Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5726073b-00d1-37a6-8d96-29d62635c31e.roa
File:                     5726073b-00d1-37a6-8d96-29d62635c31e.roa (raw, json)
Hash identifier:          0HriNOOZ7UIPUV9CTfJSPCLVZyWVDNjLbdgxZOR/QSM=
Subject key identifier:   1E:A9:4C:83:84:78:82:18:59:0F:F0:B7:1E:50:40:A5:BA:56:7A:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05CC901E3088AA4CFC4280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5726073b-00d1-37a6-8d96-29d62635c31e.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        68.238.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:cc:90:1e:30:88:aa:4c:fc:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=ae57a8a4-f44e-4550-8a54-3ad6f5b1b707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:67:01:31:6a:d6:7f:4e:76:ba:41:36:88:b0:
                    ab:d9:91:23:9a:fe:18:7e:0b:64:fb:b3:9d:d5:07:
                    bc:49:67:15:03:c5:0b:08:65:63:51:8c:32:fa:88:
                    02:8a:ec:a3:20:b0:50:be:31:b4:c5:09:25:e1:a4:
                    96:e6:6a:73:80:52:d1:8b:cd:ad:f0:17:41:a4:86:
                    af:fa:c6:a5:55:bd:d7:d1:c6:27:63:22:5b:8f:1c:
                    e1:38:a6:0b:f1:2c:86:9e:a0:a3:04:ad:55:94:a3:
                    c8:b7:6b:58:6f:01:ec:8c:2f:56:af:64:0c:78:66:
                    24:6f:21:27:bd:2f:2e:ab:b7:94:b5:e3:55:42:62:
                    ff:f0:f8:bf:3f:94:2e:35:fb:b0:e1:4a:d2:cf:49:
                    45:87:5a:ae:c3:ad:7b:8a:e2:c2:86:72:64:2f:10:
                    ca:a1:cf:c0:9e:e5:1f:a1:84:18:c7:34:50:2f:bd:
                    0e:3e:3d:a8:52:e2:24:db:ab:dc:d6:6c:88:06:d7:
                    ec:b9:3a:23:5e:ce:16:d3:4e:55:b3:24:b3:a1:2d:
                    a8:93:91:fd:d9:e9:ff:ba:33:1c:10:41:fb:ea:05:
                    4f:c7:f9:b7:dc:eb:87:26:b2:2a:97:a1:4f:bc:db:
                    9d:78:ee:16:17:2e:55:e0:8c:32:7f:3a:6c:f7:21:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A9:4C:83:84:78:82:18:59:0F:F0:B7:1E:50:40:A5:BA:56:7A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5726073b-00d1-37a6-8d96-29d62635c31e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.238.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0f:56:2f:99:b6:19:1e:d9:61:23:d9:bf:46:12:7e:3e:01:
         47:7b:8c:26:c1:83:b3:f9:70:de:d7:ae:c6:13:d0:a1:dd:d2:
         08:fd:3e:d1:71:c9:ad:d1:9f:65:69:a0:58:ca:4b:a9:48:a0:
         c1:84:a3:0a:10:81:19:d8:96:f2:5a:4e:a1:22:fb:76:ab:2f:
         b8:54:7a:dd:90:41:92:e6:38:db:b1:6b:b6:a3:35:91:3a:5f:
         81:73:30:9e:32:d9:5f:3f:cf:f1:e6:f2:97:81:06:df:e2:3d:
         53:59:23:fb:c5:23:e3:41:80:3d:af:49:fd:fa:71:0e:62:8a:
         cb:80:72:c2:61:5d:ab:53:13:59:de:ad:23:30:69:ba:86:1c:
         f1:f2:9e:a6:2d:fc:0d:0c:3c:04:8f:d3:4f:5e:b6:aa:c7:86:
         83:d6:3a:a2:52:be:81:98:ed:be:f0:f3:1e:2d:f7:4f:dc:63:
         19:23:4e:8b:48:07:d1:9a:a8:d5:cb:51:4c:c8:ea:9d:d9:83:
         6c:da:ab:52:ee:03:39:1e:5c:5f:da:b8:4f:49:16:75:cf:1d:
         b8:ed:f4:b6:eb:95:6e:e4:68:7e:b5:3e:04:2b:3d:4b:61:53:
         ff:59:3d:f2:cc:c4:a3:8f:d5:cf:35:31:40:c3:b0:f3:01:77:
         9d:42:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:26 2026 by rpki-client