Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa
File:                     c68e1926-8427-3e93-a573-e4c9f6684131.roa (raw, json)
Hash identifier:          Sr5nRpAHABkJN5cNE2fu+1Q3xdos1syX3317oAvG+ZI=
Subject key identifier:   2C:96:0B:F6:99:8A:B8:AC:12:47:6C:22:7E:9D:DC:6F:A3:F7:F1:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C5496131C6E2463BB7CDB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        71.253.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:96:13:1c:6e:24:63:bb:7c:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=321ef8cc-e34c-49fc-be1b-d69ba46de079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:51:67:33:14:d7:3e:6d:73:7a:38:10:fd:
                    35:5c:21:e9:8d:fe:5a:18:c5:ce:67:b1:29:6a:84:
                    ab:d7:58:b9:3c:a4:bd:13:56:ee:dc:41:9e:3e:36:
                    c4:ed:af:6a:ed:44:27:44:d3:2d:c2:c7:f5:f4:34:
                    ac:e6:03:75:6f:cd:d1:84:8c:c4:ee:62:47:9c:07:
                    10:59:ce:f4:19:f8:e4:c8:80:cb:d1:42:73:ac:84:
                    a7:19:4e:5b:99:19:02:e2:d1:dc:fb:8e:f9:5a:64:
                    47:71:20:69:34:7c:84:fe:1e:9a:a4:21:52:4a:c6:
                    45:dd:4a:16:2d:dd:da:8a:bd:f9:7b:be:4b:f2:7d:
                    1c:41:13:87:87:ca:8d:29:95:34:30:a7:f1:c7:22:
                    db:00:7b:00:65:45:18:43:86:e0:6f:ad:47:21:19:
                    84:d7:8a:ca:51:3a:79:de:1c:fa:ad:d5:58:97:d4:
                    95:b5:7f:b2:66:b4:82:b8:fd:72:6f:e0:3f:a5:e2:
                    44:59:36:ee:7c:4c:fa:b9:45:dd:d7:99:c6:3a:32:
                    59:79:02:01:ec:a0:21:9d:08:0b:2f:78:8d:f8:62:
                    14:08:68:3c:38:6f:2a:06:82:33:e7:67:ea:65:77:
                    19:2a:ce:b4:fb:ed:c6:ef:b0:58:a3:53:83:bf:94:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:96:0B:F6:99:8A:B8:AC:12:47:6C:22:7E:9D:DC:6F:A3:F7:F1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.253.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:90:56:c4:a5:37:f1:8e:88:c1:d4:66:c5:17:4e:7b:f5:71:
         89:89:09:61:71:15:1f:8a:76:7e:eb:c6:f3:d1:c5:d6:fb:0f:
         b5:a7:9c:25:01:b3:f3:aa:95:97:c7:56:e5:c1:75:e7:e8:db:
         19:44:e4:ff:77:2c:9b:6d:f6:c2:cc:74:fd:0f:a8:44:58:51:
         79:73:df:4d:31:be:07:dd:3e:fc:10:be:db:ea:de:07:20:e4:
         10:03:06:7a:0b:84:9f:a3:92:37:38:31:f7:1f:fe:24:84:d6:
         ba:ed:72:1f:18:09:8c:4f:b0:e4:e8:e7:15:2f:6f:e5:e0:ae:
         77:a2:ea:b3:4b:ee:9d:df:9e:2b:aa:d5:0f:36:c4:e0:d2:39:
         da:a9:8e:3d:2d:94:9b:60:58:8c:9a:34:81:25:83:94:ec:b6:
         1a:0d:5b:9f:c3:c5:bf:a4:c2:46:aa:e8:5b:c8:56:28:0a:a0:
         97:c8:ca:18:b1:03:1a:e3:8b:15:b0:d5:ab:ac:8b:d8:98:f1:
         92:3d:64:e9:b8:2a:6c:78:4b:37:bd:b1:57:73:e5:9b:ed:a0:
         e6:5b:6d:ea:b0:07:7a:85:de:b1:62:8f:be:8d:cf:20:a0:9d:
         27:88:ae:3c:0d:60:b3:4d:a9:ee:12:87:62:41:3f:9c:15:c5:
         28:97:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:16 2026 by rpki-client