Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9176a99f-0dbe-36c4-b707-9a0d7a97e851.roa
File:                     9176a99f-0dbe-36c4-b707-9a0d7a97e851.roa (raw, json)
Hash identifier:          /pdnjt0+JCPyGM8ytzKM7s3048Rql7JSTihiRRj33Hw=
Subject key identifier:   30:F0:7C:26:21:79:CA:05:ED:4A:C5:07:8A:92:74:29:82:00:03:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6515312F7FF5E75F416F9300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9176a99f-0dbe-36c4-b707-9a0d7a97e851.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     701
IP address blocks:        71.126.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:31:2f:7f:f5:e7:5f:41:6f:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=467fe9c3-dd88-4ad7-9f68-36ba3ee94317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e5:a1:f1:5f:85:a5:e4:76:76:66:c3:7b:61:
                    7f:63:30:93:1c:bd:0a:03:51:3d:ff:79:64:2b:5c:
                    90:34:72:83:91:0d:de:3f:7b:1f:9f:d2:14:80:e3:
                    0a:74:2a:96:18:a5:5f:13:71:7d:d9:8b:8e:05:67:
                    34:d7:5f:a6:a3:cd:9a:29:a8:da:a4:2c:a5:bb:ff:
                    52:db:fe:9b:5c:ec:bc:13:45:63:ec:87:43:98:2b:
                    7d:13:f7:d2:f0:30:3b:c9:d4:ca:0c:17:c8:11:ba:
                    ef:a3:0d:3f:06:05:85:75:91:25:4c:d6:90:a3:b1:
                    63:ee:30:62:2b:80:f6:4b:06:a4:bf:3f:99:ec:88:
                    86:6b:bd:83:a7:7f:02:14:ad:3b:b3:ac:b6:de:d8:
                    f2:4b:71:84:20:e0:59:df:7d:66:6e:74:93:9b:cd:
                    78:f0:d5:66:f2:06:4f:6b:97:13:91:f9:24:03:85:
                    56:64:e0:03:56:e7:ac:79:64:9d:dd:d2:f0:9c:f7:
                    e9:dd:f7:7c:86:70:ca:3e:9b:2f:d8:19:94:b1:d9:
                    b9:55:e6:ac:3b:20:81:84:47:53:56:34:1b:ac:7e:
                    ee:85:ec:6d:b0:ff:bd:21:8a:f1:11:fd:e6:47:b2:
                    50:82:7b:55:84:2d:75:ad:80:36:5d:ce:4f:59:ed:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F0:7C:26:21:79:CA:05:ED:4A:C5:07:8A:92:74:29:82:00:03:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9176a99f-0dbe-36c4-b707-9a0d7a97e851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.126.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:4d:6b:5f:c0:3e:2b:41:81:af:e3:30:46:3e:bf:5b:89:
         01:15:5f:57:2a:99:40:76:56:79:49:15:21:48:ea:c0:7c:bc:
         a7:c1:6b:a5:2f:d0:1d:ad:c0:9f:a3:7c:74:d9:bc:3f:2d:19:
         85:27:81:b9:9c:45:a6:ca:dd:6c:d6:2a:7e:cf:3d:3f:6d:e8:
         8e:4a:06:3b:52:72:d5:85:27:ec:45:ad:db:ed:9e:4b:28:de:
         ef:8e:46:9d:ca:e4:b6:fa:d3:9f:2c:68:7a:43:6f:a1:96:38:
         de:84:51:2b:33:95:03:bf:1c:7b:59:08:e1:cb:8a:de:51:e5:
         d1:73:dc:e3:98:67:60:38:fd:ac:57:34:f5:15:55:bd:0a:45:
         89:b5:cd:9b:00:b0:36:0e:5d:b8:50:1e:18:16:c5:7a:20:e8:
         b0:2d:c2:e0:bc:ba:b6:5a:09:23:eb:39:9b:da:01:f2:1b:f8:
         e6:cd:ab:83:45:79:45:84:e0:7a:fc:68:cd:df:01:72:96:56:
         9a:54:b9:12:ca:21:19:1a:db:a6:ba:46:b8:36:f7:f2:cf:5a:
         88:b6:1a:ff:d1:8e:f1:d7:de:be:7e:f6:0d:6c:1f:03:29:16:
         8a:1d:3b:fb:05:a8:f0:62:03:3a:33:b7:ae:48:a3:a8:c2:aa:
         50:fd:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:51:20 2026 by rpki-client