Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f914233-8831-3cf6-9033-c7313d0c9dac.roa
File:                     5f914233-8831-3cf6-9033-c7313d0c9dac.roa (raw, json)
Hash identifier:          NxCFlwCwqzEqbFb00+8wE0ixx2QDD9kHSnyNM1vgahg=
Subject key identifier:   F6:63:53:CC:0D:1F:87:C0:08:03:F5:74:F1:BF:28:AC:24:EE:39:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4559FA1794560DC3E509CFA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f914233-8831-3cf6-9033-c7313d0c9dac.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     701
IP address blocks:        207.101.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:fa:17:94:56:0d:c3:e5:09:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=028248ba-a6aa-4305-bd52-3dc4927a12df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:31:c9:04:57:a1:c1:5c:67:14:09:f7:0a:
                    84:31:2a:b9:5a:e9:0b:40:df:24:15:38:ba:82:b2:
                    a9:82:ff:76:3f:fd:1d:ed:0f:4b:8d:e8:db:b9:95:
                    32:08:c8:c3:03:b2:d3:f8:6b:0f:d2:8b:ac:4a:77:
                    3f:27:18:e5:9f:f8:7f:ba:69:fd:cb:2e:b3:8f:35:
                    51:bf:7c:80:ba:96:e8:3e:44:6b:1e:d5:44:fb:6d:
                    a1:1d:71:1f:f2:17:c7:37:93:f0:68:c2:f3:55:36:
                    d6:cb:e0:dd:11:6e:f9:6d:d0:66:a7:76:ef:d3:24:
                    86:ab:17:02:83:70:6d:df:b2:e7:cc:52:a5:08:04:
                    f5:31:c3:95:55:ef:bc:c9:28:c1:a0:fe:7e:46:0d:
                    a3:41:fa:c3:02:62:b1:94:12:70:c2:cb:e6:5e:a0:
                    9c:7c:3d:bf:38:5f:67:e4:db:7a:ff:be:24:55:e2:
                    0a:8f:3a:08:61:12:0b:17:3e:b4:7c:6c:11:8a:f2:
                    43:04:18:77:81:5e:21:06:31:b2:97:55:9a:c9:98:
                    67:4b:5a:ba:6d:b4:12:29:67:07:b6:81:94:50:e1:
                    be:fb:07:98:a3:68:c6:1e:9b:b6:e7:f9:20:61:e7:
                    fc:59:cf:9c:8d:52:d0:76:ff:86:75:f4:f7:7b:7f:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:53:CC:0D:1F:87:C0:08:03:F5:74:F1:BF:28:AC:24:EE:39:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f914233-8831-3cf6-9033-c7313d0c9dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.101.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:85:87:eb:d9:6b:7e:97:f4:40:16:e8:40:64:a6:83:e7:
         76:bb:45:c3:cc:7d:15:d3:27:e7:71:d4:0c:20:32:3d:2d:d2:
         a2:1d:b5:f9:86:81:66:5f:67:f6:70:45:5f:e1:47:e8:f7:1c:
         cc:e4:7b:d6:f6:1b:8f:e6:44:dc:70:8b:91:25:00:39:24:27:
         5e:16:dc:d3:18:5a:15:fa:91:ce:0c:51:76:eb:a0:d0:e1:86:
         dc:f4:0e:d7:e8:7e:82:85:c8:c8:ff:0c:f9:e7:56:c2:b2:a6:
         02:4a:08:81:f7:e9:b4:fb:50:d2:b9:eb:83:8d:e6:3a:d8:ec:
         ce:7c:c6:53:5f:de:46:84:b1:04:e7:bf:78:8e:6a:e7:d1:e6:
         b1:ec:7f:89:aa:42:30:0f:61:08:26:66:07:a1:84:27:ef:d2:
         7e:8f:c0:c4:cb:2b:b1:82:cd:c7:12:48:e3:77:af:ff:18:17:
         71:c1:3d:68:db:57:4d:cd:12:70:94:97:f0:aa:49:31:5b:f7:
         d3:7b:d6:94:2e:71:40:ed:a2:dc:f5:62:ed:49:5e:9e:e3:1b:
         14:aa:e6:66:5c:ff:89:96:f3:a6:54:b6:ab:d6:5f:59:45:56:
         ed:41:ab:00:a7:83:25:06:f6:53:b8:9e:3f:18:c8:0b:8d:58:
         33:64:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:42 2026 by rpki-client