Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8603f6cc-2f01-380f-b9a7-5e1bd4963b00.roa
File:                     8603f6cc-2f01-380f-b9a7-5e1bd4963b00.roa (raw, json)
Hash identifier:          4CzOewYum9ZsosW0ikZe1DdjeXqFIFUDPW8pzrl1Av4=
Subject key identifier:   42:7A:63:5A:D2:1F:74:91:81:9A:B2:B0:EC:81:9A:F1:C2:0C:5E:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCC47796A1D0B9F5B93680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8603f6cc-2f01-380f-b9a7-5e1bd4963b00.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     701
IP address blocks:        64.1.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:c4:77:96:a1:d0:b9:f5:b9:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=0686e8ca-654e-410a-88ae-971e1b85e991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:35:bb:3f:e5:e3:b7:1c:21:8e:a7:cd:71:2e:
                    88:42:ca:58:18:99:6a:38:2e:4e:ce:e4:8e:04:05:
                    61:62:b2:16:d8:2d:52:b8:28:f2:2c:53:06:7f:d4:
                    af:cb:19:85:28:01:9b:05:9d:a4:09:6c:29:c4:e0:
                    16:09:56:81:6a:c4:67:0b:a4:5c:3d:c8:0e:cf:00:
                    ab:fe:5d:40:62:da:0d:c4:cb:4d:7a:ec:8c:19:f6:
                    94:47:6d:65:6f:c0:a2:9d:01:11:33:68:87:21:e0:
                    75:7e:ad:f6:3b:36:9d:ef:7c:00:0e:82:2b:52:f0:
                    cf:73:cc:3b:39:b7:8a:e2:89:cf:69:81:e7:cd:48:
                    53:0b:eb:00:e9:32:2e:68:83:66:99:76:ed:78:38:
                    64:ec:a2:a3:3b:7a:2a:95:87:43:ae:25:15:8d:c5:
                    fe:19:9e:1c:e8:ea:73:ff:ee:e7:49:85:2b:98:2c:
                    b0:5f:35:fa:3d:25:a9:98:bd:f0:6d:6f:b7:5b:cb:
                    fd:3d:49:82:09:1a:fe:67:a3:ba:1c:ad:a1:6d:e2:
                    2b:dc:94:fd:16:06:6d:a2:30:9c:56:0d:a0:55:3c:
                    e6:ba:a8:c8:07:e5:cc:fc:89:7f:e5:c6:72:88:b8:
                    85:b9:2b:26:e2:cf:c7:31:cd:a3:71:d2:ad:3a:10:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7A:63:5A:D2:1F:74:91:81:9A:B2:B0:EC:81:9A:F1:C2:0C:5E:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8603f6cc-2f01-380f-b9a7-5e1bd4963b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.1.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:00:bf:00:5c:5e:47:21:4a:a2:0d:2a:f2:49:a9:25:54:
         d6:7b:af:5f:8f:b3:48:76:66:6f:15:ba:f6:d3:1f:39:9c:2c:
         09:09:11:7d:88:21:15:78:e4:f3:e2:b7:7e:fe:03:4a:43:1d:
         8d:f1:a7:8a:32:db:84:a3:59:76:2b:a7:ad:08:ca:03:5f:de:
         7f:3a:93:0f:32:1c:5c:32:6e:2f:0c:98:c7:b1:7c:46:7f:56:
         ad:49:6b:7c:08:45:a1:ff:5a:33:dd:84:59:5f:55:a2:36:5b:
         89:49:23:c7:7e:22:bf:04:a1:c2:71:b6:27:08:a2:20:63:5e:
         b5:18:34:68:de:db:6e:0c:44:6e:ff:bc:05:c8:b7:75:21:9f:
         85:b3:1e:9d:29:49:63:38:34:14:34:32:e1:60:42:ac:bb:53:
         e3:53:29:6c:98:25:7b:ee:69:f2:9b:24:4b:cc:13:3a:18:8f:
         66:9f:29:8b:3b:e5:b9:51:30:f0:a7:6e:ed:a1:14:7e:67:5a:
         09:2c:58:f7:30:f4:8b:27:23:04:1f:ee:26:08:53:ba:06:ee:
         e7:58:a5:fa:f4:6b:7c:fc:28:ec:6d:54:85:2e:c9:ef:67:a1:
         cd:b7:ae:cb:0d:79:d4:b1:55:e0:db:23:e7:55:57:8c:03:47:
         91:26:54:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMR3lqHQufW5NoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
MDY4NmU4Y2EtNjU0ZS00MTBhLTg4YWUtOTcxZTFiODVlOTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzW7P+XjtxwhjqfNcS6IQspYGJlqOC5OzuSO
BAVhYrIW2C1SuCjyLFMGf9SvyxmFKAGbBZ2kCWwpxOAWCVaBasRnC6RcPcgOzwCr
/l1AYtoNxMtNeuyMGfaUR21lb8CinQERM2iHIeB1fq32Ozad73wADoIrUvDPc8w7
ObeK4onPaYHnzUhTC+sA6TIuaINmmXbteDhk7KKjO3oqlYdDriUVjcX+GZ4c6Opz
/+7nSYUrmCywXzX6PSWpmL3wbW+3W8v9PUmCCRr+Z6O6HK2hbeIr3JT9FgZtojCc
Vg2gVTzmuqjIB+XM/Il/5cZyiLiFuSsm4s/HMc2jcdKtOhC29wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJ6Y1rSH3SRgZqysOyBmvHCDF6IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODYwM2Y2Y2MtMmYwMS0z
ODBmLWI5YTctNWUxYmQ0OTYzYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAEYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrKAL8AXF5HIUqiDSrySaklVNZ7r1+Ps0h2Zm8VuvbTHzmcLAkJEX2I
IRV45PPit37+A0pDHY3xp4oy24SjWXYrp60IygNf3n86kw8yHFwybi8MmMexfEZ/
Vq1Ja3wIRaH/WjPdhFlfVaI2W4lJI8d+Ir8EocJxticIoiBjXrUYNGje224MRG7/
vAXIt3Uhn4WzHp0pSWM4NBQ0MuFgQqy7U+NTKWyYJXvuafKbJEvMEzoYj2afKYs7
5blRMPCnbu2hFH5nWgksWPcw9IsnIwQf7iYIU7oG7udYpfr0a3z8KOxtVIUuye9n
oc23rssNedSxVeDbI+dVV4wDR5EmVMw=
-----END CERTIFICATE-----
Generated at Sun Sep 13 18:11:13 2026 by rpki-client