Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1811fbee-e156-3286-835d-c0634a78224a.roa
File:                     1811fbee-e156-3286-835d-c0634a78224a.roa (raw, json)
Hash identifier:          BBstAnE1UEG/EBpEixOZnURZiL+1CxaNcHwVrhzrGXU=
Subject key identifier:   78:24:CD:29:50:9B:56:C7:D6:28:CB:98:5A:41:9C:C4:A6:73:70:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E54B4CF3CB4BB3F3E4C69DF40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1811fbee-e156-3286-835d-c0634a78224a.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        96.247.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:cf:3c:b4:bb:3f:3e:4c:69:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=44ed3834-987c-4cb3-bcd4-76c68cf0de4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:7f:03:55:3f:0d:6a:1c:bc:09:aa:b8:81:
                    77:c2:df:5a:51:f3:9b:90:60:a4:5e:a2:8e:cd:8e:
                    85:ed:db:eb:86:f9:13:e8:c8:73:c6:db:f2:18:26:
                    1c:b0:7f:88:51:00:35:41:80:b4:d4:63:e8:5d:dd:
                    9d:3d:1c:eb:74:9a:c2:88:b2:4e:40:37:9e:c7:d1:
                    d4:d4:76:b7:4c:78:80:8a:cc:83:d4:6b:ec:0d:90:
                    c7:3f:1b:80:eb:55:d3:ac:f3:60:49:ae:1f:5a:e1:
                    36:6c:ec:23:f9:11:91:a4:49:58:b6:f6:c5:e5:c5:
                    c3:cc:81:f4:4c:e4:a0:fc:c1:bf:f7:c6:dc:74:ef:
                    49:36:c0:fb:23:93:51:48:48:ab:c5:78:11:13:ba:
                    85:b9:3b:cd:47:d7:7b:c3:1e:aa:4c:77:72:65:55:
                    dc:f1:8f:7e:d2:ee:b9:4e:27:48:2e:9c:8d:54:45:
                    54:cd:17:fb:b9:b5:8a:5b:ad:25:05:81:22:5a:e2:
                    ec:4f:6c:3f:fe:e7:b4:d2:6c:59:7d:3a:75:c0:df:
                    5a:1b:38:5e:79:4d:8f:22:c2:6d:73:c2:18:25:a9:
                    a3:7d:20:c3:9d:2f:54:ac:7f:e7:b0:58:cf:52:09:
                    c0:8f:59:87:8b:f0:fa:98:0f:81:54:8f:91:70:93:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:24:CD:29:50:9B:56:C7:D6:28:CB:98:5A:41:9C:C4:A6:73:70:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1811fbee-e156-3286-835d-c0634a78224a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.247.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:27:76:05:95:2f:81:cb:d3:6d:d2:80:d4:2d:78:f3:74:
         78:cf:ae:4c:3c:32:ab:b7:74:6d:b4:19:3f:83:66:ee:08:f5:
         b3:13:e0:38:bd:a1:4a:8e:ee:d1:ae:8f:19:a6:5b:3f:cb:4b:
         78:6b:31:d6:b1:83:e2:66:95:09:f5:8a:61:bd:87:d0:0f:e9:
         6a:db:8e:64:7b:80:2b:93:b5:15:c0:e7:6f:2b:9e:97:d0:44:
         33:9f:e7:8e:28:03:6c:c5:b8:8b:00:9b:2b:d1:41:6e:b1:ed:
         21:19:06:32:ea:71:b5:57:81:83:1d:4e:c9:94:b8:b8:37:37:
         68:a2:8e:77:41:04:75:4c:06:db:cc:67:29:e9:94:8c:e7:ba:
         ee:15:ba:57:96:00:98:70:20:89:45:ae:52:5e:58:d5:0a:83:
         3c:ce:dd:e4:87:21:95:42:4b:ab:fa:80:7f:d1:23:41:e8:f6:
         9d:4a:e3:53:19:7b:7e:29:da:cf:5f:5a:26:1e:e3:b9:a0:88:
         0a:c9:b2:16:ed:05:46:35:53:99:cd:9e:2a:f2:81:10:e3:b6:
         8e:7b:2b:87:f5:13:cd:9d:5f:6b:75:2b:74:99:c3:7a:b9:73:
         39:cf:a1:48:5c:3e:85:21:1a:c4:1c:42:9f:16:f0:9c:1c:ea:
         45:79:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:32 2026 by rpki-client