Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33b39821-e79c-3b1b-b5f5-6c301ee265f1.roa
File:                     33b39821-e79c-3b1b-b5f5-6c301ee265f1.roa (raw, json)
Hash identifier:          3qGoGSnT7LAanADYZAejDvMZz9wDcPJqyvXQ1vgRh74=
Subject key identifier:   0F:94:43:A8:C5:C5:80:EC:D8:01:EF:C5:86:50:9C:8E:BB:59:26:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A2783437CC40A84D9980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33b39821-e79c-3b1b-b5f5-6c301ee265f1.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        71.248.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a2:78:34:37:cc:40:a8:4d:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=d299b7c6-e4d2-472b-ad47-88fc805ca5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cc:e9:89:c9:0b:5c:df:7b:89:c0:42:48:d5:
                    16:21:74:0f:ce:e1:1b:93:3f:11:7a:ab:db:22:b8:
                    70:ab:c4:9b:7b:76:f3:6d:ad:c2:11:65:d6:dc:44:
                    a8:42:2d:88:df:5e:fb:08:27:21:aa:51:69:e1:79:
                    84:3c:19:13:e5:37:78:a4:21:2e:aa:92:f3:1e:ce:
                    b1:83:d6:04:2d:99:b8:aa:d1:dd:de:78:58:c7:54:
                    0b:f3:23:a5:b8:c3:02:4a:ef:f5:9f:91:ec:49:d9:
                    7a:52:8f:db:2c:c2:9f:91:a8:b6:4d:77:78:75:5b:
                    96:58:94:a4:11:f8:fc:12:c7:73:f3:a5:9e:11:5d:
                    bb:04:ed:59:65:73:7f:c1:ae:43:6c:9e:06:8a:75:
                    db:b9:ce:b2:2c:94:fb:9b:28:8b:2d:19:c1:94:2f:
                    3e:6b:ba:0c:11:14:65:7c:a4:96:ec:42:5e:8c:21:
                    9b:4c:dc:a8:30:c8:c2:69:ca:cc:02:a2:69:64:d1:
                    cc:43:ab:41:67:5b:df:fe:1b:53:ef:a7:5a:4a:26:
                    1c:54:7e:4c:48:66:32:81:1e:f9:9d:e0:4f:6b:ac:
                    d8:2d:ae:02:08:bb:aa:47:e9:b1:43:d5:39:84:76:
                    1f:58:43:00:34:23:d4:59:95:a7:d2:3a:58:9a:6d:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:94:43:A8:C5:C5:80:EC:D8:01:EF:C5:86:50:9C:8E:BB:59:26:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33b39821-e79c-3b1b-b5f5-6c301ee265f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.248.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:fb:db:6e:91:fd:40:2f:d9:70:cc:81:91:30:2e:c3:fe:
         8a:37:62:e2:16:c6:75:4f:cf:af:1f:26:18:aa:d0:11:0b:65:
         0e:74:b2:41:8f:0d:a4:f5:33:92:ec:21:41:cd:32:db:78:34:
         7a:fe:87:2a:27:76:49:17:76:e1:12:75:f8:de:e2:a3:ce:0b:
         c7:c7:10:83:0d:ff:a9:0f:08:c2:8c:cb:2c:24:8c:16:0d:41:
         9f:98:45:93:dc:69:fa:6b:b1:dd:f1:31:83:f9:d8:61:f2:ca:
         1f:5b:e3:9c:d9:f2:b3:7a:73:93:b7:12:20:38:ff:02:e1:ab:
         0a:0c:7f:61:5b:59:09:7b:ce:11:af:39:7d:57:7b:5f:f6:34:
         6d:e8:a9:d1:9e:01:d0:5d:1c:50:0e:1d:83:c5:2e:70:1f:87:
         13:71:73:73:a4:1d:69:39:e4:b1:5f:d1:d3:c8:32:5d:6e:ac:
         bc:f3:c0:3e:77:d5:a1:4e:e5:7d:b3:2d:67:2a:a9:11:7b:cd:
         ba:cf:a6:17:0b:f9:37:e4:ed:52:08:86:d3:4f:64:56:24:77:
         48:c8:9e:7c:09:98:d4:20:65:d9:e7:8b:b3:54:d1:2f:b4:1a:
         15:62:f1:cd:56:b1:cf:33:7b:b3:6a:56:9a:86:e1:02:b2:7e:
         86:34:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:49:05 2026 by rpki-client