Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa
File:                     6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa (raw, json)
Hash identifier:          qUYHk6pqwb8a1F7fC5WYwCDvvjzGN++Z8MvWr1OeaJ4=
Subject key identifier:   30:05:E4:94:E0:87:B9:08:5B:E5:E9:75:F6:52:77:87:26:82:14:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E54B4D2BC450C7698D00F0C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        70.22.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:d2:bc:45:0c:76:98:d0:0f:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=fab67e09-176e-4a31-9fd8-14bddf322ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:c0:3b:1a:f5:71:ed:25:71:c9:f9:df:5c:
                    03:b6:f5:e1:6b:8e:43:e6:ff:30:f0:6b:46:1b:0f:
                    b5:a1:f6:ca:25:30:8d:b3:42:b8:65:f0:1a:f4:3c:
                    58:b4:eb:64:f3:59:f4:11:b4:ed:fa:fe:27:b2:11:
                    69:fe:df:5d:5a:6b:89:a7:66:f0:54:92:6c:fe:fa:
                    27:17:c1:9c:02:a6:77:1f:d2:af:7f:81:75:fb:49:
                    1b:1e:34:45:cd:2a:0b:aa:84:79:12:98:eb:44:b0:
                    24:49:db:bb:fb:4a:20:7b:44:da:1f:b1:9e:b2:3f:
                    6a:1c:cc:d2:7b:e8:b8:70:56:07:06:89:53:43:b0:
                    63:2b:b8:5d:93:e4:fd:9b:b5:48:93:e2:89:96:fb:
                    3c:2f:41:33:11:7c:fb:50:c3:b9:a8:3d:41:20:0f:
                    91:e6:ee:a2:45:c0:cd:82:b1:ef:3a:2f:68:ce:de:
                    88:29:11:c2:c2:dc:b6:7c:a2:fd:de:a5:00:e1:a2:
                    f4:9e:f5:d4:05:05:e9:fe:c0:ab:6e:e7:82:0b:35:
                    1d:a7:ee:05:f2:4b:f5:d2:2e:74:41:14:ad:81:8e:
                    53:d2:4d:40:fa:e0:54:68:86:c7:b8:30:83:d7:94:
                    dc:ae:51:d4:00:93:25:30:db:bf:12:e0:64:f7:95:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:E4:94:E0:87:B9:08:5B:E5:E9:75:F6:52:77:87:26:82:14:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6857ebbd-2001-3ebb-b8bb-9eb0f2332a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.22.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:ba:a6:dd:bf:d7:23:5e:1f:3f:e3:f1:63:0f:48:f4:a5:
         67:36:64:7d:12:b4:be:77:5c:70:02:6c:56:57:5a:e1:01:dc:
         bd:da:9b:41:12:7b:d0:26:9e:8e:dd:07:93:43:43:3d:01:18:
         7c:7e:25:2e:68:89:dd:12:0f:35:7d:09:16:c7:aa:94:dc:49:
         65:41:49:75:2b:57:18:2e:f7:c8:c9:89:0c:c7:a8:c1:61:94:
         68:46:96:a7:19:e8:5e:0b:67:de:ad:56:ba:c0:4c:27:af:7f:
         2a:e7:91:be:0f:ff:be:17:7d:85:99:77:5b:4f:db:5c:9a:00:
         31:1a:a8:3d:bc:6d:7c:a0:6e:4e:68:69:80:cc:57:44:93:c5:
         f1:62:06:e6:ad:27:ce:71:d9:33:22:4d:87:75:15:71:1c:75:
         5d:49:97:cd:22:2b:8d:0c:07:96:82:22:f8:95:ee:d1:62:8e:
         29:4f:e1:95:7e:69:a1:f1:89:66:8a:6b:4f:3e:9d:ac:a6:c1:
         a4:5c:95:13:03:4c:f4:19:e9:75:a5:b9:c4:e1:7e:ee:f3:36:
         31:44:31:1e:4d:1d:c1:21:48:2b:ee:3a:97:de:14:4d:23:66:
         1d:77:9e:5c:2e:fc:27:87:8f:f9:1d:67:60:ad:98:f4:a5:ca:
         cd:81:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:02 2026 by rpki-client