Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa
File:                     d3ec3111-595e-378e-a332-2caa25072fb0.roa (raw, json)
Hash identifier:          jaSTNzWf9s74T/BphXR6d1w2388ohFGAhbu4xS6XLUM=
Subject key identifier:   EF:96:3C:31:89:0C:2B:8C:42:0D:A4:9D:9F:CB:FC:2F:B4:2E:32:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD6B15A85DD8F4C8F2B180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     701
IP address blocks:        71.161.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:6b:15:a8:5d:d8:f4:c8:f2:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=c4bf24d5-e209-43bb-84e2-6ff7d2a4ac5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:61:68:7e:9d:46:56:31:aa:8d:95:a9:cf:fe:
                    9a:92:be:7c:c9:02:36:49:ab:14:db:d9:9f:a9:dc:
                    de:a7:e8:0b:64:22:d0:a9:c4:3d:5b:6c:9d:76:60:
                    c7:98:cf:b7:59:f4:01:e3:df:1c:c8:d7:cf:76:47:
                    6e:f9:3b:e2:77:ea:d4:ec:a5:15:2b:e6:18:16:b9:
                    c0:19:cc:7a:07:f5:07:65:c3:77:c7:a0:6e:12:49:
                    cc:73:29:7f:8b:27:6b:75:b1:23:3c:cb:d2:b1:2d:
                    7a:f4:77:5d:12:4f:b3:2c:1b:c9:69:e1:c0:07:9e:
                    ce:6c:4c:d4:d5:6e:02:d1:be:4c:4b:09:83:de:65:
                    9f:68:c8:f2:57:ed:43:f5:2e:d8:69:99:af:b3:66:
                    55:81:08:a7:1f:25:a8:35:1c:92:14:19:b4:04:bb:
                    f5:e2:7f:9b:17:eb:1a:f5:b7:63:a8:37:1f:78:c7:
                    62:64:4c:f1:8e:d7:54:c6:c3:54:5e:31:16:e8:0f:
                    30:8e:4f:8f:7c:b2:86:c6:1a:7f:cd:45:23:c8:35:
                    2d:93:06:52:59:61:b6:4b:a0:e4:f2:b5:5f:ab:3e:
                    53:71:37:1d:a2:8c:44:7a:cd:2f:65:30:a0:94:83:
                    f1:36:07:4f:40:83:a0:2d:e3:ed:29:49:94:45:72:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:96:3C:31:89:0C:2B:8C:42:0D:A4:9D:9F:CB:FC:2F:B4:2E:32:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.161.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f4:39:39:98:86:af:12:25:42:0d:b1:af:ba:dd:b2:ce:9f:
         35:89:2b:8a:54:91:1e:9a:3f:62:95:e0:b7:8c:87:c9:aa:10:
         0a:31:4f:18:58:11:1c:3a:f1:2d:0d:e1:b7:50:e9:2b:58:75:
         f5:87:09:75:0d:23:f0:c2:73:c7:4c:b4:85:75:ee:87:a1:d8:
         88:eb:be:5c:e6:09:c7:9b:22:74:2f:9f:86:16:3a:2f:1e:d8:
         c0:fb:ba:7a:15:9f:a1:88:6c:41:7a:37:11:02:0f:12:b2:c8:
         3c:34:94:a2:cd:cb:29:f0:b4:cc:ea:3a:f9:f3:56:d8:0f:6d:
         a8:73:9e:da:5c:14:cc:9c:7b:df:ec:d4:32:59:14:99:60:06:
         47:4a:e5:e3:06:3f:10:dd:cb:f6:ff:5a:41:09:bf:ea:2e:5f:
         d6:3d:e6:ab:17:d3:a1:76:43:84:65:a9:64:79:9d:b4:36:a7:
         37:be:df:a2:e6:c8:b7:fe:83:ae:3e:8b:1f:5d:7c:23:6c:fe:
         f8:6e:59:0d:7b:1a:65:b2:20:13:02:4a:07:f8:92:64:c9:2b:
         c1:66:28:93:69:44:1a:14:41:a3:af:80:1a:e6:86:d5:91:8e:
         68:90:75:f0:aa:15:2b:4b:fc:00:8f:cf:41:70:ba:d5:3f:9b:
         5e:17:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:41:21 2026 by rpki-client