Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc94a798-1ca4-3439-91cb-2ff752b1d0c4.roa
File:                     dc94a798-1ca4-3439-91cb-2ff752b1d0c4.roa (raw, json)
Hash identifier:          9fRI49EA1wPTPepAauPzfUnxA4gnQiA7nHVzCk7LvQU=
Subject key identifier:   A6:48:C1:E8:44:AF:E0:8C:48:93:0F:47:C8:0A:89:0F:9E:80:6E:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79002596CF1F971CEC88440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc94a798-1ca4-3439-91cb-2ff752b1d0c4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395650
IP address blocks:        65.246.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:02:59:6c:f1:f9:71:ce:c8:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=734a6487-4481-4b6c-a8eb-55a0c89af4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:67:f7:58:5c:13:55:59:b9:01:1e:39:b3:
                    bf:b7:75:81:ce:e1:e1:5f:f7:4b:e4:f2:31:c3:ae:
                    b3:95:ac:40:51:fc:e5:16:8d:ab:ce:52:72:2f:fc:
                    25:d6:f9:fc:97:37:b7:f5:74:7a:98:a1:b2:41:36:
                    13:5a:a0:5d:ff:ce:9f:72:47:62:f6:f8:38:dd:7c:
                    e0:c7:c2:83:a3:e5:75:ce:80:46:dc:11:84:81:d9:
                    aa:e1:4d:2c:9a:42:1d:09:eb:c6:33:e7:19:e6:2b:
                    e4:c8:b6:aa:6f:6e:21:25:47:27:cb:dd:08:f7:66:
                    ac:70:35:8a:b6:8d:9e:4d:cc:d3:73:e5:ea:96:df:
                    fb:eb:da:50:75:0d:26:89:a4:7a:6a:f6:c3:16:b7:
                    69:31:31:10:4d:c3:83:97:f6:70:77:fe:1f:67:7a:
                    4d:53:ce:3e:36:a7:aa:14:6a:c7:6c:7b:f4:a8:b1:
                    01:a1:9f:fc:9f:d8:40:ec:79:9a:6a:9e:54:a9:16:
                    c8:c2:0a:97:a4:09:55:3c:96:4b:ad:7e:fa:40:7d:
                    12:20:52:27:3e:2b:48:f8:36:43:f9:b5:f0:63:7a:
                    2d:5d:83:c9:a8:14:45:72:e9:c6:a0:8f:03:60:f5:
                    62:5d:9d:3b:9f:4b:44:5e:92:c5:45:24:79:55:60:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:48:C1:E8:44:AF:E0:8C:48:93:0F:47:C8:0A:89:0F:9E:80:6E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc94a798-1ca4-3439-91cb-2ff752b1d0c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.246.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:8d:83:de:e9:35:94:12:50:3c:a5:c9:9a:fb:e9:46:cc:5d:
         1b:5b:2d:5f:91:fb:7a:e5:1c:09:60:a4:19:25:a9:09:6c:06:
         d3:d4:7d:e0:55:8f:b5:d8:a2:9b:9a:42:5a:63:d1:28:c3:ae:
         07:b0:6a:d6:87:c8:5f:5b:b2:11:26:4b:d6:12:76:fd:ab:11:
         49:60:3a:2b:5f:51:39:3d:56:0b:7d:38:b1:ad:e3:49:1b:67:
         ae:2b:06:3c:ac:9c:a0:6c:bb:11:77:8d:a1:9a:63:b6:a2:a2:
         18:5c:d0:e2:ae:8c:6e:6c:1d:41:a0:7f:36:b3:89:6a:1c:e0:
         eb:f5:67:be:52:af:9f:fc:5b:4d:e2:59:94:d9:cd:3c:16:dd:
         4a:98:d0:2a:2b:12:cb:5d:14:9a:76:86:4f:a2:de:6a:e5:25:
         39:b4:08:d1:6a:27:31:f9:96:b0:3e:b2:f8:42:39:b3:f2:4f:
         45:a2:13:99:cf:27:30:ce:e3:b8:69:5c:ef:99:d3:df:d5:86:
         4a:9b:1a:a5:09:c0:0b:d9:ba:fc:42:6a:5d:98:c7:07:de:67:
         44:05:56:cf:89:86:ec:f9:19:36:59:ae:54:0b:7e:d5:df:ea:
         d1:a0:fd:b2:25:39:70:0a:66:bd:4c:3a:0e:d0:78:31:db:5b:
         92:32:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:33:17 2026 by rpki-client