Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5091de7b-3167-3a17-8536-139f0d960c2c.roa
File:                     5091de7b-3167-3a17-8536-139f0d960c2c.roa (raw, json)
Hash identifier:          tOsdcD2934GRq1zFJhTI6XiUftWb5SGEfXR1Tn29/lU=
Subject key identifier:   80:A8:D2:5B:D0:9B:C1:48:EE:90:FA:E8:D5:31:28:A4:04:48:34:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FFE56339F41C2473238E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5091de7b-3167-3a17-8536-139f0d960c2c.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        96.233.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:fe:56:33:9f:41:c2:47:32:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=fa495102-e0f4-4e61-b314-3cdd111fdb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:8f:e1:4b:52:3c:25:0b:7f:86:65:96:cf:
                    48:31:ea:4d:81:ee:70:8e:0c:c1:74:8e:e3:6f:b1:
                    a2:1d:c0:15:6a:bb:c2:ee:99:e4:75:e0:c9:f3:2c:
                    95:5d:f4:9f:dd:6e:87:19:4e:4b:12:c0:6e:e7:80:
                    aa:6b:37:cb:4c:50:c2:99:e9:d4:fa:bf:fe:bc:11:
                    0c:d1:ae:01:42:93:22:cf:5b:a5:eb:36:87:65:73:
                    a9:97:34:30:9c:a9:84:ef:fd:03:a0:34:08:f1:eb:
                    be:46:2e:18:fe:cd:07:6b:a5:a5:e5:60:53:04:ef:
                    ea:b4:09:91:05:44:ef:7f:dd:ab:32:13:68:3b:7d:
                    56:25:c9:ee:31:e6:02:f7:7b:3e:f8:20:22:47:90:
                    f9:a0:c5:66:07:63:e9:1f:dc:9e:8b:81:b9:06:26:
                    f3:45:3f:0f:eb:98:15:18:85:c4:a5:fb:91:82:71:
                    74:0b:48:12:f4:fc:18:92:38:e6:99:fb:d9:87:92:
                    74:2c:02:07:27:f2:da:28:c6:dc:5a:d1:8d:b0:0a:
                    2f:f4:46:2c:0b:c5:41:34:be:58:1b:1e:1a:81:70:
                    16:73:a3:44:f6:3e:bc:08:d6:81:09:1e:0a:44:96:
                    cf:a5:4e:61:5a:58:f8:0a:b1:05:4d:a2:22:97:c6:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A8:D2:5B:D0:9B:C1:48:EE:90:FA:E8:D5:31:28:A4:04:48:34:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5091de7b-3167-3a17-8536-139f0d960c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.233.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:00:49:d4:65:a1:72:1a:3a:d6:02:17:b4:2d:c9:38:b6:cb:
         dd:f1:7e:9a:f9:e9:6c:92:17:64:17:ec:b5:31:11:9f:51:7b:
         23:f6:97:7d:a2:4a:62:86:7c:43:f4:32:60:12:5b:76:48:a8:
         72:b9:77:3f:87:2c:cb:c0:8c:70:d7:73:69:c6:8e:84:00:35:
         19:5c:a7:08:32:b4:ea:49:7d:25:a9:b5:4b:1f:8f:05:6f:47:
         f6:ac:66:72:ec:7f:ac:95:42:ac:cd:88:5b:77:11:4c:22:bd:
         6a:eb:40:97:ee:44:e9:38:68:3f:df:05:b5:55:ed:ae:b0:5f:
         cc:30:8a:30:8a:84:81:43:d8:55:7e:59:45:ba:c9:cb:f0:be:
         b2:a6:64:15:e3:1e:c8:66:0d:66:ee:8b:cf:d6:e3:f1:0f:af:
         2d:88:ae:34:d7:5d:76:b6:62:1d:3e:2a:4c:1a:16:43:fc:c3:
         0d:92:37:1d:8b:a7:81:09:81:1d:31:8e:0e:1d:19:1e:9a:dd:
         1d:af:5d:0a:6b:6d:d2:33:9a:d3:c9:cd:02:9d:46:47:31:91:
         06:b3:cb:42:da:4f:a5:0e:9e:2a:15:75:00:67:be:f0:3a:f2:
         03:e7:dc:09:b9:3e:e7:42:77:3c:4d:dc:71:a8:b9:bf:7e:25:
         54:3f:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:01 2026 by rpki-client