Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa
File:                     6b231feb-36a3-3410-bd81-3149f25c8a96.roa (raw, json)
Hash identifier:          KKCkRuexI20ljp/IG2/y/+4FPrvNOUZFn7tOAMZWBXQ=
Subject key identifier:   5C:E7:44:06:8A:36:FC:78:D4:6E:60:EF:FF:49:CE:23:0C:4D:80:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C54A1D55B9F8374C879C460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        71.125.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:a1:d5:5b:9f:83:74:c8:79:c4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=b97ca336-4cd5-4bf5-ada4-21d6598c6a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:c6:16:4e:44:9a:cc:72:93:eb:38:d2:96:
                    f4:d4:ce:39:d7:34:03:dc:e2:74:c9:a7:c2:99:35:
                    ab:ea:77:01:01:c7:ca:1a:9e:5d:d9:c9:50:e9:1f:
                    1c:9f:a1:2b:ae:c4:f0:5a:2b:da:1d:9d:fc:19:b2:
                    c3:0f:43:06:3b:36:43:81:45:d8:f6:28:91:60:9c:
                    e1:af:07:26:0b:86:17:a3:f3:70:eb:ea:ab:ac:70:
                    23:ae:65:13:05:9e:95:87:c3:ad:9e:8e:ea:c6:84:
                    1d:d8:62:b4:3a:6c:f0:f8:fa:ce:19:36:c6:f4:cc:
                    ef:8b:4d:19:c1:59:9e:f2:75:56:b3:17:d6:f5:46:
                    a3:27:29:96:0f:8c:24:33:91:0c:16:d3:47:66:24:
                    af:3a:5f:8d:87:23:b2:dd:f4:0c:c0:86:3a:74:e3:
                    7a:90:7d:9c:89:1c:6c:15:dd:88:45:c2:c4:b9:51:
                    f1:75:54:1f:04:d3:3b:8b:60:16:de:b8:30:06:a9:
                    b4:4e:44:d0:6f:08:64:75:b8:41:87:df:ff:cb:78:
                    74:4d:b8:f4:5a:cb:bc:bd:57:85:f3:26:ad:b3:47:
                    ba:2c:99:47:ed:c2:31:e8:97:bc:56:f1:0a:94:fd:
                    22:06:22:d1:2b:21:1a:c4:19:a8:17:ed:17:34:46:
                    94:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:44:06:8A:36:FC:78:D4:6E:60:EF:FF:49:CE:23:0C:4D:80:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b231feb-36a3-3410-bd81-3149f25c8a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.125.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:fa:a5:ed:c7:a8:47:46:74:51:fd:75:64:da:b4:2e:b4:
         07:f9:b5:be:14:94:00:58:d0:67:46:29:fa:50:3d:25:8a:a9:
         28:82:e0:e8:36:e8:44:b2:f4:de:5c:2c:53:f6:46:03:1c:68:
         4c:55:df:97:11:06:03:e7:cf:4f:52:2a:f1:95:36:fa:1c:a0:
         9b:89:41:eb:d4:8a:d4:fb:d9:cf:37:e2:1c:91:d0:ab:20:52:
         4f:8d:6c:23:62:64:14:c5:71:bb:58:06:ad:23:bf:c2:b7:7c:
         55:bf:48:df:d7:6b:9b:df:53:90:08:fd:6f:52:bf:f9:5f:d0:
         64:eb:ce:67:95:d3:52:72:51:ab:59:60:f2:14:53:7d:5d:16:
         b6:43:f1:89:5b:34:a4:af:ee:a5:94:18:e5:be:97:08:cd:52:
         36:f1:81:4a:40:2c:75:0f:fa:44:2b:d3:43:93:15:71:70:08:
         dd:dd:ed:74:d5:d5:b4:29:c5:09:f2:98:8e:9a:89:7a:8a:e8:
         cb:fa:33:11:c7:28:85:7e:43:cb:5e:60:f6:aa:2c:d5:1d:a7:
         86:03:dc:28:ee:52:1b:6d:01:34:78:24:a7:96:9c:e5:c7:01:
         69:2b:ab:c9:36:c1:aa:16:9b:9c:e0:1d:17:a0:f0:68:7e:d9:
         96:86:93:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:50 2026 by rpki-client