Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ed9d8c-aea3-37b8-a850-1f485967b2a6.roa
File:                     27ed9d8c-aea3-37b8-a850-1f485967b2a6.roa (raw, json)
Hash identifier:          5IxSJuT7nIVDLrdQiaPtogNTz3v0Lz36lU88n5+I1kM=
Subject key identifier:   6B:1D:01:9B:C5:05:CC:19:FB:26:85:DD:6D:B0:9D:FC:01:C7:05:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F90A31B7A9DA84742C7152600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ed9d8c-aea3-37b8-a850-1f485967b2a6.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     701
IP address blocks:        71.114.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:1b:7a:9d:a8:47:42:c7:15:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=0df431c8-7318-4d56-8972-db262dc26cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:51:da:33:f9:df:5d:e8:34:68:06:37:fa:
                    a1:3e:88:d7:57:6f:b7:b7:19:7f:42:65:41:99:2f:
                    74:58:db:55:0a:94:d7:0f:66:f2:57:4f:c1:07:86:
                    0c:85:d9:4c:4f:42:90:3f:b6:fc:30:ad:fa:99:dc:
                    7f:4f:38:58:64:cb:5b:cf:e4:ec:a0:4a:6e:81:66:
                    43:11:ae:55:7d:3c:c0:44:fe:b7:82:e5:d4:56:02:
                    8b:6a:ab:62:46:78:19:6f:75:3e:3f:63:b9:4a:18:
                    c8:53:d9:91:7d:39:61:94:f7:b6:d3:65:90:de:a0:
                    97:1e:06:03:fa:1e:f4:65:cb:48:e5:28:2e:4a:dc:
                    56:67:9b:90:13:35:6e:8c:60:1f:3d:b1:b7:f1:10:
                    bc:bd:35:b6:0a:3c:91:e1:96:2f:f7:b2:c7:dc:3e:
                    27:18:23:bb:89:1f:4f:39:80:02:5e:ce:91:59:b7:
                    19:9d:7c:ae:71:da:49:01:21:e5:c8:ef:ed:1a:7b:
                    01:3c:76:45:6c:21:f8:0b:ca:b5:7a:71:ed:09:87:
                    48:0c:04:76:12:b1:2f:3b:97:d4:6a:58:f3:a6:02:
                    eb:98:5e:5a:74:20:0f:2c:c9:a4:a8:d6:7c:0f:b0:
                    42:64:81:39:a6:e3:f4:44:a4:45:09:98:ac:57:ff:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:01:9B:C5:05:CC:19:FB:26:85:DD:6D:B0:9D:FC:01:C7:05:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ed9d8c-aea3-37b8-a850-1f485967b2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.114.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:42:d3:b2:05:23:97:d5:a6:dc:8f:2b:8e:76:04:86:44:d2:
         a8:3d:dc:de:82:80:7f:00:80:87:93:2b:14:cc:f3:6a:14:d2:
         b4:ef:73:51:e4:4a:e6:e1:46:55:09:08:cf:5d:72:37:ad:71:
         02:48:50:c9:04:05:48:86:51:6b:cd:83:5c:61:39:71:81:5c:
         c4:ec:a1:dc:09:88:2a:17:7f:a9:ef:d9:4d:b5:34:9f:05:03:
         f0:37:d5:df:68:35:62:8d:0e:e3:07:bd:29:4e:17:d3:40:d6:
         85:bc:56:33:63:3a:9b:35:dc:a3:39:4e:d6:a6:0c:28:cc:85:
         e2:89:d2:8d:54:e3:5e:96:43:8b:90:e3:a8:2c:e2:51:c9:41:
         f9:73:5c:53:bd:d5:9a:0a:4b:99:6d:3c:84:38:9d:b1:9e:10:
         ab:7a:0b:16:03:f6:4e:10:7c:3e:f6:32:9b:4e:d9:02:58:a2:
         69:dd:65:84:be:53:c2:39:3f:4d:ec:81:39:a0:37:bf:a1:a3:
         34:63:7b:28:83:a2:b6:62:5a:38:fd:36:3e:eb:16:04:c9:e4:
         03:ed:97:4f:a1:b6:7d:41:8b:15:39:40:80:45:82:8f:f7:08:
         ab:5f:23:2e:3a:62:f4:96:dd:5e:04:a3:e5:1f:44:35:19:77:
         c1:e9:1a:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qoxt6nahHQscVJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk
MGRmNDMxYzgtNzMxOC00ZDU2LTg5NzItZGIyNjJkYzI2Y2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvhR2jP5313oNGgGN/qhPojXV2+3txl/QmVB
mS90WNtVCpTXD2byV0/BB4YMhdlMT0KQP7b8MK36mdx/TzhYZMtbz+TsoEpugWZD
Ea5VfTzARP63guXUVgKLaqtiRngZb3U+P2O5ShjIU9mRfTlhlPe202WQ3qCXHgYD
+h70ZctI5SguStxWZ5uQEzVujGAfPbG38RC8vTW2CjyR4ZYv97LH3D4nGCO7iR9P
OYACXs6RWbcZnXyucdpJASHlyO/tGnsBPHZFbCH4C8q1enHtCYdIDAR2ErEvO5fU
aljzpgLrmF5adCAPLMmkqNZ8D7BCZIE5puP0RKRFCZisV/8g3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsdAZvFBcwZ+yaF3W2wnfwBxwXWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjdlZDlkOGMtYWVhMy0z
N2I4LWE4NTAtMWY0ODU5NjdiMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR3JAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZC07IFI5fVptyPK452BIZE0qg93N6CgH8AgIeTKxTM82oU0rTvc1Hk
SubhRlUJCM9dcjetcQJIUMkEBUiGUWvNg1xhOXGBXMTsodwJiCoXf6nv2U21NJ8F
A/A31d9oNWKNDuMHvSlOF9NA1oW8VjNjOps13KM5TtamDCjMheKJ0o1U416WQ4uQ
46gs4lHJQflzXFO91ZoKS5ltPIQ4nbGeEKt6CxYD9k4QfD72MptO2QJYomndZYS+
U8I5P03sgTmgN7+hozRjeyiDorZiWjj9Nj7rFgTJ5APtl0+htn1BixU5QIBFgo/3
CKtfIy46YvSW3V4Eo+UfRDUZd8HpGtc=
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:02:33 2026 by rpki-client