Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1482b004-1b22-3e7a-8fe6-76c54591fd71.roa
File:                     1482b004-1b22-3e7a-8fe6-76c54591fd71.roa (raw, json)
Hash identifier:          9urWSz8aMMxi2ot78BHcy/Z+dEdsZpEd0rhZOIj4ygs=
Subject key identifier:   ED:34:71:70:2B:66:6A:4A:34:C5:4F:2D:BF:3F:A0:0E:6B:A0:E7:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A688388A31823C86346A180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1482b004-1b22-3e7a-8fe6-76c54591fd71.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        68.160.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:83:88:a3:18:23:c8:63:46:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=5b4720df-67bd-4d1e-abc9-07b3874f8b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:ef:b1:84:53:82:42:d3:be:c6:c6:1f:d6:
                    5c:84:df:62:ac:e6:7a:e1:19:b9:22:de:af:17:10:
                    e9:62:90:7e:3a:5f:5b:cc:ca:32:ca:9f:df:f7:8a:
                    ae:b6:2a:f0:9c:9a:48:14:5a:0e:77:aa:cc:73:3f:
                    1b:e5:47:f1:7b:81:23:dd:57:d8:73:74:fd:6b:a1:
                    5d:4a:8f:9f:ed:ef:05:65:20:0c:e4:60:6d:3a:07:
                    59:ba:44:b9:26:7b:50:77:cc:76:98:61:ba:8f:b9:
                    34:b2:a0:41:70:a0:11:80:22:0e:42:8e:0d:c8:fc:
                    51:a2:d0:a3:81:a8:ef:fd:98:9c:15:06:5c:2b:3c:
                    29:75:c7:fc:37:5a:4e:e8:f2:4e:6e:ea:02:79:5d:
                    14:75:db:ab:ee:53:fb:33:08:c9:4f:49:fd:8e:90:
                    ef:d8:16:45:30:8c:99:41:33:ec:d3:7a:5f:7d:62:
                    43:87:45:8d:ea:ee:0b:68:55:59:66:69:ba:c5:c8:
                    c2:b0:86:4c:85:72:f9:73:18:03:b2:eb:6b:7f:d5:
                    52:dd:86:b2:69:c1:ef:b9:86:bf:57:df:2e:cc:be:
                    b2:31:92:29:0e:df:f0:49:3f:46:da:9d:32:62:81:
                    a1:3f:5e:72:5e:6a:a8:c9:14:c6:5c:6c:7b:67:54:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:34:71:70:2B:66:6A:4A:34:C5:4F:2D:BF:3F:A0:0E:6B:A0:E7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1482b004-1b22-3e7a-8fe6-76c54591fd71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.160.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:40:c2:74:21:36:bf:06:e2:5c:37:b4:14:4b:8a:9d:4d:a3:
         20:8e:20:ed:1b:e9:f4:65:3d:2f:59:16:4e:49:c5:89:de:1a:
         58:52:b4:56:37:1c:88:7f:57:45:c4:19:a2:36:75:4c:64:29:
         e3:07:12:47:76:af:6c:e5:ac:7d:c3:f3:d5:e7:2a:30:95:a3:
         41:2e:6e:bf:db:5d:fe:73:86:6d:c7:4b:6d:6d:43:b1:5a:56:
         dc:24:51:6d:da:c7:b1:14:64:55:8c:87:5b:05:5c:8c:db:4d:
         25:19:65:6c:4e:0f:5b:2a:f1:e1:17:95:12:a6:d7:9c:52:69:
         7b:41:8b:01:64:27:67:8c:c7:19:f2:f5:75:96:27:2d:e5:5c:
         bf:2a:b7:d8:de:13:af:0c:86:74:45:ed:a2:04:3f:0d:0d:80:
         41:94:1d:9c:14:11:d6:91:60:44:eb:e4:b9:3b:6e:b5:84:46:
         f6:bb:ec:0b:fe:19:73:3f:02:94:f0:64:0e:0e:31:41:d0:d6:
         fe:35:c2:ad:3d:7e:38:5d:63:62:c1:20:0b:89:d3:80:a0:58:
         68:2f:3c:a7:de:e9:56:04:c7:8c:af:74:f8:05:2e:ea:51:6b:
         4b:67:2e:a4:94:63:9d:4b:6b:68:b9:e6:92:3d:73:c7:9c:54:
         8c:76:e7:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIOIoxgjyGNGoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NWI0NzIwZGYtNjdiZC00ZDFlLWFiYzktMDdiMzg3NGY4YjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1TvsYRTgkLTvsbGH9ZchN9irOZ64Rm5It6v
FxDpYpB+Ol9bzMoyyp/f94qutirwnJpIFFoOd6rMcz8b5Ufxe4Ej3VfYc3T9a6Fd
So+f7e8FZSAM5GBtOgdZukS5JntQd8x2mGG6j7k0sqBBcKARgCIOQo4NyPxRotCj
gajv/ZicFQZcKzwpdcf8N1pO6PJObuoCeV0Uddur7lP7MwjJT0n9jpDv2BZFMIyZ
QTPs03pffWJDh0WN6u4LaFVZZmm6xcjCsIZMhXL5cxgDsutrf9VS3YayacHvuYa/
V98uzL6yMZIpDt/wST9G2p0yYoGhP15yXmqoyRTGXGx7Z1TxZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO00cXArZmpKNMVPLb8/oA5roOf/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTQ4MmIwMDQtMWIyMi0z
ZTdhLThmZTYtNzZjNTQ1OTFmZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRAwnQhNr8G4lw3tBRLip1NoyCOIO0b6fRlPS9ZFk5JxYneGlhStFY3
HIh/V0XEGaI2dUxkKeMHEkd2r2zlrH3D89XnKjCVo0Eubr/bXf5zhm3HS21tQ7Fa
VtwkUW3ax7EUZFWMh1sFXIzbTSUZZWxOD1sq8eEXlRKm15xSaXtBiwFkJ2eMxxny
9XWWJy3lXL8qt9jeE68MhnRF7aIEPw0NgEGUHZwUEdaRYETr5Lk7brWERva77Av+
GXM/ApTwZA4OMUHQ1v41wq09fjhdY2LBIAuJ04CgWGgvPKfe6VYEx4yvdPgFLupR
a0tnLqSUY51La2i55pI9c8ecVIx256U=
-----END CERTIFICATE-----
Generated at Sun Nov 1 05:57:58 2026 by rpki-client