Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1ae596a-791b-3171-84b7-011d7c7daaf3.roa
File:                     e1ae596a-791b-3171-84b7-011d7c7daaf3.roa (raw, json)
Hash identifier:          WSAghFHHtxIfMCFh+2i61bZ1FmAidv2OVucy9GoOtKE=
Subject key identifier:   EB:FC:45:DE:16:BD:D0:A4:8C:D3:5A:59:3A:AE:5D:7F:11:31:66:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C549331D205159AE396DF60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1ae596a-791b-3171-84b7-011d7c7daaf3.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        96.228.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:93:31:d2:05:15:9a:e3:96:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=75b59ae8-3851-4af7-ba0e-b6b3bbb4b0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:1c:cd:15:c7:08:36:5a:d5:d9:a9:9e:f5:
                    08:e8:71:5d:f4:5f:80:16:d2:a5:30:23:91:36:dd:
                    81:ea:86:99:f4:d5:d6:87:c2:da:6b:f0:af:d0:be:
                    1c:96:72:96:d7:ec:d1:c8:5d:72:88:0d:09:98:ef:
                    6b:26:36:01:6e:1b:c5:6c:72:2c:38:f3:00:75:95:
                    e7:3e:2c:9e:e5:22:c9:02:3d:14:30:15:f9:d5:dd:
                    b8:93:7f:65:e3:61:b1:07:ef:f8:38:7b:26:55:13:
                    87:9c:71:a4:31:da:6d:9b:5e:8b:77:f7:2b:05:24:
                    22:82:a2:e5:86:f1:19:1c:e2:83:1c:5c:2c:3f:e6:
                    00:93:ad:19:89:3f:d1:9b:03:21:94:5e:7f:cb:91:
                    82:25:8d:cb:43:90:21:5e:a7:90:4b:30:8b:6c:db:
                    0a:aa:ed:4e:c5:26:dc:97:db:42:56:73:30:41:59:
                    df:13:a2:2d:23:09:5f:ad:a5:5a:01:4e:10:a4:bd:
                    c0:34:75:76:79:f7:16:01:0f:4b:a5:90:64:58:b6:
                    d2:d7:9e:f5:23:47:2e:f8:ab:6e:00:44:73:2e:1f:
                    eb:90:62:c7:2e:4b:c2:ee:24:e8:40:de:67:fd:17:
                    e9:ed:f8:1b:5b:fc:52:6c:13:a9:f7:0c:a7:c2:01:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FC:45:DE:16:BD:D0:A4:8C:D3:5A:59:3A:AE:5D:7F:11:31:66:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1ae596a-791b-3171-84b7-011d7c7daaf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.228.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:bf:ab:7f:22:63:29:a5:8b:6d:3b:d2:cb:59:81:50:84:5e:
         c6:bb:38:47:ac:5e:51:2b:86:2c:1e:d0:52:5e:c8:b7:e4:56:
         c2:53:cb:47:bc:36:cb:d4:f0:6c:0a:a4:4a:3d:da:44:99:81:
         20:c8:8d:5f:a1:54:15:76:b8:c9:29:04:9d:3e:2d:8e:31:b2:
         df:af:17:8d:53:d8:b6:e7:7f:56:bc:07:74:bb:7a:1d:3c:ed:
         49:59:bc:4d:74:9f:2e:b5:a5:42:c0:38:a6:62:0f:1d:f6:2b:
         55:57:91:7a:34:ee:d0:d9:aa:00:90:d3:19:e8:68:49:a0:d8:
         cc:f0:9c:01:09:9e:7f:f1:55:12:b0:7a:12:73:91:16:5e:b6:
         a2:f4:c8:6d:e5:b7:e2:76:3d:7d:a0:bd:0c:43:a3:ca:71:76:
         6c:3c:6e:fe:22:7b:bb:7a:7a:16:11:97:a2:dd:5f:ee:86:59:
         23:8b:ce:43:c6:33:f6:9d:1a:7b:06:a3:47:67:10:a6:13:36:
         16:2a:ec:8e:d9:b7:6b:fb:73:df:85:aa:48:91:3c:9e:71:d4:
         f9:4a:d7:33:50:d4:19:a0:7a:6d:b2:5a:2f:81:3d:7f:e7:39:
         f9:d2:92:34:b2:89:02:c2:c8:e4:a0:45:38:7b:8c:46:63:bc:
         e0:70:d6:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVJMx0gUVmuOW32AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
NzViNTlhZTgtMzg1MS00YWY3LWJhMGUtYjZiM2JiYjRiMGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv48czRXHCDZa1dmpnvUI6HFd9F+AFtKlMCOR
Nt2B6oaZ9NXWh8Laa/Cv0L4clnKW1+zRyF1yiA0JmO9rJjYBbhvFbHIsOPMAdZXn
Piye5SLJAj0UMBX51d24k39l42GxB+/4OHsmVROHnHGkMdptm16Ld/crBSQigqLl
hvEZHOKDHFwsP+YAk60ZiT/RmwMhlF5/y5GCJY3LQ5AhXqeQSzCLbNsKqu1OxSbc
l9tCVnMwQVnfE6ItIwlfraVaAU4QpL3ANHV2efcWAQ9LpZBkWLbS1571I0cu+Ktu
AERzLh/rkGLHLkvC7iToQN5n/Rfp7fgbW/xSbBOp9wynwgGoWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOv8Rd4WvdCkjNNaWTquXX8RMWZ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTFhZTU5NmEtNzkxYi0z
MTcxLTg0YjctMDExZDdjN2RhYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYORQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKq/q38iYymli2070stZgVCEXsa7OEesXlErhiwe0FJeyLfkVsJTy0e8
NsvU8GwKpEo92kSZgSDIjV+hVBV2uMkpBJ0+LY4xst+vF41T2Lbnf1a8B3S7eh08
7UlZvE10ny61pULAOKZiDx32K1VXkXo07tDZqgCQ0xnoaEmg2MzwnAEJnn/xVRKw
ehJzkRZetqL0yG3lt+J2PX2gvQxDo8pxdmw8bv4ie7t6ehYRl6LdX+6GWSOLzkPG
M/adGnsGo0dnEKYTNhYq7I7Zt2v7c9+FqkiRPJ5x1PlK1zNQ1Bmgem2yWi+BPX/n
OfnSkjSyiQLCyOSgRTh7jEZjvOBw1hA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:03:43 2026 by rpki-client