Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47359ca7-3dd4-33e3-9283-890d4f71649e.roa
File:                     47359ca7-3dd4-33e3-9283-890d4f71649e.roa (raw, json)
Hash identifier:          fa5TzKlVMcf6CdBCBFjLdSk2LEakWdkR/ux5E0fjADk=
Subject key identifier:   44:A3:4F:38:10:B2:31:EA:D2:D0:4F:93:18:42:81:5A:93:45:1A:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E54B4B321648ED55F643D7530
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47359ca7-3dd4-33e3-9283-890d4f71649e.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        64.222.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:b3:21:64:8e:d5:5f:64:3d:75:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=cf1c1db5-6299-4acc-95ef-ad50ea7894ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:5e:f9:97:98:05:4c:5a:1c:83:72:b9:ea:
                    d0:66:ab:d4:14:cb:b7:ec:93:92:c8:51:f1:b1:06:
                    fb:34:31:c2:f0:73:93:43:92:3e:2c:0b:a1:44:fe:
                    c1:a7:62:b1:e6:56:25:03:ab:b2:05:d5:53:1e:a6:
                    41:ef:9e:0c:70:f4:9f:9f:2b:d0:ff:f2:3b:c6:7a:
                    51:af:cf:cb:51:65:f8:58:af:5f:43:5d:90:1a:12:
                    a8:08:55:42:1a:a0:ce:7a:44:6d:6b:1e:05:60:8e:
                    ec:d3:64:40:b7:2b:b1:70:be:3e:08:a9:ae:ae:02:
                    51:f9:3f:73:83:06:7b:b6:5d:95:8e:ed:49:be:79:
                    38:57:bf:b7:a4:5b:37:ae:3d:af:e6:0c:bb:6c:43:
                    4e:30:9d:04:b7:28:02:0f:d7:94:18:4b:60:2a:ea:
                    fa:e7:54:0e:4c:cc:ab:8a:06:ee:42:cc:ba:e7:ee:
                    1f:00:41:62:00:29:09:34:4a:4d:27:4f:6a:88:4d:
                    de:47:38:d8:5b:67:51:17:c3:37:ab:ac:e6:c2:9f:
                    6d:8e:59:fa:ea:4c:d4:f0:b1:16:1b:f6:94:f3:f2:
                    61:ad:8a:2d:65:ad:50:c1:d0:23:d1:ce:f7:7e:cb:
                    d6:f7:27:b2:a7:82:a3:f9:10:3e:d0:4e:56:5c:70:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A3:4F:38:10:B2:31:EA:D2:D0:4F:93:18:42:81:5A:93:45:1A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47359ca7-3dd4-33e3-9283-890d4f71649e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.222.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ea:2d:88:a2:fb:4a:17:8e:dc:7e:c0:07:1b:e3:f2:09:6d:
         c1:37:f0:42:ef:10:82:62:d5:d4:e9:84:bb:73:50:a7:78:f3:
         1d:96:2e:4d:4f:6f:e3:38:9f:79:51:dc:9f:1f:a6:e9:32:4e:
         43:76:1e:05:88:85:c6:24:08:29:8a:d9:c3:22:33:c0:47:e9:
         8d:b2:20:57:43:e9:5c:2f:27:fa:c4:ed:a5:a7:3c:96:31:0e:
         76:4c:b3:0d:dd:af:0d:6d:7e:7e:96:65:62:d7:c8:f2:c2:d9:
         8d:98:e4:0a:fe:7d:9d:e7:2b:27:48:f9:d4:ed:fc:db:70:6a:
         32:a6:63:48:49:86:74:e8:de:d2:ec:b9:dc:5f:62:40:de:4f:
         ed:77:da:32:3f:d7:43:f9:a1:9e:bb:73:d9:42:f3:a7:43:9b:
         a7:9a:c0:fb:99:27:cf:77:8d:2d:f7:c5:85:ce:f2:d8:d0:cf:
         fa:dd:60:21:4d:3d:c4:3f:f8:0f:37:b0:7a:87:c4:79:f0:5f:
         e7:e4:c7:39:77:a2:89:70:46:a8:c0:01:3d:10:08:b9:66:d6:
         a0:4a:0e:2e:fa:06:89:06:01:a1:d1:00:6e:a6:99:da:75:bc:
         a0:2d:b6:6a:bd:b1:51:dc:b1:50:e9:54:3c:6a:3d:60:99:6f:
         94:3c:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:07 2026 by rpki-client