Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c49d7e7-5743-3754-9403-160e47900758.roa
File:                     1c49d7e7-5743-3754-9403-160e47900758.roa (raw, json)
Hash identifier:          g4SZzBm1tXLV53rKnAL3dWqg1gqv/0GgZxA3MNKnNJI=
Subject key identifier:   80:64:30:F8:18:C0:FB:3A:A5:25:6D:6E:EA:A2:B0:81:41:8B:1E:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F80642AC25301D6A855080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c49d7e7-5743-3754-9403-160e47900758.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        96.238.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:06:42:ac:25:30:1d:6a:85:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=80734ac8-b34c-4c49-8596-7c95613cf071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:41:ec:58:65:61:72:bd:e7:55:7e:cb:d2:7c:
                    6e:2c:e8:6d:25:c8:9e:c1:08:5a:07:91:e4:95:60:
                    77:62:12:99:e0:d7:47:ef:8c:94:e9:ea:51:b6:f3:
                    f4:71:89:d9:27:a0:23:1c:e1:97:ce:f7:8b:d9:80:
                    0c:45:7d:5f:84:88:63:cc:fe:ab:67:b9:a4:d0:b6:
                    86:9d:57:9f:a1:39:00:d6:54:93:65:46:2a:fc:c1:
                    84:9b:3e:4f:9a:67:2a:e1:ab:4b:51:ca:eb:a2:d2:
                    07:70:19:ba:81:9f:7e:03:76:9a:1c:f2:22:e0:48:
                    05:3e:af:6a:a3:50:76:90:78:a1:ec:df:00:39:8d:
                    90:5f:0d:45:e3:49:b2:7a:68:02:51:50:5c:a1:d8:
                    23:cd:d1:d5:06:d5:33:de:95:28:98:00:7e:14:6b:
                    d2:fd:b4:fc:24:fe:ec:59:e5:5b:5b:36:f3:5e:88:
                    51:ad:50:72:53:52:e3:e9:90:f7:f8:e3:56:8a:41:
                    37:31:43:e2:eb:dc:78:bb:a3:23:56:35:34:48:c4:
                    7c:b3:3f:0c:36:ac:be:d8:94:5a:80:44:bb:bd:87:
                    d6:ea:27:97:59:77:e8:5b:5a:f2:86:9f:e2:bb:e8:
                    42:ae:7f:d4:3b:e7:b4:93:6a:07:13:56:da:5c:84:
                    fa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:30:F8:18:C0:FB:3A:A5:25:6D:6E:EA:A2:B0:81:41:8B:1E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c49d7e7-5743-3754-9403-160e47900758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.238.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6e:38:1e:35:52:19:4d:e9:8b:85:fe:8b:88:80:20:e3:e8:
         a1:a8:fe:30:5a:48:4f:23:3a:f0:5c:56:c7:4c:1d:0e:65:22:
         76:f5:b9:73:0c:ea:dc:50:20:19:4f:da:0a:ce:92:ba:e2:76:
         e3:e6:b0:a5:c9:2b:74:7d:d1:80:d2:d8:2c:6c:2d:26:26:c3:
         8d:84:c9:14:9a:6f:f2:80:76:b0:5a:32:3b:6a:f5:9c:12:a6:
         05:b9:0f:60:4f:f7:41:70:08:f4:dd:f4:1a:37:2b:a1:27:aa:
         1c:b3:fe:1f:32:36:6a:d9:e7:5e:96:c1:3a:23:69:11:38:3a:
         df:ae:b7:2f:52:e5:e1:9b:d9:0a:d5:b9:01:5e:6d:d6:cf:27:
         db:d1:78:e2:7d:36:19:fa:3b:f2:d3:2e:b2:17:df:8d:c8:89:
         6d:9e:0e:39:75:34:f9:f0:95:1f:bf:ea:03:a1:36:a5:80:91:
         8c:7b:73:7a:44:46:8c:43:bd:d6:3e:6e:52:b4:35:9f:e9:5f:
         c9:eb:1d:86:3b:80:49:12:b4:e3:a5:2e:e0:d0:48:3c:b9:19:
         f4:7a:33:65:dd:b8:f7:77:6c:54:ca:e3:54:cf:34:a4:70:b8:
         4f:60:d8:ba:bd:36:f9:46:04:8e:9d:00:c0:ff:af:22:88:0d:
         60:ca:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:21:28 2025 by rpki-client