Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0888830f-9979-3c7e-a853-4d281ad3f3b8.roa
File:                     0888830f-9979-3c7e-a853-4d281ad3f3b8.roa (raw, json)
Hash identifier:          8TiCu2BkKLyIvY7XmZmAti+6e+Jdv/6CNeNrmEmS+Bw=
Subject key identifier:   0C:86:25:D8:0C:8A:29:73:A3:6C:EC:F0:58:24:F4:1F:86:E5:B0:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E54B4D0ABB8499D925620D440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0888830f-9979-3c7e-a853-4d281ad3f3b8.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        70.18.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:d0:ab:b8:49:9d:92:56:20:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=7d288cb8-2157-4912-9040-baf35697ec72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:7d:9f:ab:93:f9:1d:0b:9b:0b:ba:94:02:
                    2f:68:18:ed:5d:39:23:52:71:e3:6f:67:10:71:b7:
                    c5:2b:1f:2d:71:6a:18:d6:1b:26:bc:8a:42:e4:ef:
                    70:44:31:67:88:0e:23:4d:5e:4b:70:04:a2:dc:49:
                    bd:99:c8:64:14:5e:d7:64:87:12:0e:8f:c1:82:2c:
                    c4:7a:37:cc:31:fb:be:ff:f5:dd:c0:ce:06:ce:34:
                    7f:9b:af:07:c5:07:cb:5b:d2:24:04:7a:91:b5:d8:
                    29:81:13:48:8c:da:ea:9e:1f:b8:1b:62:65:09:d4:
                    98:de:01:15:7e:10:a3:6a:aa:f0:c5:3b:ae:ac:59:
                    5b:0b:77:a9:80:46:65:7f:bb:77:4d:aa:1a:b8:71:
                    a6:7c:21:56:40:0f:63:9b:d1:5a:37:2c:7a:75:2e:
                    ec:ab:a8:30:e1:49:5f:b7:aa:f4:0e:b6:ba:ca:6a:
                    91:76:f1:7c:3f:b5:4a:01:8c:7d:20:36:4a:95:12:
                    c1:a6:5d:f4:3b:c0:11:da:21:45:c3:19:05:be:42:
                    56:7e:d4:8e:04:6c:5f:01:8f:87:a2:02:50:02:43:
                    a7:66:5a:6d:d2:d2:89:d5:77:0b:86:51:f8:3a:8a:
                    b1:8f:d5:e2:0a:33:46:a3:23:2c:1c:0a:9a:2c:43:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:86:25:D8:0C:8A:29:73:A3:6C:EC:F0:58:24:F4:1F:86:E5:B0:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0888830f-9979-3c7e-a853-4d281ad3f3b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.18.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:77:4d:0d:b6:37:50:e7:34:42:21:bb:14:29:eb:eb:03:ca:
         22:4f:df:96:b4:e1:52:2b:f6:d4:b3:33:67:91:9e:b5:2e:84:
         ed:ff:34:86:ac:73:57:89:86:2f:16:7d:90:83:74:29:5d:66:
         5e:90:11:c9:33:03:50:91:9e:94:df:0d:f0:ef:8d:9e:43:6c:
         1c:17:9e:99:ab:49:7a:cd:9e:d9:f4:da:50:90:55:7b:2a:02:
         2c:f6:cf:37:d7:90:64:03:4f:90:a4:9a:1c:be:f7:d2:aa:98:
         aa:12:3b:c9:cd:4b:8d:cf:75:fa:93:04:db:73:e7:19:5c:83:
         0e:9a:51:b8:e6:33:07:8b:f8:7c:a6:9b:16:52:d8:ce:d4:42:
         d0:de:ee:a5:42:33:32:de:0d:e8:de:38:03:8b:e7:a4:cf:45:
         b7:76:b2:a8:c5:4a:75:08:e5:23:41:cf:f3:38:3f:28:df:6a:
         a7:21:5d:fa:ca:e6:2a:0d:b6:23:1d:0a:cf:09:44:63:2b:6e:
         dc:62:c7:cf:3b:09:c9:75:43:87:a0:78:a2:f1:83:21:28:9c:
         d6:62:6e:a8:7a:89:da:dc:8c:c5:b8:63:d5:34:44:f6:20:95:
         29:03:ae:7b:6e:50:31:72:1b:8d:f4:2c:e4:1f:00:dc:1a:80:
         25:ed:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:41 2026 by rpki-client