Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96140c95-b70d-3871-a74f-b5617a9e082f.roa
File:                     96140c95-b70d-3871-a74f-b5617a9e082f.roa (raw, json)
Hash identifier:          77RehXLpPUC/POZ7rFWKXWcK4H0PQfRC1sNw1JZrnTY=
Subject key identifier:   34:BA:EB:81:31:BD:F5:11:B9:7F:00:FE:F4:65:15:ED:21:DE:44:E0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7937F993CCFEF46889E0E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96140c95-b70d-3871-a74f-b5617a9e082f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     17119
IP address blocks:        208.197.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:7f:99:3c:cf:ef:46:88:9e:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7c16d8b3-120d-4197-89c0-d984fac74ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:41:83:ea:f3:07:86:9b:d0:ae:87:35:17:
                    68:59:3a:78:44:97:7b:ed:ae:12:a6:7d:24:63:d5:
                    87:64:9f:85:d4:2d:75:2f:2b:f6:6a:43:ad:f5:1e:
                    44:88:77:5e:86:38:5a:12:51:5a:7d:cf:bf:08:5d:
                    32:bd:52:7b:97:58:61:5f:05:4d:05:51:87:c2:04:
                    8a:37:2a:aa:c3:46:3b:6c:31:a4:28:20:c5:8b:86:
                    3f:3d:bb:35:e3:38:a7:bf:c1:1b:79:78:cc:0f:92:
                    ba:89:c1:1a:33:04:1f:5d:cb:c3:76:57:29:35:11:
                    71:4b:32:14:79:6a:0b:4f:9e:e8:7e:ac:80:44:5c:
                    9f:6a:dd:ff:3b:1c:29:8f:5b:a3:1e:fb:d0:4e:c6:
                    21:a7:c4:d5:08:e5:3f:b8:6a:73:b2:5f:6e:39:f5:
                    e2:56:13:46:25:48:99:9f:f4:b6:01:e4:88:a2:b7:
                    2c:b0:32:30:8c:e6:11:f0:90:e5:3e:ae:98:db:dc:
                    0c:cb:27:8f:4b:54:48:ef:eb:65:ef:7d:b1:04:39:
                    af:4c:89:73:7f:b1:62:09:0c:01:e9:93:50:64:12:
                    8a:26:c1:3a:52:86:fc:3a:77:60:06:fd:85:a6:4c:
                    77:f1:2d:e2:eb:02:ca:05:49:f8:d4:b5:d1:da:2e:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:EB:81:31:BD:F5:11:B9:7F:00:FE:F4:65:15:ED:21:DE:44:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96140c95-b70d-3871-a74f-b5617a9e082f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.197.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:c9:98:08:ea:62:1d:91:4b:77:64:39:6d:db:91:76:06:5d:
         75:af:4e:9a:bd:ea:1b:ee:f3:c6:46:1a:00:0d:b1:df:91:31:
         d6:1a:60:a9:b5:a2:28:8c:9e:26:4e:c4:d1:ab:8d:d6:03:5f:
         8c:ec:3f:de:60:c3:d7:4e:01:fc:57:1c:59:d2:f5:4d:18:19:
         0d:3a:e4:b8:6b:b7:f6:f8:b8:c4:b0:52:cb:09:57:54:aa:95:
         08:ba:8e:bd:e9:2f:32:9e:e0:f2:6c:59:c4:61:fb:14:38:47:
         b6:be:36:f9:66:5a:22:9d:f3:83:db:6b:ed:7f:99:34:77:ee:
         6b:60:fc:da:b3:3f:69:b5:33:fd:62:bd:f0:03:68:55:2b:5f:
         13:23:e7:b0:c1:6d:c1:7d:ba:cc:e0:59:c0:8c:94:5e:d9:3a:
         13:15:c9:2c:a3:6b:f1:96:5a:6e:82:f7:77:a2:26:60:36:35:
         26:ac:b5:00:07:f4:21:72:a8:c4:0c:dd:b0:25:a7:3c:99:75:
         fa:ce:c3:fb:bc:ee:69:3d:b7:83:72:c1:dd:20:bf:8e:da:21:
         55:e8:64:ff:36:0d:5a:2b:6e:6a:17:27:4c:a4:23:fd:15:0e:
         5f:19:eb:4b:8a:7c:6a:13:63:ee:95:a8:69:69:ec:6b:54:e0:
         18:b8:50:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk3+ZPM/vRoieDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
N2MxNmQ4YjMtMTIwZC00MTk3LTg5YzAtZDk4NGZhYzc0Y2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd9Bg+rzB4ab0K6HNRdoWTp4RJd77a4Spn0k
Y9WHZJ+F1C11Lyv2akOt9R5EiHdehjhaElFafc+/CF0yvVJ7l1hhXwVNBVGHwgSK
Nyqqw0Y7bDGkKCDFi4Y/Pbs14zinv8EbeXjMD5K6icEaMwQfXcvDdlcpNRFxSzIU
eWoLT57ofqyARFyfat3/Oxwpj1ujHvvQTsYhp8TVCOU/uGpzsl9uOfXiVhNGJUiZ
n/S2AeSIorcssDIwjOYR8JDlPq6Y29wMyyePS1RI7+tl732xBDmvTIlzf7FiCQwB
6ZNQZBKKJsE6Uob8OndgBv2Fpkx38S3i6wLKBUn41LXR2i6f8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDS664ExvfURuX8A/vRlFe0h3kTgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTYxNDBjOTUtYjcwZC0z
ODcxLWE3NGYtYjU2MTdhOWUwODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0MUlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALbJmAjqYh2RS3dkOW3bkXYGXXWvTpq96hvu88ZGGgANsd+RMdYaYKm1
oiiMniZOxNGrjdYDX4zsP95gw9dOAfxXHFnS9U0YGQ065Lhrt/b4uMSwUssJV1Sq
lQi6jr3pLzKe4PJsWcRh+xQ4R7a+NvlmWiKd84Pba+1/mTR37mtg/NqzP2m1M/1i
vfADaFUrXxMj57DBbcF9uszgWcCMlF7ZOhMVySyja/GWWm6C93eiJmA2NSastQAH
9CFyqMQM3bAlpzyZdfrOw/u87mk9t4Nywd0gv47aIVXoZP82DVorbmoXJ0ykI/0V
Dl8Z60uKfGoTY+6VqGlp7GtU4Bi4UDA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:02:34 2026 by rpki-client