Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49fd56f-b68a-3afa-a0b4-076325835c0e.roa
File:                     f49fd56f-b68a-3afa-a0b4-076325835c0e.roa (raw, json)
Hash identifier:          KdBmTbu8PWEbY/5pX89cRmsHNe5yX6Rn9KRDrNXs8Zc=
Subject key identifier:   62:17:4C:AB:2F:7C:11:33:72:D4:08:4C:D6:B8:4F:BF:C1:E0:55:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4559F99FCC967D9C0C795800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49fd56f-b68a-3afa-a0b4-076325835c0e.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     701
IP address blocks:        65.44.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:f9:9f:cc:96:7d:9c:0c:79:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=6f7ef047-0793-4c84-9449-3b88a5115af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:66:19:1a:43:28:b7:60:9e:3d:5a:f9:6b:
                    f7:f0:56:73:03:03:04:26:3d:cf:a8:8b:68:65:a8:
                    c4:70:7b:ee:2a:08:93:74:33:ee:bd:4f:ae:6b:1e:
                    fb:ce:12:e6:a0:0d:c5:b4:85:b3:15:52:74:01:80:
                    e5:a2:93:13:4e:98:50:44:57:1c:f0:00:fb:63:21:
                    bb:6a:ba:a2:e8:a8:cf:4a:60:6d:e8:6c:c5:60:6d:
                    c7:ed:0b:e6:30:08:f8:6f:35:22:fc:94:ed:84:63:
                    56:93:ec:cb:d1:e4:a8:fb:aa:77:23:3f:27:82:b6:
                    aa:f6:c4:55:dd:3a:fe:d3:50:2b:9f:2d:0f:d7:20:
                    40:6f:6f:88:9a:76:c7:fa:5d:06:7a:0a:ec:b3:b9:
                    53:3d:64:fa:c6:e1:18:d4:0c:4f:c2:b5:cd:79:0a:
                    12:b5:bd:f8:75:2d:d3:d6:93:0a:02:3b:d7:2d:41:
                    b2:fa:ee:69:4f:ba:95:c9:59:f5:bf:c7:e2:11:a3:
                    fc:4f:37:3d:ec:bd:2d:93:c2:52:66:ec:99:c1:82:
                    b1:e2:67:0d:8c:91:65:dd:9c:99:6d:e0:c1:c4:45:
                    87:10:e4:79:2b:b9:03:da:d5:87:0e:b1:8d:59:f1:
                    0a:5b:83:6e:79:5a:0f:43:16:3d:e9:d3:18:9e:be:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:17:4C:AB:2F:7C:11:33:72:D4:08:4C:D6:B8:4F:BF:C1:E0:55:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f49fd56f-b68a-3afa-a0b4-076325835c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.44.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:80:67:6e:2d:48:cc:6b:95:16:c0:ad:66:a5:5d:0a:e9:64:
         ca:d5:ed:51:ed:cb:59:42:fa:a2:68:d4:25:67:f6:50:75:f6:
         ee:30:86:2c:b1:77:bc:c5:56:07:54:7c:4a:2b:84:0d:d1:dd:
         4b:e0:85:27:e5:f7:c8:8f:96:5f:10:72:bb:06:09:c3:86:cf:
         64:d7:2a:96:01:40:82:f0:25:7b:05:5b:9e:b4:78:c9:78:41:
         fb:c1:b3:b7:2d:9c:dc:c5:52:cd:37:8f:76:2b:3a:b9:ea:f0:
         ff:8e:a8:88:b2:66:e1:87:8d:4e:87:85:5c:cc:3f:17:43:34:
         b6:c0:4d:d9:8b:79:a9:2d:2b:d4:e0:37:33:cb:dd:d8:74:1d:
         af:fd:84:e7:ed:6e:db:8d:59:c5:da:f8:8d:7e:48:78:32:c3:
         8e:e5:44:fd:cd:53:ab:0c:3a:b4:3d:b4:56:e9:69:4d:ae:c4:
         e0:53:9c:cf:36:92:67:11:6f:dd:74:07:da:67:86:af:55:0a:
         8b:3d:b9:8a:14:d0:41:01:3c:a8:f0:1e:44:3d:c5:e2:3a:2d:
         dd:5c:09:f5:cb:3c:94:6c:71:93:97:f4:8c:7f:c2:5b:87:aa:
         ff:81:01:30:68:0f:1a:b9:7b:4f:33:0a:ba:8d:3d:1e:be:77:
         95:f4:bc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:35 2026 by rpki-client