Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa
File:                     aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa (raw, json)
Hash identifier:          1AkeEGjVagvNQYqSMfN0YX67i3c3VVahu0VEwN6hkwQ=
Subject key identifier:   5A:7C:3E:D9:18:6C:FD:CB:27:9C:DD:32:EB:BC:E6:63:85:FD:02:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A3C1EF2C450F23102800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        173.59.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a3:c1:ef:2c:45:0f:23:10:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=67b77789-3e6e-4673-9966-03b4948646b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:62:ff:68:db:9a:56:19:b5:2a:38:69:3d:
                    d1:9c:5b:41:42:aa:34:b8:74:75:be:8d:85:ce:31:
                    a4:58:56:6c:f0:f2:0c:cb:26:a3:35:ee:5e:d8:e9:
                    de:1d:e6:ae:33:3f:68:fb:af:5e:99:78:e8:e4:e7:
                    76:26:b6:58:72:56:24:dc:50:d6:28:c9:83:8d:23:
                    20:2a:b3:01:90:2f:15:b3:7c:51:60:28:cc:5b:f8:
                    50:79:b3:9a:c1:66:5c:00:c9:8e:37:e3:df:ee:d2:
                    aa:1e:fc:1c:2e:09:d4:69:48:55:47:de:5e:7f:a0:
                    46:c0:c2:00:be:67:6f:3c:d7:f0:ff:ae:7f:62:e7:
                    d5:35:93:f0:68:d1:9a:d0:10:e0:3d:4f:e7:63:dc:
                    8a:c3:77:78:e4:b8:67:af:bb:ae:d1:95:77:da:b1:
                    aa:0c:95:6f:64:d9:55:c4:71:be:e4:71:a7:da:78:
                    8e:99:34:d7:ba:b9:d2:31:62:22:ba:9c:de:0a:cb:
                    e2:a0:27:80:91:ec:06:0b:41:e6:c3:67:50:22:95:
                    f4:8d:5b:24:5b:9d:00:8c:36:1c:29:8d:d2:f8:30:
                    96:09:41:da:bb:b8:56:12:1d:84:61:91:74:fc:69:
                    13:28:af:b3:88:e5:f8:65:9b:9d:ca:01:dc:52:54:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:3E:D9:18:6C:FD:CB:27:9C:DD:32:EB:BC:E6:63:85:FD:02:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.59.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:10:ed:77:a0:21:f4:ff:56:22:3d:18:90:56:35:20:dd:
         e3:ff:29:6c:cd:76:4f:49:28:1e:02:14:5b:85:e1:d6:7b:58:
         28:0e:1f:42:91:05:5c:c0:ca:df:e2:46:6b:c5:1c:90:66:cb:
         61:f7:9b:3a:09:ee:f6:84:06:c2:88:0f:53:f8:aa:ca:b3:31:
         e3:ff:8f:77:ca:bf:b8:83:2b:fa:bd:73:b7:2f:78:37:1b:45:
         7c:d3:31:08:67:d4:5c:6c:ce:52:5f:19:d8:17:11:29:21:df:
         e5:29:a7:9f:de:05:35:df:24:cc:4d:10:15:6a:7b:85:f0:cb:
         3b:0b:87:cc:bd:5a:cb:7b:1a:11:de:58:ea:81:30:55:d0:e5:
         cd:95:bb:47:5f:aa:b0:1e:61:44:38:4b:b1:8e:9b:39:b7:9a:
         89:11:db:46:76:5a:24:eb:91:a0:ed:f2:82:c8:a2:5d:e4:e0:
         16:cb:d0:6c:b5:3b:ac:57:69:a5:e7:20:76:e1:08:46:8c:c8:
         07:71:50:37:a2:d0:79:40:75:c1:65:2b:75:06:14:66:ee:70:
         bd:8d:fb:48:15:07:02:f8:64:8d:80:7d:84:c9:52:fc:27:58:
         5a:c7:a9:5d:04:3f:6f:37:37:8a:e4:ca:1a:9a:bf:ae:c0:d2:
         ba:dc:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:38:47 2026 by rpki-client