Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/b0735067-3eda-3583-9857-b24e2ee796bc.roa
File:                     b0735067-3eda-3583-9857-b24e2ee796bc.roa (raw, json)
Hash identifier:          dNk/0RW/X81wg/WnfO6FE6JfbPSxOrOFghRULdVo8Wo=
Subject key identifier:   23:02:48:82:03:6A:B2:4A:7B:5D:2F:91:2B:13:BF:77:80:21:EA:93
Certificate issuer:       /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Certificate serial:       010D0C9F4328584D4A8FA34AE91521F729550C80
Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/b0735067-3eda-3583-9857-b24e2ee796bc.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     40948
IP address blocks:        173.249.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:a3:4a:e9:15:21:f7:29:55:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=719368d8-615c-422f-8654-bea014594cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6e:29:c8:6f:7d:05:cb:e5:82:8e:65:85:19:
                    14:97:ad:15:10:0e:3b:10:31:43:89:0c:64:06:e6:
                    dc:af:92:1b:cb:b9:4c:a0:6d:b0:fd:44:f6:f5:f8:
                    36:a4:8a:f4:fc:7e:3c:07:d7:9f:3f:06:52:e4:69:
                    01:e4:08:2f:82:58:e6:c2:6b:d4:fe:f2:a4:a0:ff:
                    33:a6:8b:49:5d:fe:46:d9:6c:30:59:fe:51:7f:e8:
                    df:ff:68:76:5c:4a:c9:40:e2:03:5a:a6:76:e7:a6:
                    58:e7:ba:9d:18:14:bb:b9:e3:ba:9e:05:d4:0e:ef:
                    ff:9b:14:34:55:42:0d:70:d1:f9:42:30:1a:bf:53:
                    39:c5:ae:0d:fe:cc:2e:d6:1f:a4:74:5c:29:e8:96:
                    60:de:a6:5a:b8:6f:18:cb:00:e6:24:56:a6:1f:82:
                    fd:fe:8e:71:61:fb:42:60:4e:1e:97:23:f7:10:97:
                    a2:d2:4b:de:e3:48:a7:12:aa:18:14:a1:b7:d6:6d:
                    c0:dd:19:cb:15:e9:97:c9:7e:6b:c0:0a:95:b3:bf:
                    34:92:4f:31:3e:be:ad:93:58:51:89:a0:d6:4e:63:
                    40:1f:a8:2f:c2:1f:60:ed:17:c1:4c:f8:6f:cd:80:
                    2d:ed:49:ec:d9:47:ff:86:fb:2d:4e:df:78:22:a5:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:02:48:82:03:6A:B2:4A:7B:5D:2F:91:2B:13:BF:77:80:21:EA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/b0735067-3eda-3583-9857-b24e2ee796bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl

            X509v3 Authority Key Identifier:
                keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c8:38:77:99:40:b4:f6:f9:02:86:d2:97:1a:ad:f7:a3:8e:
         2d:e6:6a:50:d5:04:30:48:08:b2:02:92:2b:f6:0c:16:b2:60:
         b9:07:d3:38:ae:9c:ba:bb:25:8d:e7:20:bb:3b:fc:1d:a5:93:
         89:ac:24:a0:64:24:e0:39:c1:ba:cb:31:d2:4e:fb:e8:51:6b:
         8f:6a:ca:60:7e:4b:26:97:f4:72:87:94:b5:4b:75:24:76:25:
         6b:80:fb:0a:77:64:83:fb:35:8d:fa:35:76:63:de:75:96:c5:
         b5:bf:0f:29:5f:15:c5:da:2f:b5:7b:ae:9c:05:27:d2:8e:6e:
         16:d1:61:1a:af:cd:69:b5:c9:89:64:24:d2:e1:7b:5a:aa:d8:
         33:49:43:42:90:d5:bc:59:cb:c2:1a:db:1d:91:c9:94:e2:ae:
         1e:d1:3f:2b:2a:df:10:9f:2d:43:5c:db:4d:da:5a:b4:ad:6b:
         86:34:ae:fb:19:f2:46:58:27:63:ed:02:ca:48:09:79:89:b3:
         e3:f4:0d:a7:51:0e:4f:70:d8:7b:8c:28:e5:57:d1:88:0f:a0:
         f4:5a:37:54:b3:94:29:7b:6b:aa:6f:4e:5f:f3:5d:4c:da:99:
         2c:e7:19:07:34:c7:7c:8e:a2:bb:9b:1d:a4:a5:1a:9c:4d:5b:
         1a:45:fa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:04:59 2026 by rpki-client