Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c7717cb-c314-34ca-8d7a-2ca527dc030d.roa
File:                     7c7717cb-c314-34ca-8d7a-2ca527dc030d.roa (raw, json)
Hash identifier:          WgUPqdnlfqUdZ8Jq1ZFi9q6muxrVj4xM8hMCjujsWCU=
Subject key identifier:   24:98:16:A6:F7:41:71:6F:69:A5:DC:72:DF:37:5E:49:62:65:04:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD489B258D588DE6BDB040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c7717cb-c314-34ca-8d7a-2ca527dc030d.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     701
IP address blocks:        151.199.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:48:9b:25:8d:58:8d:e6:bd:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=9159d115-633f-48a5-a5cb-46a569050298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:d2:2a:07:f3:d1:6c:62:2d:0c:f7:02:14:
                    f3:a0:ea:6b:17:b3:79:56:e8:d1:f1:69:9c:70:9b:
                    3a:58:8b:1b:69:8d:b0:dc:5d:26:28:a7:47:32:1f:
                    ec:77:a5:0e:06:ee:5c:af:10:2f:40:2d:38:7f:18:
                    4d:33:32:8f:ec:1e:e7:38:c0:8f:3c:77:54:99:87:
                    51:88:2a:6a:94:cb:d9:cb:f1:33:1f:75:41:0b:ae:
                    bf:b6:88:33:be:c8:66:77:ef:41:3c:3d:98:65:1a:
                    07:2c:27:3f:13:89:42:b6:66:43:cf:ab:10:67:cc:
                    f9:88:12:8e:2c:d7:2b:c5:3a:30:b2:e4:31:ee:cf:
                    d2:b9:c2:37:32:08:ee:cf:51:09:c9:62:b6:56:05:
                    6e:11:54:99:2e:02:d6:68:b9:a1:ce:8d:88:3d:0d:
                    23:51:26:74:4a:68:62:05:85:5c:7b:ee:f7:3d:2b:
                    4d:0d:c2:c1:89:26:bf:9c:3a:d2:1c:90:38:68:a6:
                    56:ae:41:a4:4e:65:d2:d8:92:63:2c:b7:f4:14:43:
                    3a:7e:95:eb:d4:9d:45:f6:c2:25:3f:39:d1:07:27:
                    53:a2:7b:ea:4a:d0:3f:17:5a:a1:47:d1:09:e1:34:
                    c8:9c:e6:5d:bf:dc:33:46:c1:ed:ee:99:52:03:05:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:98:16:A6:F7:41:71:6F:69:A5:DC:72:DF:37:5E:49:62:65:04:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c7717cb-c314-34ca-8d7a-2ca527dc030d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.199.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:24:d3:e3:cd:26:d6:d0:70:b1:e6:a2:cb:a6:f5:6c:51:3e:
         23:73:cf:fd:10:fc:32:44:16:56:f9:7b:00:6b:9b:ee:01:4e:
         04:24:a7:1b:e2:00:1f:79:51:58:e5:31:ae:4b:79:7d:c5:e4:
         b4:1c:f9:bf:d5:7b:14:07:e2:a8:88:4b:d0:0d:81:f6:8a:f7:
         cc:6c:f0:4a:c8:cd:b7:6d:c5:24:e0:3a:f0:d6:25:7b:2e:9e:
         11:24:5d:00:7b:3f:f1:c7:6c:77:0d:54:57:b8:3f:a7:40:c4:
         55:21:2c:c7:0e:50:eb:e6:4f:9e:92:07:5d:be:0b:ca:aa:3e:
         b3:a7:cc:71:6c:8e:b6:d7:b1:f1:a8:04:46:56:bb:a8:5b:6d:
         67:73:e2:b4:b2:ea:28:9c:21:97:70:77:7c:7b:65:b1:29:dc:
         8d:c0:5f:cc:ad:24:ee:12:73:b4:4f:47:6b:e8:0a:72:e2:37:
         b7:81:c8:bc:d5:54:ba:83:b3:ae:93:cf:87:dd:a5:80:84:07:
         7b:e6:17:6d:6e:17:23:1a:6f:42:65:bf:dd:ed:13:49:84:53:
         63:e1:e6:c3:4b:d1:a5:34:ff:cd:f4:12:c5:72:be:90:20:37:
         08:38:9c:b9:8f:33:fd:f5:27:76:a1:15:f6:aa:f7:3a:1c:e6:
         94:23:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:10:49 2026 by rpki-client