Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8252dbe0-5a05-34bf-ab39-5e6915401c39.roa
File:                     8252dbe0-5a05-34bf-ab39-5e6915401c39.roa (raw, json)
Hash identifier:          44tyLUoj552mjW+Dl/onPRJvncvRHLtJUYODeyH6T40=
Subject key identifier:   58:77:7A:7F:07:A3:03:78:F6:46:13:8F:8C:40:54:6B:2C:82:EA:51
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB84713C305D56D0D1CE91A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8252dbe0-5a05-34bf-ab39-5e6915401c39.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     11303
IP address blocks:        199.45.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:13:c3:05:d5:6d:0d:1c:e9:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=9f635265-267c-4ef0-a69f-06215c6dc6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:00:2d:65:b6:7e:04:9f:57:3c:01:f4:2c:1b:
                    9e:11:8e:5f:e8:07:90:22:b3:98:d4:2e:32:1b:2e:
                    ac:ea:11:12:80:24:6d:d2:cf:a5:64:6d:96:69:54:
                    fd:b3:a4:b1:99:d4:ac:d4:19:f7:48:a6:f9:86:48:
                    ac:24:d5:5e:53:59:46:f1:16:ec:76:ac:0e:42:3b:
                    cc:92:47:39:5e:9f:00:54:6f:b3:fc:16:65:68:41:
                    72:bf:f3:47:cf:01:42:6c:48:7e:2a:bd:61:10:03:
                    2d:61:d7:2c:7b:a5:57:5d:b8:90:96:52:5a:f9:10:
                    7c:a9:bf:e1:b7:db:b9:b0:21:44:b8:c1:2d:3e:56:
                    8f:f1:96:3a:48:f2:c1:ed:3a:db:7b:67:f0:82:38:
                    24:73:f1:84:c0:01:5a:73:1a:47:cd:12:52:f7:ce:
                    a2:a4:f2:25:da:02:0b:f4:a0:3b:47:14:89:a9:f6:
                    c2:fd:48:5f:34:05:c5:82:87:7f:b4:d5:92:b1:3d:
                    36:f4:af:4d:4f:5e:5b:77:01:da:c6:ac:c2:fa:e4:
                    c2:7a:06:76:b5:9c:ab:a7:ff:e9:78:41:c3:84:c6:
                    11:4c:94:58:dc:21:7d:4a:5c:9f:4a:d5:6c:e1:8f:
                    1e:f1:56:68:2f:e3:83:56:7e:4e:ed:2a:70:41:11:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:77:7A:7F:07:A3:03:78:F6:46:13:8F:8C:40:54:6B:2C:82:EA:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8252dbe0-5a05-34bf-ab39-5e6915401c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:9b:79:ee:e8:ac:11:86:a6:fb:e3:f4:f6:97:cf:7a:65:4f:
         48:1d:00:83:dd:16:ad:13:bf:4d:d0:cc:24:a0:ad:90:1d:ae:
         cc:a0:7b:06:22:83:e1:94:73:f6:9c:82:9b:fe:f9:cb:13:d7:
         54:71:e7:54:9f:5f:25:00:87:4d:40:90:ff:38:55:b2:f8:bb:
         ca:d6:ea:16:6a:5a:70:90:9c:d4:3c:08:8d:6c:b3:43:79:52:
         30:83:05:86:d3:85:b1:a7:e7:aa:e4:ac:ea:87:a0:9f:39:83:
         48:d9:d6:e5:78:2d:d7:0d:5a:f3:a2:f3:2d:70:31:d3:d6:2d:
         07:96:a7:ab:12:d8:38:cc:d5:04:08:ea:0f:1a:db:2e:74:00:
         ad:fa:8f:43:a3:0c:a8:e8:93:40:00:95:de:b1:f7:31:fa:dd:
         56:cc:fe:e7:e4:81:50:f8:8c:37:5a:4a:bc:c7:83:48:ce:9c:
         14:82:06:47:ac:1c:fb:c0:16:52:1d:f1:94:a2:ff:75:0d:b0:
         fc:7f:88:fd:da:4d:1a:29:56:f6:20:24:0f:9a:83:b9:f0:01:
         1b:a0:3d:ae:dc:28:28:d6:bc:53:d0:0f:80:5f:52:7c:a5:a4:
         ec:8a:e5:a5:60:cd:1d:9c:40:55:08:75:04:fb:cb:b6:44:63:
         da:41:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:53:48 2026 by rpki-client