Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41a6b062-fea4-345d-abbe-9ad39bd53c4d.roa
File:                     41a6b062-fea4-345d-abbe-9ad39bd53c4d.roa (raw, json)
Hash identifier:          Sk4t4lwrwfgg5A3tqKWY9yd8vCUM2WMBiB8XvykpIik=
Subject key identifier:   DB:C5:7A:C4:D9:1B:D8:36:6D:86:F6:29:86:E1:12:F9:C8:B0:9F:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A9D5A7350D019221BC000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41a6b062-fea4-345d-abbe-9ad39bd53c4d.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        151.197.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:9d:5a:73:50:d0:19:22:1b:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=957f4bd3-ab01-4942-9abd-0450f869c561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:fa:bd:e1:31:82:d5:ab:ce:58:db:8b:7e:
                    3d:79:c4:dd:ac:fe:e1:38:f4:9a:81:e0:4a:85:d0:
                    1e:fe:b5:08:ca:c8:b7:9a:be:69:c9:52:01:ab:f9:
                    13:a4:2e:6e:64:de:37:44:33:b1:cd:1b:3c:27:78:
                    7b:52:b4:46:d9:ed:67:77:0d:96:33:03:b4:a4:bb:
                    f1:38:b9:8c:8d:e5:aa:4a:4b:19:b7:9e:48:26:23:
                    0b:22:a2:87:cb:12:bf:4c:d3:2d:ce:09:6a:5c:d4:
                    16:59:43:8a:97:77:ad:96:69:51:6c:d3:a2:7c:bf:
                    73:39:58:b0:df:ce:55:9f:7f:d8:28:1c:f5:27:fa:
                    f9:7b:9e:fe:cd:6b:4d:e4:74:0a:49:d6:9b:99:93:
                    b7:cc:27:30:0f:ee:31:89:6b:1f:ca:61:9c:68:5d:
                    20:85:b6:7a:ab:6a:f2:3c:fb:50:29:3a:e1:1f:92:
                    e3:e8:2d:09:12:0e:b0:ea:50:e7:4f:af:36:3f:20:
                    8e:f8:fd:ed:a6:5e:f2:08:87:79:12:08:9a:ba:81:
                    75:99:49:36:a5:4d:88:7f:a1:a1:da:d3:01:6c:db:
                    5c:31:bc:e7:c9:39:8a:ac:6e:63:4d:05:3d:41:df:
                    78:70:fe:4c:2e:37:2c:df:fe:c5:27:e4:33:1a:21:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C5:7A:C4:D9:1B:D8:36:6D:86:F6:29:86:E1:12:F9:C8:B0:9F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41a6b062-fea4-345d-abbe-9ad39bd53c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.197.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:71:9a:3e:63:5e:7a:bc:3c:a6:2c:c6:56:d1:da:93:59:e5:
         5f:ce:af:9b:2c:f7:db:58:cd:5a:06:1c:7f:01:42:c8:9c:c2:
         8e:bc:b4:67:2d:26:71:58:03:e0:65:49:2d:1c:08:14:df:8d:
         3d:c8:10:cf:53:5f:88:8b:86:fd:64:8a:5a:98:5f:20:65:2d:
         16:fd:1f:e3:97:ae:23:36:91:6d:14:b1:7e:a1:24:e9:05:91:
         c6:7f:f8:bf:9d:e8:90:13:d3:6d:2a:9e:80:45:6d:df:7b:b8:
         a0:77:f9:d2:7d:13:ae:03:51:54:82:c8:88:5d:5f:20:e1:da:
         29:79:ef:d6:94:d0:20:17:36:b1:b5:23:33:5c:c0:e2:89:c3:
         3c:59:f5:3d:59:36:fe:5e:6a:bd:f5:f6:ff:76:03:d9:d8:0e:
         f3:b7:0e:8b:c3:a9:77:20:f5:63:b7:d2:c7:7a:eb:25:e8:00:
         3f:60:57:97:51:a4:5b:0f:e1:6d:9e:c9:c2:51:63:74:c0:28:
         b0:ed:cc:7d:7c:f8:f7:ed:0e:47:86:bb:83:74:ca:34:df:6a:
         6c:c3:b3:e5:f9:e5:4c:6d:87:28:5a:04:fe:fa:30:a4:b8:73:
         ba:2d:0c:75:e9:ab:55:4e:21:e5:8d:22:aa:20:f0:fb:01:14:
         6a:d6:f3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:11 2026 by rpki-client