Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f71f08-1cb3-34d0-9506-7b7499438aa5.roa
File:                     14f71f08-1cb3-34d0-9506-7b7499438aa5.roa (raw, json)
Hash identifier:          zYVSCSsx+qEUTJwJBdas93TniDTNij7f/C+vBYuhgF4=
Subject key identifier:   99:D1:60:72:17:F6:EF:76:08:D2:C0:35:7C:40:21:F9:29:FD:CD:9F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05A6A3A4B3DF6B12E2E900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f71f08-1cb3-34d0-9506-7b7499438aa5.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        71.250.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a6:a3:a4:b3:df:6b:12:e2:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=9ec4f725-419e-400a-8aa8-6dbf3368de19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:4c:a8:86:2a:a1:15:46:58:57:58:51:77:
                    7f:69:dd:80:9e:a1:90:b4:7b:7d:54:2b:44:af:7b:
                    9d:89:81:01:3f:b9:a2:1a:3e:53:e0:d4:2c:10:b9:
                    49:c2:c4:e8:77:f9:5d:ac:d2:f2:41:6e:6c:43:f0:
                    1d:a1:86:a7:58:88:92:0c:51:31:26:7d:74:80:e4:
                    f8:95:bf:3e:36:90:e9:3d:62:07:e0:37:12:f8:0b:
                    18:fa:2a:6b:ed:6c:63:5d:83:49:ae:67:2c:a3:40:
                    c1:de:64:c6:27:8e:79:6a:91:eb:f4:3e:3e:5f:06:
                    8c:d0:e8:5b:54:d8:b4:b0:fe:3a:fa:f5:61:9c:29:
                    7d:ea:12:e8:f5:95:99:52:20:11:21:0b:08:a9:ed:
                    a8:8a:91:04:a1:9e:f2:c2:32:d3:e4:9a:ca:84:de:
                    ac:a1:98:fc:b1:7d:3b:3e:c7:f9:90:c0:63:ab:66:
                    5c:cb:b5:9d:5a:b3:00:c4:c4:75:ec:60:78:32:bd:
                    ee:44:b9:89:fe:ef:7f:d4:20:40:1d:eb:20:89:ab:
                    9e:33:88:e4:2a:ab:63:e2:c7:59:15:00:06:49:f5:
                    52:8a:2a:2d:9c:01:66:40:c2:8a:2a:3f:7f:7c:a2:
                    31:2a:e5:05:58:4f:57:27:07:aa:a5:d7:5c:33:20:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D1:60:72:17:F6:EF:76:08:D2:C0:35:7C:40:21:F9:29:FD:CD:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f71f08-1cb3-34d0-9506-7b7499438aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.250.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:94:e1:6a:e1:d4:16:80:94:7a:72:47:99:3b:90:90:d3:28:
         e5:46:3f:e4:44:d2:5b:a4:0b:78:4a:31:3f:25:06:67:5b:db:
         34:2c:0d:6d:f2:7c:e5:60:4e:25:d9:ac:5e:f7:75:94:4d:88:
         ab:86:fb:a1:b9:f1:18:0e:97:f2:a0:c7:72:0b:8f:51:99:4c:
         10:0d:f9:50:1c:d9:f9:ea:a1:f1:3d:77:c8:35:d3:d0:a7:67:
         b9:ea:46:95:06:52:3f:7c:0c:aa:8a:8d:aa:a9:2d:f2:10:22:
         90:e9:20:27:ef:84:28:0a:07:5b:bd:d1:ff:ce:7d:4d:72:3b:
         64:c2:c1:1a:28:8f:2a:ae:ed:e4:48:9c:2a:b4:38:29:14:10:
         71:cd:dc:65:18:e3:cc:78:4a:ef:b3:b0:e7:34:02:47:41:cd:
         3f:ef:8c:54:82:cb:9d:34:e5:42:7d:7e:a9:e9:76:53:65:e5:
         96:d3:15:b9:c9:94:07:ec:c7:c3:a2:1a:d5:bf:63:04:1a:81:
         ce:a9:96:5f:b6:31:0c:47:24:d1:77:f6:c7:13:29:17:b9:33:
         e1:86:f3:d8:ad:49:03:d7:5b:91:d7:8d:60:fa:d1:e6:3c:dc:
         96:dd:06:a9:36:e1:70:e3:a3:90:b5:13:c6:d7:0f:6e:9f:80:
         0f:53:f7:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaajpLPfaxLi6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
OWVjNGY3MjUtNDE5ZS00MDBhLThhYTgtNmRiZjMzNjhkZTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnhMqIYqoRVGWFdYUXd/ad2AnqGQtHt9VCtE
r3udiYEBP7miGj5T4NQsELlJwsTod/ldrNLyQW5sQ/AdoYanWIiSDFExJn10gOT4
lb8+NpDpPWIH4DcS+AsY+ipr7WxjXYNJrmcso0DB3mTGJ455apHr9D4+XwaM0Ohb
VNi0sP46+vVhnCl96hLo9ZWZUiARIQsIqe2oipEEoZ7ywjLT5JrKhN6soZj8sX07
Psf5kMBjq2Zcy7WdWrMAxMR17GB4Mr3uRLmJ/u9/1CBAHesgiaueM4jkKqtj4sdZ
FQAGSfVSiiotnAFmQMKKKj9/fKIxKuUFWE9XJweqpddcMyCIPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnRYHIX9u92CNLANXxAIfkp/c2fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTRmNzFmMDgtMWNiMy0z
NGQwLTk1MDYtN2I3NDk5NDM4YWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR/oAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWU4Wrh1BaAlHpyR5k7kJDTKOVGP+RE0lukC3hKMT8lBmdb2zQsDW3y
fOVgTiXZrF73dZRNiKuG+6G58RgOl/Kgx3ILj1GZTBAN+VAc2fnqofE9d8g109Cn
Z7nqRpUGUj98DKqKjaqpLfIQIpDpICfvhCgKB1u90f/OfU1yO2TCwRoojyqu7eRI
nCq0OCkUEHHN3GUY48x4Su+zsOc0AkdBzT/vjFSCy5005UJ9fqnpdlNl5ZbTFbnJ
lAfsx8OiGtW/YwQagc6pll+2MQxHJNF39scTKRe5M+GG89itSQPXW5HXjWD60eY8
3JbdBqk24XDjo5C1E8bXD26fgA9T91c=
-----END CERTIFICATE-----
Generated at Wed May 13 14:28:41 2026 by rpki-client