Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab8c407-8086-3524-9472-9d46b3df9f60.roa
File:                     aab8c407-8086-3524-9472-9d46b3df9f60.roa (raw, json)
Hash identifier:          ZIg+JgO42TUcHuhFNKSpHiKIDs4SsY31tFXxVB7Rgts=
Subject key identifier:   E0:7C:7B:15:EF:D0:EA:2F:BA:BB:07:E9:D9:89:28:FC:AD:FA:AB:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4559F54201043F6F36442B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab8c407-8086-3524-9472-9d46b3df9f60.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     701
IP address blocks:        204.51.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:f5:42:01:04:3f:6f:36:44:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=e03ba695-dfdc-4cac-ba5d-e88162777531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:f7:59:6c:fa:66:07:3f:cd:eb:7f:6d:b1:
                    9a:8d:e5:9e:6a:55:64:16:07:c3:14:be:5d:3e:ee:
                    8d:96:0a:f9:fb:a6:59:c9:fd:13:54:44:b8:cd:e3:
                    c8:8d:37:29:34:c3:a4:a4:bd:2d:11:42:85:0e:d2:
                    6f:70:fb:a0:3f:a3:e6:7a:7d:79:9b:80:27:e9:9e:
                    95:53:83:4a:db:19:c4:b9:91:90:58:74:03:eb:00:
                    cd:00:aa:5a:04:d1:f7:4a:35:a0:15:6a:17:16:4b:
                    f0:19:70:59:0f:df:b6:2e:b7:d0:d4:fa:b3:17:2c:
                    06:d4:2d:16:6d:6b:3f:5e:c1:13:51:01:4a:85:81:
                    f5:36:44:c3:78:92:b4:c5:5a:74:41:3b:1b:ac:12:
                    57:5c:07:05:20:d5:12:16:2a:fd:bf:0f:cc:75:45:
                    34:07:33:69:95:a0:74:7a:b6:bc:4c:41:7d:23:ec:
                    53:5b:c6:f6:88:64:78:a9:99:91:b0:20:ca:27:80:
                    8a:54:e3:d2:ba:25:8e:f8:e0:d6:55:75:b7:43:c4:
                    52:10:1b:23:be:0a:a7:28:2b:2b:73:63:2b:7f:38:
                    89:1d:15:79:6e:4b:33:28:e9:a6:05:0d:74:e4:0f:
                    a8:7c:73:a7:d6:ce:93:08:b6:67:06:a3:3f:0f:f1:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:7B:15:EF:D0:EA:2F:BA:BB:07:E9:D9:89:28:FC:AD:FA:AB:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab8c407-8086-3524-9472-9d46b3df9f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.51.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d0:9d:b9:5e:44:a8:0e:94:52:1b:79:fd:77:3c:f1:8a:d4:
         e4:78:b2:e8:b1:30:c4:31:cc:ad:66:0a:c0:23:bf:5b:24:bd:
         7c:86:41:7a:30:0f:fa:bf:b2:80:fa:6b:a0:de:b6:00:53:a8:
         a2:36:35:e5:97:66:76:83:a1:88:e5:0b:02:c3:4c:f1:17:a6:
         00:50:3e:64:e3:34:99:f7:5e:2d:21:56:44:8a:ad:ca:aa:d2:
         87:bd:26:3f:a1:33:31:76:7b:81:0b:a5:77:7b:18:4b:b9:5b:
         b5:79:ff:4d:bf:79:07:44:3b:db:03:47:36:7f:87:9d:a4:df:
         2b:e5:32:c0:70:c9:48:a0:59:24:5c:c6:1a:d6:96:da:41:2a:
         9e:f5:3d:f0:e1:1a:10:dc:8f:45:51:7c:ca:e5:6b:eb:0c:2e:
         66:42:bd:f6:e1:2f:33:9f:74:68:8b:9a:ff:c8:85:98:88:0e:
         c8:6d:e0:13:9d:cd:39:aa:55:28:87:96:aa:e3:d1:72:40:1c:
         aa:da:05:fe:e2:d0:8b:5e:bf:e1:d1:eb:c5:bb:87:15:37:fb:
         6a:9f:b4:71:86:33:8e:f6:c2:5b:21:79:ca:0c:73:4b:10:c5:
         df:25:be:32:f0:6d:aa:d1:9f:68:82:68:95:eb:55:8c:11:1f:
         ce:aa:ed:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:58:51 2026 by rpki-client