Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32e0872-c937-357c-833b-817abe08d267.roa
File:                     b32e0872-c937-357c-833b-817abe08d267.roa (raw, json)
Hash identifier:          kT06H+6leEJDrggRb4UN7V9Lu55+34Mb0Df+Mi64TOc=
Subject key identifier:   61:EA:52:23:EB:FA:6B:6A:A5:D2:06:ED:15:C5:7D:60:55:6D:CB:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C54A224879C3F81678BB140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32e0872-c937-357c-833b-817abe08d267.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        96.240.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:a2:24:87:9c:3f:81:67:8b:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=81bde70e-48cb-41a0-b703-93f488215d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:ff:34:b6:3f:d6:98:00:93:a0:1a:e2:3f:
                    73:33:68:60:06:48:f4:b6:f5:b3:27:49:9b:b3:d9:
                    c4:e7:b2:e7:17:e2:17:a4:dd:a0:f9:67:85:79:00:
                    c2:88:03:93:96:0e:88:b3:8c:26:c5:8a:89:8f:10:
                    e8:d2:b6:7e:dd:d3:0e:95:92:d0:da:62:8c:37:47:
                    aa:92:2b:a1:4a:55:6c:86:cd:6f:c2:8e:77:ce:ea:
                    23:bb:05:c5:4e:8b:26:22:3f:f0:01:d0:8c:c1:77:
                    6f:4d:3f:6f:93:55:e7:fb:75:66:74:8e:ad:26:6f:
                    6e:7b:d4:b1:f1:0a:f5:7e:d9:45:80:23:39:82:37:
                    e7:66:6f:b8:cd:d7:e2:9c:e0:f3:01:f6:d2:c3:fe:
                    36:0e:8b:8c:7d:a3:de:6d:f5:3e:f4:6b:68:b6:00:
                    49:fd:03:65:4d:d0:da:3e:33:43:48:47:0c:b3:71:
                    46:f5:b5:ca:cb:a0:0a:73:e9:56:9d:9a:47:89:55:
                    28:9b:86:be:57:a1:d3:3f:92:4b:72:8e:bc:20:d1:
                    1b:db:68:fd:2d:fb:a8:c4:38:48:d4:6f:29:02:b1:
                    e3:6a:9d:bc:78:59:66:d8:c2:cd:8d:03:3c:a1:31:
                    ce:fa:58:46:94:b2:b4:7e:74:e2:9e:4a:5e:92:56:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:52:23:EB:FA:6B:6A:A5:D2:06:ED:15:C5:7D:60:55:6D:CB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32e0872-c937-357c-833b-817abe08d267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.240.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:f9:3a:0d:00:fb:a5:0c:85:73:ce:3f:4d:bf:4e:e0:1d:
         86:9a:37:71:91:65:29:cf:be:dc:f2:88:a0:0e:a2:83:9f:60:
         a6:52:dc:fc:43:3c:f5:b2:fc:4d:a6:37:b9:52:15:08:50:b3:
         15:de:ee:10:ff:e3:3e:72:01:c5:a5:06:7b:cd:8a:95:4b:3e:
         5d:a1:c4:ee:ba:9b:cf:2a:f7:6b:de:80:91:b8:5a:66:6d:35:
         21:de:f9:fe:06:bd:73:4f:53:c4:db:87:24:99:8a:84:d2:c8:
         7b:d9:70:e1:45:35:7a:5f:43:39:e7:9b:5d:07:de:7f:f1:28:
         94:b2:a9:37:b1:84:08:b4:27:86:be:d6:77:ac:af:6a:bb:41:
         93:49:a9:29:2f:64:4c:5a:76:4a:6a:eb:ea:2c:19:5f:cc:56:
         d2:c6:d1:99:a6:7c:85:44:d3:b7:26:db:99:81:5c:8a:dd:9e:
         e1:78:e4:70:00:96:e2:68:e4:c5:c7:28:4b:61:43:98:5e:f6:
         6b:8d:b2:fd:9c:fe:da:b6:b8:27:98:4f:b9:f2:6d:bd:09:bf:
         c1:22:08:9e:b8:89:5b:b0:d2:9b:7d:6f:81:ab:07:4e:8d:37:
         69:a9:78:bf:82:0b:bd:7a:f1:1e:29:60:91:4f:a1:c0:d0:51:
         83:d5:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:21 2026 by rpki-client