Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536ae49e-dd8e-3258-9632-12418f5ff32b.roa
File:                     536ae49e-dd8e-3258-9632-12418f5ff32b.roa (raw, json)
Hash identifier:          97svZJMupg33Y0TmpncEsGPB4OAQd9L/g7nUHhTq/5I=
Subject key identifier:   FE:02:17:2B:7D:EA:A9:8A:5B:F7:EB:CA:7A:37:AA:33:FA:38:54:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE0CF2B4032FD649C7400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536ae49e-dd8e-3258-9632-12418f5ff32b.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        96.248.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e0:cf:2b:40:32:fd:64:9c:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=9b14f390-8492-49ca-844c-9c505fbfe662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:f6:7b:2e:63:e0:5d:37:85:33:7b:85:f3:
                    b3:ae:7f:17:ec:d7:15:82:6d:a0:d7:cd:06:ed:f8:
                    14:c5:d5:cb:6f:8a:23:9f:81:8e:19:6b:7d:3c:b2:
                    62:d4:0d:ac:f0:49:21:50:8a:77:71:29:8c:90:20:
                    94:b0:42:cd:98:91:c5:f1:c7:66:ac:ff:83:d3:03:
                    93:36:87:f7:ed:e9:d2:4f:91:ac:ba:a6:4b:23:3e:
                    bf:1e:55:46:2e:f9:dd:fd:5e:6e:1b:2a:89:14:b6:
                    b9:74:fb:2f:8a:b5:63:0a:ba:13:18:e3:70:07:b3:
                    b9:ce:7b:b5:fe:ca:52:22:bb:a0:47:57:a8:78:6a:
                    a3:a7:f0:d1:f6:b6:3a:b1:50:bd:79:a0:4c:2d:e7:
                    39:57:cb:2b:77:23:14:3e:46:a1:3b:34:23:e1:fd:
                    6c:20:10:6c:32:ac:47:e1:2f:14:bb:0a:ea:62:a1:
                    13:73:6c:84:d6:8c:e2:1d:b6:3e:e7:ce:48:92:e7:
                    38:14:42:80:c1:fb:62:65:34:29:27:63:2b:b4:a7:
                    ce:94:6d:ec:91:01:85:fb:74:dd:ff:a4:99:8d:b4:
                    33:1e:dd:a9:73:7f:f5:d9:f6:da:e6:e0:67:37:8e:
                    e8:17:96:a5:07:e8:75:d0:9c:62:f1:9c:e8:d3:28:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:02:17:2B:7D:EA:A9:8A:5B:F7:EB:CA:7A:37:AA:33:FA:38:54:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536ae49e-dd8e-3258-9632-12418f5ff32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.248.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:75:de:c2:79:ee:9b:bf:2e:a5:4f:eb:d1:30:cd:41:f3:9b:
         a3:34:ad:af:4c:c3:d4:ab:aa:b3:1d:a5:63:3e:ea:a1:3f:eb:
         a1:4f:2b:c2:4a:05:1e:08:72:07:fa:64:e0:f4:e5:cc:9c:47:
         19:c6:5b:70:dc:be:5d:24:6e:77:8b:aa:fe:a4:20:fd:76:89:
         75:2d:5a:45:71:6e:7b:4c:ef:ed:c2:b7:e6:44:db:27:5c:a5:
         6d:3e:fc:41:22:46:57:0b:1f:34:1d:11:f9:f6:cb:cf:5a:95:
         31:43:e7:ac:89:36:b0:2c:13:0b:22:ac:c6:72:44:b7:a9:b9:
         c9:fe:c7:62:a3:3e:51:f9:85:ca:8a:10:74:2b:6a:b6:9a:35:
         b1:c3:30:a6:e7:72:44:9f:21:00:93:f6:d8:d6:4a:02:74:3b:
         d8:32:51:3f:ec:de:64:9d:45:c6:a7:41:83:6c:04:4a:57:d0:
         38:a0:6f:01:1f:db:f3:64:01:22:27:67:a7:75:fc:ea:f3:90:
         3c:1b:bf:01:8b:10:4a:de:fc:d9:56:e2:04:0b:ee:a0:24:2c:
         fb:54:d1:13:5d:d1:17:07:fd:41:1d:1e:70:de:65:34:e0:24:
         0e:99:ea:35:89:89:47:cb:0d:96:c9:76:2c:e7:98:7f:00:05:
         a5:98:a2:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+DPK0Ay/WScdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
OWIxNGYzOTAtODQ5Mi00OWNhLTg0NGMtOWM1MDVmYmZlNjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q/2ey5j4F03hTN7hfOzrn8X7NcVgm2g180G
7fgUxdXLb4ojn4GOGWt9PLJi1A2s8EkhUIp3cSmMkCCUsELNmJHF8cdmrP+D0wOT
Nof37enST5GsuqZLIz6/HlVGLvnd/V5uGyqJFLa5dPsvirVjCroTGONwB7O5znu1
/spSIrugR1eoeGqjp/DR9rY6sVC9eaBMLec5V8srdyMUPkahOzQj4f1sIBBsMqxH
4S8UuwrqYqETc2yE1oziHbY+585Ikuc4FEKAwftiZTQpJ2MrtKfOlG3skQGF+3Td
/6SZjbQzHt2pc3/12fba5uBnN47oF5alB+h10Jxi8Zzo0yh/ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4CFyt96qmKW/fryno3qjP6OFQdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTM2YWU0OWUtZGQ4ZS0z
MjU4LTk2MzItMTI0MThmNWZmMzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYPhAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKR13sJ57pu/LqVP69EwzUHzm6M0ra9Mw9SrqrMdpWM+6qE/66FPK8JK
BR4Icgf6ZOD05cycRxnGW3Dcvl0kbneLqv6kIP12iXUtWkVxbntM7+3Ct+ZE2ydc
pW0+/EEiRlcLHzQdEfn2y89alTFD56yJNrAsEwsirMZyRLepucn+x2KjPlH5hcqK
EHQraraaNbHDMKbnckSfIQCT9tjWSgJ0O9gyUT/s3mSdRcanQYNsBEpX0DigbwEf
2/NkASInZ6d1/OrzkDwbvwGLEEre/NlW4gQL7qAkLPtU0RNd0RcH/UEdHnDeZTTg
JA6Z6jWJiUfLDZbJdiznmH8ABaWYog4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:32 2026 by rpki-client