Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3bb1ce03-edd1-3b3a-bb85-e7bab5fbeda1.roa
File:                     3bb1ce03-edd1-3b3a-bb85-e7bab5fbeda1.roa (raw, json)
Hash identifier:          PHshHxn/qa183FjNsYEToJZXxOXdi2gkpF9ehnZ9vmI=
Subject key identifier:   91:7D:11:5F:04:48:9D:D8:74:30:DF:F2:DC:B8:74:1D:D1:50:DD:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A0965CB938E5A85564A8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3bb1ce03-edd1-3b3a-bb85-e7bab5fbeda1.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        71.186.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a0:96:5c:b9:38:e5:a8:55:64:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=00dd0fcc-e50a-45ad-8ccb-328322fa0336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1f:eb:2b:e8:5d:75:6f:2c:c4:8e:28:21:ea:
                    44:27:b4:b1:85:f9:37:27:a5:5f:b8:b1:52:be:bd:
                    f5:78:15:7c:45:79:33:d8:3f:5b:64:95:b0:1a:42:
                    d4:78:cc:cb:29:c6:4f:f4:70:e6:93:4d:e1:b9:b1:
                    e6:44:77:f2:db:26:9d:62:d0:97:75:9b:c1:7e:6b:
                    71:21:75:5f:d6:57:b9:31:7f:2c:47:a5:dc:d3:44:
                    f5:e2:45:8d:b2:a2:64:a6:9e:19:c7:d6:35:a9:fe:
                    35:65:72:9f:93:01:8f:40:b2:67:0c:9c:08:d6:6f:
                    8e:c0:31:e4:4a:64:39:03:83:3a:0b:a5:9b:29:22:
                    f2:17:32:db:64:f1:82:af:2d:2a:58:3d:01:85:d5:
                    17:b9:1d:cd:6b:42:11:f2:6b:db:03:52:1a:18:c6:
                    ec:3c:86:d3:0d:03:a1:31:7f:6d:f9:87:f1:20:d1:
                    64:7d:69:88:f0:a2:dc:fc:0b:29:96:7b:c2:1c:be:
                    ef:93:a1:5f:1d:14:69:f7:8f:69:72:82:ad:1c:8f:
                    d6:ba:26:e7:ce:b2:89:bd:fb:ec:7d:5f:85:d8:ca:
                    c2:fd:95:e7:09:6f:5c:b4:c6:68:1e:7c:24:9e:54:
                    42:28:9f:6c:cd:0b:77:e1:30:47:dd:01:4e:02:d8:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7D:11:5F:04:48:9D:D8:74:30:DF:F2:DC:B8:74:1D:D1:50:DD:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3bb1ce03-edd1-3b3a-bb85-e7bab5fbeda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.186.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:50:0a:22:37:61:3e:f1:03:62:a3:92:8a:d1:ef:f5:71:
         69:a5:ab:9f:a0:73:5d:52:51:f1:27:9b:63:4e:b9:36:8e:85:
         af:bd:9e:8b:62:cb:8b:c0:c9:cb:4c:ed:69:aa:46:af:cd:db:
         39:40:33:1c:18:41:d5:8e:8f:79:91:e1:1c:a7:dc:c5:ae:ae:
         7f:75:4b:d6:55:49:50:d0:d2:e2:2f:79:0b:d8:59:2f:b4:4c:
         fa:30:2f:63:ba:46:7b:87:d8:47:d9:3b:bd:4b:ab:a5:60:c7:
         7b:ad:f5:5c:4d:a3:de:37:53:bc:e1:bf:62:6c:9e:ed:65:1b:
         60:86:ab:eb:ed:6f:a3:26:bc:5a:ef:91:0c:95:27:89:c1:13:
         3d:31:4d:60:ed:17:ae:87:77:d2:57:1a:20:aa:d0:65:e6:0f:
         02:c5:0f:e4:dd:d0:83:4d:ca:e5:ae:b4:c0:3a:46:0f:6a:1d:
         82:97:0a:56:c6:3e:da:02:7b:ec:b2:e9:a8:a5:24:2c:74:35:
         bc:83:44:fb:a2:28:f8:77:0f:87:ef:6b:6b:10:cd:17:89:5c:
         13:e6:9b:40:61:d7:fb:dc:dd:50:84:19:04:e9:54:8f:5c:55:
         50:bc:48:b1:f2:2d:11:cd:7d:e7:a2:b6:ea:e9:02:35:c0:95:
         87:84:f7:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F6CWXLk45ahVZKgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
MDBkZDBmY2MtZTUwYS00NWFkLThjY2ItMzI4MzIyZmEwMzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8h/rK+hddW8sxI4oIepEJ7Sxhfk3J6VfuLFS
vr31eBV8RXkz2D9bZJWwGkLUeMzLKcZP9HDmk03hubHmRHfy2yadYtCXdZvBfmtx
IXVf1le5MX8sR6Xc00T14kWNsqJkpp4Zx9Y1qf41ZXKfkwGPQLJnDJwI1m+OwDHk
SmQ5A4M6C6WbKSLyFzLbZPGCry0qWD0BhdUXuR3Na0IR8mvbA1IaGMbsPIbTDQOh
MX9t+YfxINFkfWmI8KLc/AsplnvCHL7vk6FfHRRp949pcoKtHI/WuibnzrKJvfvs
fV+F2MrC/ZXnCW9ctMZoHnwknlRCKJ9szQt34TBH3QFOAtg2dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJF9EV8ESJ3YdDDf8ty4dB3RUN1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2JiMWNlMDMtZWRkMS0z
YjNhLWJiODUtZTdiYWI1ZmJlZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR7qAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtaUAoiN2E+8QNio5KK0e/1cWmlq5+gc11SUfEnm2NOuTaOha+9noti
y4vAyctM7WmqRq/N2zlAMxwYQdWOj3mR4Ryn3MWurn91S9ZVSVDQ0uIveQvYWS+0
TPowL2O6RnuH2EfZO71Lq6Vgx3ut9VxNo943U7zhv2Jsnu1lG2CGq+vtb6MmvFrv
kQyVJ4nBEz0xTWDtF66Hd9JXGiCq0GXmDwLFD+Td0INNyuWutMA6Rg9qHYKXClbG
PtoCe+yy6ailJCx0NbyDRPuiKPh3D4fva2sQzReJXBPmm0Bh1/vc3VCEGQTpVI9c
VVC8SLHyLRHNfeeiturpAjXAlYeE94w=
-----END CERTIFICATE-----
Generated at Sun Sep 13 15:47:58 2026 by rpki-client