Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f274b6e-00c3-3c0f-a0eb-872be6eb3b2e.roa
File:                     4f274b6e-00c3-3c0f-a0eb-872be6eb3b2e.roa (raw, json)
Hash identifier:          /aHjoKnit+kUNvg+6e9y75FUAs1wstdfjDWZPke7dCc=
Subject key identifier:   DF:05:EC:5D:14:A8:66:FB:50:7E:3A:48:03:7E:15:3A:6F:7A:56:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD059FA4889168B3B3DB6780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f274b6e-00c3-3c0f-a0eb-872be6eb3b2e.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     14717
IP address blocks:        208.241.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:9f:a4:88:91:68:b3:b3:db:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=c7f39aac-35df-4dd7-bdba-bb006eba5d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:1e:18:cd:76:cd:9f:cf:0b:96:66:0d:9a:
                    ea:f0:14:86:a9:6c:7b:4d:82:4e:6f:a6:5d:2c:5e:
                    9b:e1:53:f9:8a:c7:9b:10:23:43:f6:7d:f5:e9:86:
                    9f:b7:96:9c:e4:06:9c:ff:04:a7:de:3b:db:73:f8:
                    9c:68:04:94:03:35:ff:4b:f0:ed:15:79:08:9a:b2:
                    4f:05:da:b1:54:0d:41:ef:42:f2:de:be:1c:f1:21:
                    9f:4f:2e:f8:2d:96:5f:40:88:66:e2:8a:07:3f:78:
                    07:0f:27:aa:00:8e:b5:81:0b:fe:45:0a:12:5c:a8:
                    07:ef:1d:9b:8e:b3:bd:a0:5d:40:68:80:f1:7d:16:
                    d7:82:1e:e5:fc:01:38:33:55:36:1b:32:ce:53:03:
                    6a:6a:77:3f:42:0d:40:43:74:d8:9a:75:70:1b:e9:
                    8c:a3:a3:08:1e:34:7b:87:47:46:b1:fb:0a:43:d1:
                    2e:17:d1:2e:93:fa:cc:48:97:21:e2:70:bc:d3:be:
                    d5:5e:6e:b4:88:fb:85:ec:db:96:cb:b8:72:ee:1e:
                    da:33:6d:49:36:e9:1c:19:b4:48:c8:73:d3:aa:2c:
                    ff:b5:be:79:2c:59:e7:04:94:c0:d7:80:13:1c:ac:
                    81:12:58:20:67:0f:e9:20:d6:9f:57:c9:eb:d1:b2:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:05:EC:5D:14:A8:66:FB:50:7E:3A:48:03:7E:15:3A:6F:7A:56:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f274b6e-00c3-3c0f-a0eb-872be6eb3b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.241.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:78:bc:25:d6:9c:3e:94:8b:22:31:08:d3:95:94:91:81:2e:
         76:bf:90:f9:21:be:d5:74:32:6c:c4:64:ac:7b:30:f6:66:69:
         78:0b:35:e2:3a:28:20:39:01:30:b5:00:bd:7b:d4:11:e2:ab:
         c2:80:35:ef:9a:dc:9e:17:74:2f:c4:06:23:ba:e8:80:36:08:
         49:3a:11:1f:85:99:cd:ae:fc:18:d9:0b:be:14:40:6c:31:46:
         d9:c0:76:fb:05:77:a4:d8:8d:7d:67:f5:ad:28:b5:db:8f:4a:
         7e:6d:b9:bb:f2:94:c0:53:40:bc:2c:a3:d8:87:93:ef:1c:8e:
         bd:ac:d8:76:af:b1:a7:76:0c:d5:84:5a:ba:74:4a:5b:94:71:
         96:ab:27:ad:04:d0:6b:c9:57:8e:33:9c:b6:a0:49:4a:22:38:
         be:d7:e9:04:30:0b:79:db:2d:a2:ea:07:5e:c9:aa:18:b9:f3:
         e6:a6:d9:e2:2a:eb:2d:0e:21:5c:c3:a3:91:85:b2:26:9a:94:
         49:3f:b7:7b:0d:7b:6e:fe:23:44:79:61:98:25:2f:9d:3b:9d:
         fa:49:5e:3b:e5:4c:3f:72:8d:69:49:e9:a4:c1:15:6a:e5:03:
         ec:ca:43:32:95:f0:57:24:84:1e:f4:a6:e1:fc:2f:6c:72:6b:
         eb:62:93:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:13 2026 by rpki-client