.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a9:7c:2d:61:5d:8f:ed:3f:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=28a4c76e-dff9-495c-82a4-4197aa8ce284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:f1:d6:0a:06:9f:5b:26:04:f5:c5:cf:aa:
                    21:cb:aa:10:02:bf:cd:24:f5:1a:35:1b:b4:8b:4c:
                    dd:c2:54:1f:d7:93:c5:21:67:52:bb:ed:b1:e9:96:
                    49:1f:e8:23:23:bc:92:27:22:61:bf:8a:3c:34:61:
                    dd:13:bb:81:cf:41:0d:da:47:cb:e4:b6:8e:28:c6:
                    24:4a:0a:d2:9c:31:01:63:78:61:b7:c9:54:b5:36:
                    36:7e:15:4b:c0:cc:14:0b:97:8c:a2:9c:d9:a1:64:
                    9a:ab:1a:33:9a:21:f2:86:76:41:44:2b:ed:4e:30:
                    4c:d1:cf:9a:db:96:3d:e8:4e:15:c1:4d:db:c8:e6:
                    3d:71:45:18:56:d7:2d:35:dd:88:21:4d:01:00:89:
                    69:f9:31:20:0d:33:3f:ed:c3:e8:88:28:4d:d8:e5:
                    2f:3c:ab:4e:ba:9c:56:ca:96:dd:ed:8b:80:58:88:
                    01:7a:60:08:99:c1:7d:a5:b5:c9:c0:63:47:6e:11:
                    5f:c9:4b:4f:9a:be:55:24:93:2e:32:4d:2a:c7:98:
                    e3:3a:6b:59:b2:38:d3:86:60:bc:a4:43:01:e0:82:
                    ec:c2:c1:4e:41:ea:e7:86:52:10:e2:2d:a0:6e:30:
                    27:7c:bb:8d:65:90:a6:88:9c:3e:3e:01:07:e5:26:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3C:7B:B9:5F:1A:5F:C7:B0:86:E4:0C:F2:E5:EA:48:09:7B:B9:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7db3851e-1448-3dc2-8743-74b6c158a3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.63.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:70:f5:ce:a9:81:fb:71:0c:b9:f7:73:1b:1a:10:36:82:1f:
         ea:8f:2d:e9:cb:2a:03:16:ef:68:12:37:89:07:24:0c:10:fb:
         77:ca:ea:0b:c5:43:ac:74:0b:bf:2d:2a:56:18:a8:9d:3e:80:
         26:59:ae:66:24:b7:67:db:4b:5b:48:b7:73:46:d9:7e:71:29:
         35:14:18:6d:5a:33:af:ec:96:da:8e:6c:eb:19:1b:b7:7e:1f:
         b8:f7:2c:f5:3f:58:2e:fc:43:56:6c:3a:1c:04:e5:36:d8:9e:
         69:ef:ff:e1:fa:06:12:52:44:7d:48:12:10:ca:e5:fe:b1:81:
         f3:bd:7a:b5:06:c5:7f:59:5e:c2:db:e4:7b:cd:14:12:b3:6f:
         10:ee:cb:ee:68:f1:3e:77:df:51:19:4b:ab:2f:e8:e7:13:7c:
         09:a3:b1:d8:3a:be:67:9a:9c:65:57:93:1e:c0:2b:0a:e3:21:
         43:2e:23:0b:ab:07:7b:b0:7f:98:5d:cc:eb:92:86:ee:03:b7:
         0a:07:03:40:2e:01:0e:bd:17:29:60:8b:da:fa:11:78:2a:68:
         1c:c3:f3:04:03:6b:4e:34:7d:72:71:b0:ce:e3:85:9f:59:a9:
         34:7e:f6:1f:d8:d9:59:88:0e:bb:68:6e:14:8e:10:87:8b:ea:
         4f:5f:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 23:21:52 2026 by rpki-client