Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6670c40-17ca-345b-ad5d-71c6cc5bda46.roa
File:                     d6670c40-17ca-345b-ad5d-71c6cc5bda46.roa (raw, json)
Hash identifier:          HXRg5d0cRrMG8KDNgtCWMlOWG3fhexhzOlaZBBINXgk=
Subject key identifier:   B5:A2:1A:0A:BD:EF:43:BF:54:B1:5E:CC:B6:13:6D:D7:83:59:0B:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36DF57B4AD5085B41FDB20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6670c40-17ca-345b-ad5d-71c6cc5bda46.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        71.166.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:df:57:b4:ad:50:85:b4:1f:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=9ff0838a-73cc-4a04-882a-8a74e3a5cb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:d5:82:97:3a:59:bc:f3:08:26:75:43:b8:
                    89:bc:19:d3:05:46:b7:e0:d5:7e:ec:1a:0a:48:27:
                    b0:47:79:11:d3:c0:0a:40:9d:e1:8d:98:7b:67:04:
                    53:e1:6b:99:cd:63:80:23:07:9e:7c:24:12:53:18:
                    ff:73:7a:8b:c5:6e:d6:fc:e2:6c:8a:ca:ae:0a:64:
                    b1:38:3a:a9:4d:1f:e6:d9:3e:94:e4:a7:dc:27:ca:
                    e7:53:10:90:e3:fb:84:05:2f:0e:37:37:0e:1b:db:
                    f6:37:d8:fb:56:2a:90:bb:0c:37:1b:a9:b2:df:63:
                    07:e2:c7:4f:76:a7:21:9d:e6:eb:63:1e:5f:aa:d8:
                    d8:98:d5:65:60:1b:73:c7:1b:8a:1c:fb:ac:33:d5:
                    68:ca:e5:b1:f6:47:9e:6f:d6:e6:de:12:ba:7b:1a:
                    fe:41:ef:c5:f8:67:bf:12:a1:f3:25:3b:54:6d:76:
                    6d:56:04:9f:a9:fe:ec:c0:26:0e:85:e5:30:07:c8:
                    9c:b0:e8:0a:ac:77:bb:5f:5d:66:71:d1:2e:72:bf:
                    7b:89:0f:2e:73:b7:c0:32:8d:be:15:2a:c1:c1:7e:
                    6b:95:9b:c3:28:9a:95:e0:9d:a2:99:b7:99:67:7b:
                    18:1c:8a:1b:7e:7f:0f:d9:f6:6f:b7:7b:61:41:40:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A2:1A:0A:BD:EF:43:BF:54:B1:5E:CC:B6:13:6D:D7:83:59:0B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6670c40-17ca-345b-ad5d-71c6cc5bda46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.166.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:44:cd:f8:b7:f7:34:db:84:81:86:c6:28:e5:59:36:af:4a:
         aa:18:c8:c7:45:38:05:5a:48:12:a7:39:f0:33:53:42:1c:0d:
         44:c1:f7:6a:60:d0:86:e6:5e:4d:2c:59:4c:1d:c3:76:21:ae:
         99:10:be:dd:06:1d:93:8c:0f:6f:69:77:01:57:3d:ef:5b:a4:
         05:52:e5:93:e5:30:ab:2e:51:26:1a:bd:47:f4:a9:d9:c3:33:
         87:17:9b:6d:bb:bb:48:a0:b0:97:d1:15:f6:9a:95:dc:c0:fb:
         97:cc:78:53:e5:3d:63:0f:57:0f:40:68:51:ba:f0:4e:d8:5b:
         d7:aa:09:6c:9d:ee:d9:4b:ab:1d:90:1e:ea:5c:b8:cf:3c:47:
         46:da:7c:2d:b6:b2:1e:57:28:64:bb:55:8a:c7:f7:6c:e8:2c:
         eb:59:db:0d:63:ef:a8:d5:3a:01:4a:50:9b:50:5e:38:fa:d6:
         30:16:e9:01:b0:ba:16:37:9c:79:19:5e:cc:a5:ae:fa:73:4f:
         f6:4f:f3:b7:26:f1:49:f2:50:ab:5a:ea:f9:16:2a:d1:49:0d:
         33:6c:44:43:2e:58:3d:fa:0d:bf:1e:6c:7a:2c:fb:4f:43:c4:
         97:e9:9d:2d:b8:5d:61:35:f8:34:65:16:4f:47:88:56:17:7a:
         f6:43:40:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNt9XtK1QhbQf2yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
OWZmMDgzOGEtNzNjYy00YTA0LTg4MmEtOGE3NGUzYTVjYjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFDVgpc6WbzzCCZ1Q7iJvBnTBUa34NV+7BoK
SCewR3kR08AKQJ3hjZh7ZwRT4WuZzWOAIweefCQSUxj/c3qLxW7W/OJsisquCmSx
ODqpTR/m2T6U5KfcJ8rnUxCQ4/uEBS8ONzcOG9v2N9j7ViqQuww3G6my32MH4sdP
dqchnebrYx5fqtjYmNVlYBtzxxuKHPusM9VoyuWx9keeb9bm3hK6exr+Qe/F+Ge/
EqHzJTtUbXZtVgSfqf7swCYOheUwB8icsOgKrHe7X11mcdEucr97iQ8uc7fAMo2+
FSrBwX5rlZvDKJqV4J2imbeZZ3sYHIobfn8P2fZvt3thQUAFAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWiGgq970O/VLFezLYTbdeDWQtmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDY2NzBjNDAtMTdjYS0z
NDViLWFkNWQtNzFjNmNjNWJkYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpEzfi39zTbhIGGxijlWTavSqoYyMdFOAVaSBKnOfAzU0IcDUTB92pg
0IbmXk0sWUwdw3YhrpkQvt0GHZOMD29pdwFXPe9bpAVS5ZPlMKsuUSYavUf0qdnD
M4cXm227u0igsJfRFfaaldzA+5fMeFPlPWMPVw9AaFG68E7YW9eqCWyd7tlLqx2Q
HupcuM88R0bafC22sh5XKGS7VYrH92zoLOtZ2w1j76jVOgFKUJtQXjj61jAW6QGw
uhY3nHkZXsylrvpzT/ZP87cm8UnyUKta6vkWKtFJDTNsREMuWD36Db8ebHos+09D
xJfpnS24XWE1+DRlFk9HiFYXevZDQCo=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:36 2025 by rpki-client