Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa
File:                     2aacea34-269b-3e95-a3b1-ce065f46f42d.roa (raw, json)
Hash identifier:          9avNCXXnDOVuVVBjpV1Wr1fPDsveuuwZQnNWF35gGZY=
Subject key identifier:   C7:04:05:AB:30:CA:DA:01:FE:9F:2C:9C:3D:B5:9E:C9:52:5C:FF:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A7D18132AB8E3A42CC700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        199.202.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:7d:18:13:2a:b8:e3:a4:2c:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=fff40a63-edee-43f3-9954-4a6f8b439695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:89:df:d5:80:ff:48:a5:de:5e:e3:89:cf:
                    c3:02:1c:59:fc:b0:d2:d5:74:7d:6a:75:a2:4a:1e:
                    83:ed:4b:d4:54:de:3b:ce:a4:3b:be:1f:ec:2d:54:
                    e5:82:3d:08:f9:a9:0c:df:36:12:92:be:f9:28:b8:
                    b6:24:13:90:9b:72:5a:ea:47:7e:5c:c2:e2:1e:fd:
                    71:da:93:83:61:97:e5:7c:9b:69:5d:aa:7e:08:06:
                    c7:45:bd:4d:8e:07:53:ee:b8:67:bb:f5:09:f5:98:
                    80:b1:07:a5:ff:9f:44:ea:bb:36:2f:ec:1a:94:63:
                    99:bd:b0:96:3b:6f:0d:ca:94:d7:4c:10:cb:65:8b:
                    bb:b3:6b:50:75:15:ae:11:d5:fb:47:1d:2a:2c:7b:
                    1c:ac:7a:db:67:30:43:2f:a2:32:5c:64:be:28:dd:
                    40:74:e0:7e:bf:07:a8:8b:ee:36:1c:bf:db:c2:28:
                    76:98:ae:2c:a3:e8:47:e9:af:69:f6:04:f4:2c:b2:
                    ce:06:bb:48:b7:a7:a7:67:3c:db:0f:f2:9e:49:f3:
                    69:b2:fe:58:f7:d5:c8:77:85:da:5b:db:f8:94:9d:
                    b7:dd:b2:6f:73:8f:2f:46:c0:fd:e9:bc:03:6e:38:
                    11:f2:0f:6e:78:3a:34:23:ee:16:6c:b6:41:f9:bd:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:04:05:AB:30:CA:DA:01:FE:9F:2C:9C:3D:B5:9E:C9:52:5C:FF:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a7:bd:6c:4c:af:ea:63:a0:09:70:a6:e0:7a:b6:69:64:88:
         ca:0c:5d:06:97:f0:0f:af:e4:bb:d2:82:2a:b0:00:e5:9c:97:
         eb:dc:e4:0c:f0:47:85:4f:b2:82:97:dc:3e:67:ca:6c:e8:71:
         e6:5b:cb:cf:e9:62:2b:78:61:3d:0a:e6:3a:e2:a2:e6:11:9a:
         f6:60:54:13:af:eb:cc:85:78:78:a0:db:50:b6:b7:e3:df:fd:
         d9:7f:0c:ef:6a:22:18:52:4c:d5:53:65:d5:11:7c:29:5a:39:
         b0:57:09:04:1c:90:47:f0:83:c1:6b:68:e0:02:da:44:b1:52:
         94:e7:5b:7a:cf:25:1d:02:bc:20:cf:df:87:3b:52:88:56:54:
         16:f1:22:6b:c8:d8:67:98:ec:21:7a:6f:93:45:61:4c:2b:1f:
         d8:31:b0:cf:66:5b:72:8c:7c:bd:f5:c4:20:f1:8d:c5:b8:91:
         0a:1f:4c:a2:03:f3:65:77:fc:c7:89:1c:fc:2b:aa:01:9c:93:
         e6:9d:e9:e4:c0:31:31:00:da:a0:74:19:50:10:bc:b9:b2:14:
         d7:41:6f:29:08:f9:bf:aa:f6:2a:2a:90:87:a7:12:23:cc:ac:
         ce:59:3a:31:19:13:98:7d:79:51:be:e1:fd:4b:9b:73:9b:4c:
         32:cb:9a:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSn0YEyq446QsxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
ZmZmNDBhNjMtZWRlZS00M2YzLTk5NTQtNGE2ZjhiNDM5Njk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcKJ39WA/0il3l7jic/DAhxZ/LDS1XR9anWi
Sh6D7UvUVN47zqQ7vh/sLVTlgj0I+akM3zYSkr75KLi2JBOQm3Ja6kd+XMLiHv1x
2pODYZflfJtpXap+CAbHRb1NjgdT7rhnu/UJ9ZiAsQel/59E6rs2L+walGOZvbCW
O28NypTXTBDLZYu7s2tQdRWuEdX7Rx0qLHscrHrbZzBDL6IyXGS+KN1AdOB+vweo
i+42HL/bwih2mK4so+hH6a9p9gT0LLLOBrtIt6enZzzbD/KeSfNpsv5Y99XId4Xa
W9v4lJ233bJvc48vRsD96bwDbjgR8g9ueDo0I+4WbLZB+b3nBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcEBaswytoB/p8snD21nslSXP+1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmFhY2VhMzQtMjY5Yi0z
ZTk1LWEzYjEtY2UwNjVmNDZmNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8p0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFanvWxMr+pjoAlwpuB6tmlkiMoMXQaX8A+v5LvSgiqwAOWcl+vc5Azw
R4VPsoKX3D5nymzoceZby8/pYit4YT0K5jriouYRmvZgVBOv68yFeHig21C2t+Pf
/dl/DO9qIhhSTNVTZdURfClaObBXCQQckEfwg8FraOAC2kSxUpTnW3rPJR0CvCDP
34c7UohWVBbxImvI2GeY7CF6b5NFYUwrH9gxsM9mW3KMfL31xCDxjcW4kQofTKID
82V3/MeJHPwrqgGck+ad6eTAMTEA2qB0GVAQvLmyFNdBbykI+b+q9ioqkIenEiPM
rM5ZOjEZE5h9eVG+4f1Lm3ObTDLLmpI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:56 2026 by rpki-client