Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da62dfb3-01bf-36e8-ba61-c34bdfe92a43.roa
File:                     da62dfb3-01bf-36e8-ba61-c34bdfe92a43.roa (raw, json)
Hash identifier:          f2kFBgxVbhxek2Vpf1ObdIc28FMvvhg5YgXqOp7jPoQ=
Subject key identifier:   5C:69:12:8D:66:4A:69:4D:6A:20:FA:CF:F2:18:47:55:74:C1:96:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DEB15FDD005F5C080360BCEF0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da62dfb3-01bf-36e8-ba61-c34bdfe92a43.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     17119
IP address blocks:        208.249.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:fd:d0:05:f5:c0:80:36:0b:ce:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=7878d2c4-469b-4b17-b1bb-7b5c33f58eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:90:9a:05:7a:81:04:c6:9d:4d:a9:78:cc:
                    bb:b8:63:7d:f4:ee:df:95:eb:c5:92:d7:0b:2b:cb:
                    e9:d0:27:d7:72:cd:35:1a:1c:bb:02:0c:97:5f:69:
                    b5:0e:65:e3:53:5b:01:84:79:4d:af:51:e7:4c:91:
                    a2:28:30:4f:3f:72:e4:57:35:99:5d:c6:3f:c3:0c:
                    a1:d0:a8:c9:c9:30:fb:b0:ba:a2:a1:2b:7f:32:d5:
                    ac:af:39:ad:48:a3:7e:7e:8b:c9:68:90:4f:e3:92:
                    31:e5:ca:98:0a:41:50:a0:9d:c0:0a:ba:1b:87:4c:
                    a2:35:0f:0c:92:be:f8:46:a9:8d:99:70:7e:2e:b7:
                    ce:08:79:7f:6a:06:17:02:77:f4:ed:f8:d0:76:d3:
                    aa:27:18:34:c0:40:96:71:7d:18:b6:95:63:d3:65:
                    2b:83:db:59:d5:d0:b3:a7:94:1c:98:da:db:c9:c3:
                    c9:a7:20:7f:d0:8f:25:7c:58:ab:01:30:23:05:33:
                    8d:c6:dd:54:5b:20:9b:9f:73:ae:34:ac:e1:80:f5:
                    33:24:16:01:de:3c:be:67:c1:6d:1c:70:25:2d:1f:
                    7b:13:c8:be:87:6f:e3:d3:da:2b:94:19:d4:1c:5d:
                    bf:a4:3f:77:3b:31:73:37:cd:f3:b8:c2:87:ea:7f:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:69:12:8D:66:4A:69:4D:6A:20:FA:CF:F2:18:47:55:74:C1:96:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da62dfb3-01bf-36e8-ba61-c34bdfe92a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.249.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:63:15:f4:45:8e:99:0b:0a:ea:62:b0:6e:5c:c7:d3:ac:47:
         c5:66:2b:a7:56:65:b7:5b:69:ba:37:43:84:ad:eb:fb:62:48:
         54:de:2d:4a:e0:1e:17:84:e2:cd:89:f8:a9:e7:91:d9:9b:fc:
         81:be:e3:8c:9b:97:63:8b:56:80:58:9b:d1:78:f2:93:69:28:
         b7:94:78:4b:90:e7:3d:d1:7b:87:f2:c4:a5:55:bf:c3:3d:9f:
         de:90:6f:cf:76:d7:7e:ae:0c:44:aa:e4:2d:47:99:08:e5:03:
         cf:67:cb:32:52:e7:b4:e2:24:7f:59:bd:a4:a8:a5:67:f2:87:
         b2:fa:ad:9d:20:9d:43:3a:c7:e1:b1:b8:b0:dd:09:3d:d4:1d:
         c5:b7:7b:d5:b7:e4:9a:1d:50:c6:c7:71:73:a8:1a:fa:60:46:
         d4:ff:59:cd:8a:39:10:d1:a3:8e:b9:75:57:33:d8:ae:c3:91:
         c5:fb:02:7d:a8:61:24:8b:ea:47:77:c6:b0:11:7c:40:7b:7a:
         ec:31:80:49:f6:5b:a1:60:45:74:d4:c6:54:b7:97:00:20:2a:
         28:ba:93:6c:47:37:90:40:f5:7c:ec:14:e9:38:41:fa:68:0f:
         a5:e6:18:94:14:bb:77:98:51:06:dc:03:b0:ca:17:f0:99:dc:
         69:0b:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 21:53:59 2026 by rpki-client