Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b1dc2a4-287e-3fe6-b5a3-35ce414126f4.roa
File:                     1b1dc2a4-287e-3fe6-b5a3-35ce414126f4.roa (raw, json)
Hash identifier:          l61OlLBKYrgbuoMtEr7fCoip/f0+CiIj9xUn9RVtS40=
Subject key identifier:   F2:34:5C:39:A6:2D:23:D6:C3:F3:6F:89:8D:D9:71:96:E7:E6:8B:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A45560CA3F76597E5300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b1dc2a4-287e-3fe6-b5a3-35ce414126f4.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        100.14.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a4:55:60:ca:3f:76:59:7e:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=16b37e8b-7b98-445d-baab-1052efec0db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:fa:d7:29:fc:c8:d9:19:62:87:2d:98:cd:
                    94:d9:eb:56:78:f5:36:13:bd:26:e5:39:c0:0d:9e:
                    94:04:85:7a:9e:d3:a2:22:19:f0:2f:3b:ed:e4:ff:
                    bd:c7:57:53:da:d0:d6:8d:60:cc:e4:89:ed:1b:c0:
                    7c:62:34:e1:3e:19:f6:c9:10:76:98:8a:5e:d4:ca:
                    dd:1f:b3:d5:af:89:08:41:a1:bd:ae:58:38:8f:a9:
                    a0:69:ff:64:26:d1:0e:c6:e8:37:2e:ef:cd:25:aa:
                    6e:13:e9:f0:50:e1:f4:8f:5f:3d:a2:5a:ae:12:a1:
                    34:10:73:00:dd:e5:14:fa:49:55:9c:a4:e1:1b:3e:
                    eb:b3:c9:54:b4:bc:f0:b2:99:b7:d8:bb:52:b9:6a:
                    5e:db:d7:55:4e:65:ea:31:e4:43:e0:ab:07:c6:61:
                    f2:0e:ed:1f:0c:02:79:a6:b0:a8:bd:83:b5:b9:49:
                    39:90:27:c5:82:56:92:56:fd:87:5c:5f:22:22:77:
                    20:0a:34:ee:ae:1d:9a:f9:8e:e5:e0:85:ce:a2:13:
                    27:b3:73:21:b8:bd:49:df:a9:ed:e8:db:79:39:40:
                    ca:c8:00:d8:a4:2a:ec:58:33:1d:f5:fc:1a:79:92:
                    9d:dd:6b:00:6a:9f:74:63:f5:79:d2:1b:af:d4:36:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:34:5C:39:A6:2D:23:D6:C3:F3:6F:89:8D:D9:71:96:E7:E6:8B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b1dc2a4-287e-3fe6-b5a3-35ce414126f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bb:79:94:dd:d5:b0:26:5f:0f:9e:b6:aa:f7:1d:9a:d2:b4:
         32:f1:e9:da:6d:9d:be:dc:64:f8:24:1b:33:59:95:75:33:05:
         6e:27:61:10:de:06:5b:33:63:8f:ec:a9:80:dc:d2:b2:71:74:
         31:d9:9d:65:b2:df:ac:06:9d:21:c8:1b:95:7b:af:34:60:36:
         f1:2f:6a:58:bc:bb:62:ef:e3:f4:41:99:e4:3a:88:21:d1:f3:
         5b:e8:18:85:3d:71:61:42:85:53:7e:de:45:af:82:85:2e:98:
         ae:6a:e2:e0:a5:72:72:b2:a3:14:9a:44:6f:7b:73:ce:1c:96:
         5c:5a:63:5e:a2:89:be:3f:6e:4a:22:0e:47:33:3d:90:47:ed:
         9d:c1:21:24:34:9d:65:f6:68:4a:9f:c8:a2:23:4e:d9:ff:da:
         e8:aa:6f:d9:50:59:5c:74:b8:f9:e5:b1:5a:a1:cd:2e:5a:b8:
         a6:68:37:0c:3c:77:3e:0b:40:80:11:9a:27:98:39:4a:12:a7:
         cb:88:e8:70:7c:84:d0:3c:27:3c:06:e4:50:c4:4f:97:59:a2:
         26:bc:ee:93:8f:01:11:b7:e0:f8:83:57:2e:15:e5:0b:78:88:
         22:3d:3f:b5:37:b1:05:ae:28:c0:2f:a4:ad:a2:fd:58:47:37:
         46:a0:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:40:04 2026 by rpki-client