Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cfe400-afec-3911-a9c9-e559e02badd0.roa
File:                     88cfe400-afec-3911-a9c9-e559e02badd0.roa (raw, json)
Hash identifier:          K8jyjb14XyqH28l10gny+RMcAhCgftsy6cLYl34r3so=
Subject key identifier:   93:6A:23:9E:25:18:AA:FC:48:5E:AC:49:2E:00:89:BB:F6:89:8A:59
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87C87723CB9007A12B6680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cfe400-afec-3911-a9c9-e559e02badd0.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        63.41.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c8:77:23:cb:90:07:a1:2b:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=9641428f-df80-47e4-ba09-9a94483725a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:74:b7:e8:96:79:73:1c:96:ba:44:6e:f5:
                    78:1b:a7:2c:19:32:b3:55:38:94:58:91:8e:d3:fc:
                    f2:8c:26:ae:ec:69:2b:e4:21:a7:6a:80:98:9a:c2:
                    bf:78:66:8b:60:b4:73:68:8b:da:3c:16:39:38:a0:
                    0c:a4:e5:a1:12:e9:db:83:f6:ff:41:71:a8:55:d1:
                    7b:89:bd:ad:c8:0b:76:44:db:4b:bb:e1:fa:b2:48:
                    85:7a:78:b8:3e:30:c4:40:e4:eb:f9:2b:dc:68:77:
                    54:d0:79:9e:fe:88:5b:f8:55:72:d1:1c:d3:ec:44:
                    20:61:7d:ac:3b:c9:cd:84:67:a8:28:6f:68:21:8d:
                    9b:8b:9a:be:e3:25:b6:2f:1c:64:e8:53:00:53:bb:
                    50:23:84:ac:52:01:7f:bc:d2:99:ee:62:a3:58:fc:
                    67:ff:89:9e:e2:da:18:3d:0e:71:38:3b:e8:8a:08:
                    dd:c3:54:55:d4:f8:fa:f2:87:4b:7e:aa:4e:bf:fa:
                    6b:9e:14:2e:61:ec:1a:13:b8:2c:bc:57:b4:fc:35:
                    2a:18:a0:7f:4d:fb:5e:90:9a:c1:ea:68:d1:b7:e3:
                    8e:6a:89:31:0b:dd:99:12:c3:b0:09:ab:8e:ca:40:
                    a9:90:79:5e:77:04:3d:bb:62:8b:90:60:3a:54:71:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:23:9E:25:18:AA:FC:48:5E:AC:49:2E:00:89:BB:F6:89:8A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88cfe400-afec-3911-a9c9-e559e02badd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:e3:30:cc:e8:f8:c2:42:05:65:25:28:27:01:20:bb:6f:
         97:14:d7:41:bc:a9:c0:28:c9:f4:80:50:50:e1:92:d1:88:04:
         84:3a:75:bf:c6:0d:39:9f:fc:08:90:b8:d7:87:c6:29:d5:9a:
         d1:50:de:0f:2e:52:d6:01:11:af:2b:a8:82:74:e9:b0:5b:65:
         7e:2b:c2:7b:4b:5c:c4:69:36:dc:8f:cc:61:e8:cf:32:6f:93:
         fd:55:7b:ec:72:2a:37:65:11:8c:86:2d:a5:6b:2c:02:d1:4b:
         b0:4e:30:11:f0:d8:7b:34:5b:04:72:43:c2:eb:40:e6:2d:94:
         8a:9c:3a:13:89:1d:6e:6f:fb:5f:87:0d:16:d9:be:e4:8b:93:
         b5:89:0b:1b:4a:30:6d:f8:01:06:67:0b:0a:35:1e:7f:29:b9:
         27:e2:db:51:84:6a:dc:04:45:fb:3e:5e:13:0d:98:2a:38:3b:
         52:b6:fa:4f:ed:34:11:75:4a:ec:9e:b2:3c:17:49:ba:dd:6b:
         67:27:9a:c1:aa:2f:ed:d3:10:b5:0e:af:14:e8:46:a2:8e:ea:
         af:97:48:c1:cd:17:8f:b2:d8:d9:7c:3b:f7:64:29:90:da:12:
         19:2b:78:18:d9:bb:4d:7c:e2:11:34:8d:6a:82:2a:9d:59:23:
         e1:c4:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:04:26 2026 by rpki-client