Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbcbd0c4-366e-3ec4-bbee-a92b39be924f.roa
File:                     fbcbd0c4-366e-3ec4-bbee-a92b39be924f.roa (raw, json)
Hash identifier:          kYV853ULaQwGnOGAe+C+cesLbThrq6/F0OZnTDQ4vBY=
Subject key identifier:   89:06:9D:DF:6A:AD:18:5A:C1:AB:A9:C4:28:84:73:8E:25:3C:72:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A9D4F95ACFD82F7033160
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbcbd0c4-366e-3ec4-bbee-a92b39be924f.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        151.196.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:9d:4f:95:ac:fd:82:f7:03:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=c8878f5a-c27e-4582-9e78-5069a1279baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:99:e4:80:03:15:b3:af:73:3e:43:b8:8e:
                    64:20:98:39:60:eb:2c:ac:c5:97:5d:4e:de:79:5b:
                    13:41:6f:60:01:a8:0f:f0:e2:82:0f:15:8e:93:7e:
                    70:f3:c8:87:c3:82:12:5f:6d:b3:88:63:63:aa:68:
                    cb:73:94:d3:5b:71:ca:20:59:d1:64:b9:09:a8:18:
                    0e:f3:27:d5:35:95:3e:f6:1b:8f:cf:15:90:16:0e:
                    6b:5a:c2:67:82:13:03:f1:8e:d7:e6:ad:3f:07:7b:
                    97:46:13:02:86:9a:a2:e1:d8:31:60:f9:14:b6:29:
                    3b:6c:1d:84:ae:0e:90:66:15:ac:9f:46:a6:9b:de:
                    fe:5e:70:dc:a1:ac:a7:31:3a:51:9c:89:e3:83:0b:
                    08:d4:37:c0:f0:df:a7:96:2f:7d:bf:c0:a0:39:1f:
                    c8:10:b8:00:ac:e1:c4:6d:19:2c:af:4d:94:02:7b:
                    c6:6a:86:fd:99:2a:af:ca:33:f2:3a:f8:8e:58:38:
                    d5:04:bf:2e:99:69:46:3e:15:4f:bf:b3:7e:4b:69:
                    df:87:c0:88:f1:aa:b0:59:bc:70:42:66:c7:b7:58:
                    8d:a1:b6:56:3e:36:d9:87:61:fd:f3:3d:18:8d:44:
                    9e:be:f6:33:c2:c7:42:71:e2:a7:7a:a8:fc:68:e9:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:06:9D:DF:6A:AD:18:5A:C1:AB:A9:C4:28:84:73:8E:25:3C:72:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbcbd0c4-366e-3ec4-bbee-a92b39be924f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:95:38:69:fb:15:cb:39:c3:67:1b:ab:0a:1e:5d:ef:ca:0b:
         6f:08:52:21:78:75:87:d7:24:7a:f2:c0:33:15:af:76:99:e1:
         0b:02:5a:33:95:84:14:0b:0a:de:c2:07:0f:30:d0:c1:80:22:
         4e:1c:4e:c8:84:bf:88:6f:13:31:d6:87:7e:15:69:85:38:2d:
         2e:2c:28:fe:02:2f:71:fe:c5:28:ed:73:d2:20:23:1f:7d:6c:
         23:f2:69:25:96:78:37:2a:fa:75:1c:f4:be:f4:e7:8d:a7:57:
         bb:3e:bf:62:0e:a5:aa:ae:ca:42:1b:88:50:02:86:95:73:65:
         42:6d:f0:b4:51:57:3d:c8:14:c2:cc:b6:df:ca:4c:98:c6:58:
         9e:7a:25:db:29:ce:40:d4:a7:17:79:33:de:09:2f:aa:1a:04:
         bf:f5:79:e8:64:07:55:4e:a6:21:9b:36:26:bd:97:02:0f:7a:
         3c:14:3b:9a:57:2b:d8:56:88:1b:61:8a:ac:53:69:17:1e:42:
         fd:c4:e7:15:e5:69:c2:44:7d:77:db:c8:c8:1a:2a:90:21:44:
         d2:ce:28:62:ae:28:99:61:ed:7e:eb:94:3d:9a:0c:bf:99:19:
         e3:66:77:f7:33:85:8a:6f:4e:b3:ee:c8:a9:0c:86:4c:53:53:
         9b:c3:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:52:54 2026 by rpki-client