Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62f32450-6f81-3986-968f-6e55fefd5061.roa
File:                     62f32450-6f81-3986-968f-6e55fefd5061.roa (raw, json)
Hash identifier:          Moz0bik3qBKymmkki3dRl6nIv0iOtuPIHupb/Qec2Ls=
Subject key identifier:   C4:5D:AA:5B:94:51:ED:B3:AD:BA:EC:D5:31:E3:05:BF:E5:B3:0E:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F067265B8AF719A1600E4B540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62f32450-6f81-3986-968f-6e55fefd5061.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        141.207.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:65:b8:af:71:9a:16:00:e4:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=43275ef2-b92e-41c0-bee8-04d98fdb4454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:de:80:88:bb:6d:4f:84:61:95:f1:fb:80:
                    52:13:62:3a:46:97:ae:54:53:f5:ce:0e:28:62:82:
                    3b:62:41:62:8f:eb:98:57:01:9b:3c:53:81:f8:af:
                    54:fb:fc:e9:38:80:e1:10:3e:6d:dc:ee:fa:e5:9c:
                    f5:6c:28:b4:e4:5c:2c:97:8a:d2:cf:91:a4:cf:a4:
                    06:16:43:b1:1c:66:44:ee:8c:b5:8a:1b:04:b1:63:
                    e7:41:c8:2d:23:ae:08:63:8b:b6:04:d2:de:a1:ab:
                    19:a3:e7:05:0a:56:70:29:be:b5:2c:d4:a1:91:3a:
                    ff:d5:18:24:78:c6:18:33:c9:1f:3e:ee:25:09:b5:
                    8b:96:1b:94:bb:90:09:0c:4f:ec:55:29:b3:2f:54:
                    bc:30:17:51:ba:82:ec:d8:52:b5:d7:60:84:10:ce:
                    3a:b5:1d:91:b4:12:1c:3c:65:7e:a8:fe:75:9b:db:
                    84:41:dd:87:ef:1d:78:58:f4:06:33:58:fc:1a:25:
                    cc:1d:ca:3c:4e:93:95:c8:75:22:51:8b:27:cd:33:
                    d5:1b:3e:76:40:1c:ef:d1:64:da:bf:67:6e:b5:74:
                    cc:a5:9e:b2:92:87:5c:56:e0:69:cf:5c:b2:a2:51:
                    c6:89:6a:ff:47:57:6a:04:1a:e7:f0:48:fe:6a:c0:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5D:AA:5B:94:51:ED:B3:AD:BA:EC:D5:31:E3:05:BF:E5:B3:0E:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/62f32450-6f81-3986-968f-6e55fefd5061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6d:f2:ab:57:41:3e:7f:70:8c:96:af:a4:36:18:97:50:52:
         49:0b:ac:ea:ce:2e:9c:0a:2e:6f:88:c6:fe:0f:fd:0a:46:b9:
         8c:e1:65:b4:c2:20:e2:10:f0:a6:84:41:47:be:cf:72:50:2b:
         5c:cc:d6:c2:16:18:f9:19:47:e0:73:81:72:c4:36:35:10:13:
         58:44:51:83:fb:38:26:66:f8:4c:94:52:e6:08:2e:e6:f4:84:
         14:fd:a4:e4:80:77:63:e3:6f:2b:fb:bc:e5:cd:0b:da:48:00:
         cd:4f:87:86:a1:0f:a4:16:69:ff:52:f3:4f:5b:cc:97:ee:a6:
         e7:4e:4c:fe:a2:94:30:83:02:f8:d7:09:e3:58:01:5d:da:58:
         ac:f4:98:bc:a7:65:98:a8:ca:c5:48:b5:62:6d:7b:b3:71:cd:
         ba:0a:73:cb:57:e1:4c:ca:8b:12:84:22:cc:b5:1f:ab:44:a9:
         71:29:d4:c6:3f:4d:7e:ca:3b:42:84:8f:2a:88:27:02:a5:dc:
         de:13:fa:b2:01:ef:62:52:5a:af:1f:21:09:2e:63:be:b8:66:
         68:a4:ee:99:4b:01:c9:ff:96:fd:3d:11:5c:e4:03:b8:e2:fa:
         44:1c:d1:a0:e2:b7:57:d0:5e:d5:31:96:76:ac:c4:9d:16:c8:
         2d:e7:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:23:45 2026 by rpki-client