Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b333322c-12e3-3e1e-8b8e-0b60c401d4ad.roa
File:                     b333322c-12e3-3e1e-8b8e-0b60c401d4ad.roa (raw, json)
Hash identifier:          ZxU36PhcD0hRTRc78aMmw+ZZwkUyXMFqRzKC1lNj9P4=
Subject key identifier:   7A:B8:07:D6:A0:43:FA:CA:2F:7B:2C:2A:78:0C:3F:23:7B:F2:AA:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F89A87FC9E21F254D870427E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b333322c-12e3-3e1e-8b8e-0b60c401d4ad.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     701
IP address blocks:        209.116.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:7f:c9:e2:1f:25:4d:87:04:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=9c633797-be35-42a6-9d62-7a0092e4c851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4d:b2:bc:7f:ba:92:d9:6b:12:79:66:fd:f4:
                    37:e2:99:d2:3b:17:8b:9d:19:b2:c6:6f:78:9e:ac:
                    2f:5a:42:8c:99:b5:19:22:98:23:9a:37:4e:d7:62:
                    65:21:a8:fa:bc:66:6f:66:cc:cf:91:f6:8f:72:6c:
                    a6:40:f8:de:a4:61:d0:09:66:38:bd:9f:bb:36:2f:
                    57:12:d4:51:68:fb:fd:5a:1d:44:9c:63:c5:7e:be:
                    c2:83:56:d1:b2:6c:15:66:20:c9:25:f1:53:29:3a:
                    96:3c:ce:4e:db:89:d9:66:a9:40:43:e8:a6:a0:9d:
                    57:cb:27:85:fb:6f:31:b7:1e:01:9b:70:e6:f8:30:
                    a8:d9:67:f9:19:ed:7a:e9:0e:46:9c:9c:b1:8f:7d:
                    a1:dc:3c:06:7b:99:3e:8b:bd:fa:b1:6f:9a:89:0e:
                    9f:7b:ba:e8:da:36:61:d9:96:08:03:03:2c:00:b1:
                    71:fa:5a:03:d6:ce:09:54:91:ca:f7:50:88:ca:b6:
                    d9:15:68:86:72:b2:6c:3e:0e:48:f0:74:d6:4a:35:
                    9b:67:d0:3e:f2:54:13:67:9b:aa:8f:c1:f9:54:fb:
                    0b:83:eb:c2:90:70:47:46:2f:94:79:27:d9:48:2d:
                    6f:b9:91:e1:25:77:e7:f4:05:f9:c4:cf:d4:8a:b8:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B8:07:D6:A0:43:FA:CA:2F:7B:2C:2A:78:0C:3F:23:7B:F2:AA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b333322c-12e3-3e1e-8b8e-0b60c401d4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.116.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:6a:2a:4c:ec:4d:f9:da:6c:f5:52:c8:3e:7d:7f:e9:0f:5a:
         12:06:25:b5:6e:58:ff:17:8a:29:df:60:7f:38:28:9b:8a:ba:
         58:99:f9:87:60:b7:c0:b1:30:61:ff:36:25:ab:6a:88:df:7d:
         d1:87:5e:94:1c:f9:58:9d:41:ed:01:6d:f4:cd:71:27:a3:20:
         66:d4:34:de:7e:e8:c5:9f:a2:2c:c2:1a:76:7d:e4:cc:04:3d:
         6b:4b:8d:39:63:c7:2e:9e:a7:74:47:36:b7:a7:38:8f:61:39:
         d9:d1:22:9f:e0:c5:08:e9:f0:e8:de:66:1c:dd:d5:38:45:7a:
         15:a6:f9:29:ab:b6:c9:c0:f1:41:00:3d:cb:e8:55:0f:25:94:
         13:2d:90:9b:5b:b7:dc:dd:f8:d2:a7:8d:10:c6:ee:9e:a6:83:
         f2:35:b7:f9:d7:d6:4e:fb:dd:05:c4:95:18:a2:84:ad:c9:69:
         fb:3f:1e:19:56:28:07:42:40:85:ca:f6:b7:fa:ee:4c:3f:00:
         35:97:f1:20:65:aa:83:57:0f:4f:c4:e1:c1:cb:5c:a4:42:34:
         09:a5:ee:2e:aa:c1:5d:20:01:26:78:5b:be:0a:5e:07:9a:ec:
         41:92:c4:98:d6:a7:8b:f2:5d:d6:83:80:3e:90:94:b7:1b:09:
         7e:ab:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:57:27 2026 by rpki-client