Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa
File:                     4bbbcc06-2232-37d2-bdd4-b688153df820.roa (raw, json)
Hash identifier:          BwR2Cj1aAGjerX3LeNmjJmThBgAKVJM/vXDgL4EdJas=
Subject key identifier:   1B:58:DF:98:15:CF:13:BE:0B:F8:B4:8E:7B:3E:29:9C:FA:F1:DF:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A7C134D500E0253CE1610
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        207.68.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:7c:13:4d:50:0e:02:53:ce:16:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=646f575f-832b-467b-8cf4-82b05df5594d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:68:e0:65:65:5a:8d:95:e5:16:09:e8:46:
                    00:9c:be:3d:e2:01:e4:cb:8d:ec:d9:5c:e0:91:90:
                    0b:6b:51:b4:d6:22:a6:a3:d1:c1:2c:65:ec:7d:bb:
                    80:3c:01:57:30:88:1a:a0:95:b9:a7:02:d1:55:3f:
                    05:63:98:09:a2:34:70:27:fa:4c:9a:38:c6:ea:5c:
                    fe:12:34:06:65:81:a9:d5:42:06:b2:a1:e1:75:2d:
                    cf:d1:0a:89:b4:ad:93:8e:6f:31:01:9d:99:11:d8:
                    ec:34:85:c5:16:fa:f7:f7:fd:c0:12:f9:77:e1:8a:
                    68:e1:8c:6e:59:37:3b:d1:c0:32:eb:d7:b2:37:e0:
                    73:3f:d6:41:39:6e:4c:d8:b4:6c:14:6d:a0:1f:1c:
                    9a:d8:8d:9c:7b:23:a7:a0:49:de:25:d3:eb:c0:8a:
                    dc:cb:3d:ed:d0:9a:fd:6c:a1:23:66:66:04:6d:7d:
                    77:d8:ad:20:85:ee:6e:30:cf:60:a2:c9:5b:f2:68:
                    c4:e8:32:4f:5f:0e:75:03:7c:96:24:f2:15:8f:24:
                    1b:33:57:87:e3:11:56:b6:f3:78:1a:fa:8b:01:76:
                    1a:14:87:6f:86:0f:59:08:70:87:e6:5b:61:14:86:
                    d6:63:6c:14:9a:8a:4e:77:51:9d:3c:55:f2:ae:22:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:58:DF:98:15:CF:13:BE:0B:F8:B4:8E:7B:3E:29:9C:FA:F1:DF:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.68.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:81:82:86:3f:a0:9e:31:a6:2f:8a:32:19:ab:82:11:20:fe:
         5a:0f:7f:a9:c5:3c:32:76:79:96:76:b1:06:72:0b:f9:60:28:
         24:2c:82:a4:32:e8:e7:13:8f:8e:7f:e1:04:42:83:1e:9c:4c:
         ae:80:64:92:b8:e5:46:3f:cf:68:a4:d4:b2:bf:6c:f6:51:a6:
         01:45:58:af:49:4a:5c:bd:15:68:cf:66:40:96:1c:48:48:14:
         22:35:3d:7a:bd:8a:03:e6:bd:e9:36:58:f7:0b:d4:f6:50:cb:
         f0:81:c2:ee:e9:0f:58:bc:6b:2a:83:f5:0b:bd:e5:62:e5:10:
         24:55:70:0e:2d:93:8c:3b:a3:ec:b5:49:a7:0c:c5:bf:d2:49:
         34:7b:d8:e2:47:bf:0f:22:f5:35:e2:a3:b6:5b:1e:d7:ca:d5:
         37:1d:ec:97:10:bb:6f:59:f1:a5:79:2f:e2:cd:f5:1f:e2:19:
         f9:0f:56:88:9b:0f:57:49:45:1c:4d:28:13:fc:22:a6:b0:f6:
         ea:df:7b:11:e2:7d:bc:82:94:85:70:c2:32:41:32:92:3d:48:
         50:c0:73:ee:5f:59:a4:94:c8:95:b0:d4:ce:86:ae:2b:6a:2e:
         fb:1f:ce:47:1e:c2:b9:93:45:02:cc:ab:5e:30:be:ea:6e:07:
         0c:e2:02:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:52 2026 by rpki-client