Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfff5a63-343d-3ba6-a0be-5c191494d207.roa
File:                     bfff5a63-343d-3ba6-a0be-5c191494d207.roa (raw, json)
Hash identifier:          1U86kKjXCCgJ3lXG8CjFKOppdLgab1vsiHCKzENnlc0=
Subject key identifier:   A5:F4:27:83:7F:5A:82:F2:C3:23:E6:82:B7:13:C7:59:83:EB:5D:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E54B4D30A55037076E60DDB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfff5a63-343d-3ba6-a0be-5c191494d207.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        71.172.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:d3:0a:55:03:70:76:e6:0d:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=b26e931d-fc80-4686-87da-f63ac8770461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5f:e0:16:52:29:cc:6e:5e:51:28:0d:b9:a4:
                    65:05:4f:c7:70:d2:9d:d1:b6:ae:ce:17:38:b5:e9:
                    1d:e4:ba:b1:be:e2:23:06:4f:2d:99:89:3a:65:c2:
                    2e:db:25:f2:b0:d2:aa:2f:89:fb:a9:21:d8:07:6a:
                    cf:9a:db:af:4c:95:1d:0f:f8:e5:cb:18:78:00:1e:
                    55:6b:0a:5f:f9:b0:c6:2f:b6:16:b2:a6:be:7d:65:
                    fd:cf:93:1e:6b:3b:80:cf:45:43:64:5a:c2:28:62:
                    e2:bd:79:30:b7:bb:6f:e4:89:9c:1e:ee:a9:c2:54:
                    4b:7a:27:67:2f:b5:ec:af:01:c7:cc:2b:01:4c:bf:
                    36:58:66:0e:cc:c9:4b:3e:7d:ad:d2:54:1e:55:c4:
                    5b:f7:00:7c:0a:bf:b5:f8:6a:c6:06:32:2f:c0:9a:
                    e8:19:66:5e:39:3e:af:c7:59:7d:4f:f0:ce:b8:8a:
                    af:dc:80:97:5c:36:45:21:1c:46:ec:74:e7:84:50:
                    3b:3e:d7:ff:73:65:cf:02:de:c1:18:40:d8:aa:90:
                    89:2d:6c:dd:5c:fb:2a:a8:6f:58:a5:9d:f6:bb:c1:
                    a3:6c:70:18:1a:80:d5:02:1b:a1:9b:f7:18:c0:fb:
                    f3:07:2c:1c:77:a3:87:da:7e:dc:d1:06:91:ed:ad:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F4:27:83:7F:5A:82:F2:C3:23:E6:82:B7:13:C7:59:83:EB:5D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfff5a63-343d-3ba6-a0be-5c191494d207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.172.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:c3:65:e4:9c:19:74:5e:62:d7:4e:c4:68:da:cc:48:91:
         6c:f9:98:ae:d3:c9:55:e4:b4:9f:5b:b8:95:39:b2:e9:e3:92:
         42:00:a7:66:d0:d6:82:4f:5c:db:fa:a0:ba:8d:45:85:50:71:
         4b:0f:bc:85:41:c0:b5:01:ef:49:19:8a:31:99:ca:3b:03:c0:
         f0:10:d9:7c:8b:88:5d:66:4d:8a:67:34:28:bd:30:77:75:c5:
         19:8a:43:e3:05:f8:1b:b9:04:69:00:75:9b:5e:46:e2:f2:31:
         35:af:bc:7d:b7:53:44:1d:46:e7:89:0f:3c:66:60:3a:f1:cc:
         e6:3b:00:53:32:71:da:45:07:17:32:37:93:ab:ad:fd:b8:7b:
         e8:e4:12:60:56:d4:dc:8c:cf:9c:3a:dc:aa:98:73:18:a2:74:
         8a:d3:85:48:79:d0:eb:a1:02:0a:31:0c:f4:30:c4:a0:7e:bb:
         6c:58:76:97:a7:2f:e8:aa:aa:30:a2:1a:31:7d:2e:f4:32:2b:
         ba:11:be:b0:71:da:26:e6:1e:02:a3:51:cb:05:65:f9:83:32:
         8d:9c:60:59:56:4b:da:9e:7d:15:a0:b7:60:e2:2b:46:19:51:
         5d:bd:f3:9c:5f:75:47:5f:b3:91:3f:87:b4:94:b3:ad:0d:e3:
         c7:f4:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:12 2026 by rpki-client