Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2a64599-facc-307b-a133-2488397e5476.roa
File:                     f2a64599-facc-307b-a133-2488397e5476.roa (raw, json)
Hash identifier:          hmQOSoBa655N8bjXPs8D8vn6DIvKk2XcJQsbHMkieaQ=
Subject key identifier:   37:4E:D4:BB:B1:3C:1F:B9:B0:F3:B1:3E:9B:3D:8F:21:E0:44:70:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F90A30E0D1E9F887CBEE4E8C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2a64599-facc-307b-a133-2488397e5476.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     701
IP address blocks:        96.239.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:0e:0d:1e:9f:88:7c:be:e4:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=33c4e6a1-686c-4c80-b626-152e7ea7ee69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:2a:d5:72:12:25:45:0e:bf:61:1f:51:22:
                    96:b9:2f:27:c1:27:78:e8:ca:01:0f:c0:37:c5:b1:
                    1e:ba:c8:4a:7a:fa:a0:f2:f5:b9:41:14:5c:65:54:
                    1e:3d:c4:c1:c7:fd:90:f9:e6:4c:45:67:84:c3:9b:
                    8c:82:59:27:ad:bc:a7:5e:f0:e2:4b:a0:09:e2:69:
                    15:e2:f9:ce:4a:1e:03:ba:38:65:87:af:52:eb:7d:
                    2e:7c:8e:e3:f5:19:3d:1c:67:79:37:8a:ac:2e:19:
                    d6:28:bb:41:da:91:bc:39:1c:b0:f7:68:e3:dc:6c:
                    b5:47:58:c8:dc:61:9f:b7:4e:b1:a9:cf:53:a6:9c:
                    1e:cd:cf:e0:ec:78:7f:5c:7d:f4:f0:dc:49:2d:45:
                    71:05:a4:65:18:fe:c7:9e:e3:45:bc:bb:ac:25:bd:
                    5a:2c:07:0c:d9:78:6d:f1:c9:2e:f9:28:b7:0f:21:
                    15:0e:b7:2e:f6:5a:80:0c:a7:61:33:d7:f4:9e:fc:
                    b8:d7:2b:c1:d0:0a:41:36:e1:69:bd:b9:c6:bd:9c:
                    44:0d:77:81:d6:d2:aa:2d:0c:27:d7:6e:46:1f:15:
                    12:2b:4e:5b:68:b2:65:81:5d:88:12:78:de:5d:5a:
                    73:bf:33:c6:77:f6:e2:41:5f:ff:99:3d:50:db:27:
                    1f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4E:D4:BB:B1:3C:1F:B9:B0:F3:B1:3E:9B:3D:8F:21:E0:44:70:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2a64599-facc-307b-a133-2488397e5476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.239.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1d:c4:40:93:80:1e:4a:7b:13:b6:63:26:a3:26:c5:dd:f2:
         68:c3:87:3a:dc:fe:94:4d:0b:75:08:fb:8f:82:b9:7f:bb:e1:
         b0:ca:d0:0a:4d:ef:55:a0:e7:1d:33:09:4f:f3:b7:b3:ca:ab:
         1d:cf:7a:43:25:02:03:be:3d:89:79:fd:e6:e3:8a:0c:87:12:
         5a:13:97:d9:39:64:61:3d:e3:65:f6:87:65:b9:86:c1:fb:12:
         9d:81:a7:34:1c:61:87:a0:3a:11:b7:e2:ca:20:08:b3:a6:67:
         29:42:19:8d:14:ad:95:70:6e:ae:bb:07:a7:da:06:5e:11:40:
         9f:b4:43:8f:9a:b1:97:c9:9f:a9:8c:3f:c2:fc:ca:ad:1d:b7:
         7c:b8:bf:f9:e4:fe:41:89:2a:23:1f:04:df:b4:a1:0c:c4:fc:
         d1:44:9a:04:dd:30:42:a6:bc:cb:7d:a3:68:ab:21:09:7d:66:
         9e:37:bd:72:ff:54:10:03:20:01:aa:e7:50:97:44:d2:9d:2f:
         2e:6a:80:34:a5:28:02:9e:3e:cb:02:84:3b:79:4c:e0:cb:44:
         85:c3:83:59:c2:c3:b3:dc:28:8f:7f:ff:20:97:23:62:58:a3:
         ae:87:56:78:3d:c8:ca:08:ba:c2:85:09:01:b8:32:48:31:8d:
         df:fd:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 03:54:55 2026 by rpki-client