Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa
File:                     96d8da12-f8f5-3746-a362-c6834b9b3d69.roa (raw, json)
Hash identifier:          3O2l7mvNVPeRNE7h6z1Yq3Ls+iMytJylGhZNrg5nRRM=
Subject key identifier:   2B:9E:9A:F4:18:C0:04:A8:68:39:D7:17:B8:06:EF:E7:82:2D:A4:A9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6C0FBC86AC44AAA804BE5600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     701
IP address blocks:        71.168.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:bc:86:ac:44:aa:a8:04:be:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=46e84d08-7e87-4e5a-9e86-3956549d4139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:e4:b9:32:5e:b1:37:89:c1:29:04:7b:2c:
                    3c:82:2d:20:b1:7c:dc:6e:46:28:8d:ca:ed:3d:8d:
                    42:0f:6a:a7:a2:68:91:cd:16:f0:f4:f4:10:64:a3:
                    a7:be:f7:44:f2:c1:c7:7e:1d:17:a9:7f:e8:5e:31:
                    ce:60:b3:ff:37:2d:3e:df:ee:86:64:52:1c:89:6c:
                    35:2c:34:18:6b:86:45:dd:48:a1:2f:22:d8:c1:8f:
                    69:ba:5c:07:b5:fd:2f:3b:ad:7a:68:e5:e2:09:b7:
                    a0:fe:33:82:db:0d:d2:32:6e:f7:69:19:39:6c:dc:
                    9a:49:47:3d:82:2b:d6:51:e5:ac:4f:9c:3e:e6:1c:
                    bf:8c:11:f7:f2:d9:f9:2d:b5:b4:de:d3:23:48:59:
                    30:07:f6:2f:e8:f8:ff:ef:e1:f4:5c:4d:b4:37:68:
                    14:f5:31:5e:e2:ed:e4:46:19:5f:61:17:fd:83:20:
                    3d:91:5e:65:67:d0:e8:5e:4d:0f:1b:30:40:7c:de:
                    7e:87:1d:38:24:90:51:32:ea:18:24:2b:02:e5:c9:
                    e5:67:d3:e2:91:db:e7:35:2e:c3:70:3a:61:68:6e:
                    68:a3:b0:fa:5e:43:9a:70:f9:84:4a:d0:1c:7f:26:
                    b5:ed:2e:ea:35:08:db:93:4a:ec:44:3d:bb:ab:c1:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9E:9A:F4:18:C0:04:A8:68:39:D7:17:B8:06:EF:E7:82:2D:A4:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96d8da12-f8f5-3746-a362-c6834b9b3d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.168.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:20:bf:31:4e:81:34:fd:49:af:f2:88:49:ee:84:c0:0e:d5:
         0e:e4:bf:81:12:a1:ae:d7:21:ea:c5:1a:6d:18:69:35:a5:ad:
         1d:25:ae:94:31:15:39:11:d3:2d:27:d9:ea:71:76:bc:ae:5f:
         35:e8:00:9c:8b:5e:af:31:65:43:96:50:e5:b6:8e:d6:df:9f:
         05:a8:ab:fa:05:c9:a1:c8:83:55:19:22:fb:7b:8c:56:bc:82:
         3c:d2:ee:11:f5:c8:70:79:94:2a:57:29:36:4c:eb:bd:4f:93:
         20:ed:79:b2:b5:49:d0:59:dd:1d:42:3b:c0:66:bd:ee:57:a0:
         2b:23:d0:1b:9c:77:62:74:58:4b:00:02:18:bd:f1:1f:84:22:
         d2:c8:83:3b:8f:ba:ad:15:f0:94:81:00:8b:b2:fe:77:c1:19:
         e3:61:21:cd:29:d8:c3:75:28:f8:22:91:a2:d6:42:d1:1e:8d:
         cb:0e:f1:6d:bc:05:69:76:81:6c:7d:2d:46:79:f6:7b:57:42:
         b9:2c:8a:80:a0:47:7f:82:bb:75:95:5e:04:a3:78:5d:5e:a6:
         84:7b:4a:d5:60:70:04:b8:e5:7c:06:17:e6:ea:63:ef:9b:c5:
         a0:1a:69:d7:54:5f:a0:fe:10:7b:b1:84:31:f6:4e:23:da:de:
         a8:0e:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:58:35 2026 by rpki-client