Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c375b4a-1d77-353b-acd5-11245267be20.roa
File:                     1c375b4a-1d77-353b-acd5-11245267be20.roa (raw, json)
Hash identifier:          w34NGPT9SrcuyqHHWNCgtjz6eshMKJRWjVAJTKIArvo=
Subject key identifier:   6A:98:8F:9D:84:DD:AD:73:48:9C:17:68:4C:D8:71:82:E7:16:CB:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F90A31F142A3DBCCD8DC197C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c375b4a-1d77-353b-acd5-11245267be20.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     701
IP address blocks:        71.247.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:1f:14:2a:3d:bc:cd:8d:c1:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=8eb32b98-fbe1-42f1-842f-b8e66abf5a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:14:bb:d0:27:e0:02:a1:d8:4c:06:03:b7:63:
                    1c:ca:c2:1b:a9:e2:62:66:a0:fb:8c:3a:83:7e:d1:
                    72:51:ce:50:78:5e:47:8e:64:86:6d:99:20:e2:04:
                    34:21:54:a8:a6:bc:5b:84:ba:a1:b8:2a:fd:6e:00:
                    dd:5b:fa:63:0e:fd:2f:0b:d0:14:34:47:b8:12:20:
                    d3:76:f1:85:d1:7f:34:43:96:51:e7:3a:67:3c:62:
                    c6:9c:0b:ad:aa:50:bc:89:6b:05:94:9f:ce:f7:26:
                    78:dc:f1:6e:5c:b9:0c:9b:96:e3:48:f3:08:1d:5d:
                    2a:f1:a4:19:26:1a:29:cf:aa:b6:ed:41:ec:6e:70:
                    cc:53:0f:39:59:ef:96:44:a0:92:9e:1a:96:d2:5f:
                    de:27:19:a7:16:64:34:7e:08:0c:98:01:33:1a:25:
                    19:c8:e9:98:cf:d8:17:80:03:b7:25:f9:0d:ee:c4:
                    0e:a3:b7:88:ea:f5:4d:22:f3:f0:a1:02:fe:78:7d:
                    67:d6:7a:3f:8d:e7:b6:75:6c:e3:80:83:99:07:63:
                    f1:79:4f:d5:b8:a2:83:32:b7:30:3a:3f:43:6f:1c:
                    14:89:83:1f:fc:d7:29:33:54:24:ab:bc:be:71:96:
                    97:d5:6c:d2:dc:20:49:a0:b8:8d:23:0c:ea:2e:41:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:98:8F:9D:84:DD:AD:73:48:9C:17:68:4C:D8:71:82:E7:16:CB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c375b4a-1d77-353b-acd5-11245267be20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:31:b9:12:94:ce:10:cc:e5:e3:a8:f3:93:6e:6a:df:9f:96:
         d0:07:db:78:1b:32:0d:34:0c:19:a2:8c:5d:a7:dc:c7:fd:63:
         f1:84:48:71:fd:21:c6:0a:f0:34:a6:b9:81:94:0c:5d:b4:41:
         e6:0e:4d:1f:33:23:74:26:85:c2:f1:f1:ee:48:f9:cb:66:2c:
         52:d2:bd:7e:3c:ee:a0:51:c9:c7:02:69:22:19:c8:2d:21:55:
         4d:e7:bc:33:88:25:7c:31:61:c4:14:87:9c:2b:24:39:89:af:
         2d:3e:2b:6b:ad:8e:2b:c1:f6:d5:65:65:aa:4d:2d:fe:7c:c9:
         69:a1:ed:05:63:74:b7:00:f7:f1:2b:e8:52:4a:b1:f5:fa:83:
         bd:de:f7:e9:9e:7d:30:d7:c7:a4:c0:b7:3d:36:42:28:04:dc:
         a0:ad:02:ba:4d:0e:21:69:09:0e:b7:bb:00:d1:3e:d0:3e:2a:
         4e:e4:44:fe:07:2e:a4:ca:a9:20:73:d5:23:6a:32:96:31:93:
         89:09:0d:80:10:e5:b3:d9:09:71:b0:b0:a1:67:07:7e:0b:4e:
         57:05:ca:a0:fb:cb:a6:83:48:7f:fa:34:c8:71:27:8a:82:e6:
         c9:89:9f:0a:ce:00:77:d7:58:a5:1d:f3:c8:4d:06:b6:68:a9:
         8e:eb:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:02:41 2026 by rpki-client