Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6bc7c743-ee39-3c86-bca9-a204d5d95d64.roa
File:                     6bc7c743-ee39-3c86-bca9-a204d5d95d64.roa (raw, json)
Hash identifier:          ALU0lV0IPvnayxK+FEPLyjkjsG7yVazGKCxtDsg+QmE=
Subject key identifier:   7E:58:42:D9:B1:32:E9:B9:7A:27:AC:4A:08:B3:D1:65:FC:38:83:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A9C1C4093A0B80DBD6300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6bc7c743-ee39-3c86-bca9-a204d5d95d64.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        71.166.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:9c:1c:40:93:a0:b8:0d:bd:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=696d5cc0-4f79-436c-bce8-dfb74f55f1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:5f:43:4b:a6:75:c1:19:55:ec:d7:9e:e0:
                    14:be:ff:e5:51:fc:ae:04:55:d3:2c:ed:47:2e:bf:
                    d6:b4:58:6e:7a:28:99:d5:4c:a0:44:7b:23:34:23:
                    2e:78:02:20:58:36:25:9b:10:1e:0e:f0:45:4e:e8:
                    70:09:86:49:cb:bc:d5:a4:38:15:97:d8:b0:cd:c7:
                    a2:dc:67:b3:c1:b3:55:79:e8:1a:c8:68:3e:8b:75:
                    3d:71:a0:1f:35:54:30:5d:ea:ae:f3:5e:0d:94:45:
                    0b:ff:71:aa:92:91:40:d8:d6:f2:b3:99:c9:3a:50:
                    ce:cc:21:21:a8:07:35:cb:e7:44:9b:c4:e4:2a:15:
                    92:60:e3:f6:db:48:27:93:73:ab:5a:7d:92:48:4b:
                    86:84:41:b7:13:67:41:4e:06:e6:6e:93:98:dd:36:
                    b3:30:63:c4:5d:92:4c:dd:31:74:6a:e9:ed:df:bd:
                    db:87:e1:22:4e:c0:27:18:51:de:25:c1:57:01:ec:
                    eb:59:fe:51:3b:8e:c7:ba:f2:c0:d0:93:9a:ea:b7:
                    1c:66:5d:67:2a:44:41:12:c7:76:25:96:53:3e:d9:
                    a7:6b:d9:92:24:ad:c9:ac:d7:e4:ff:84:d7:29:29:
                    ab:c8:93:03:11:0d:0d:86:37:16:6d:b0:87:32:ae:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:58:42:D9:B1:32:E9:B9:7A:27:AC:4A:08:B3:D1:65:FC:38:83:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6bc7c743-ee39-3c86-bca9-a204d5d95d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.166.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:b7:53:08:16:b4:6e:df:07:32:b5:ae:87:65:8c:74:3d:0a:
         b5:ec:50:da:13:74:d0:5e:75:32:a4:05:e5:4c:1c:ba:2e:76:
         ca:7a:53:64:92:0b:93:4d:4b:f8:43:36:24:9a:a8:71:42:2a:
         95:6f:5d:ff:40:5c:72:53:2f:76:9d:36:2d:6c:74:9c:75:dd:
         f9:fe:ea:a1:f4:aa:2a:7d:a3:44:d5:a1:d2:e7:30:65:7e:5b:
         3c:ad:dd:28:76:61:4e:1d:76:c4:cd:b6:bb:31:49:51:83:b7:
         61:68:16:70:c5:52:b8:6d:14:43:ad:f1:6c:93:a7:f2:81:71:
         03:60:09:e6:34:bb:e7:d0:8d:77:2c:b9:5d:75:a9:f5:fd:25:
         ae:a3:64:f9:1d:de:e0:e2:57:61:ac:b7:7a:82:b2:20:a6:35:
         91:88:fa:26:5a:ff:af:13:3e:26:8e:70:5e:0f:bc:eb:99:6b:
         e7:fd:97:20:28:35:a5:f7:e3:d7:52:6e:30:2d:a5:9b:1a:d6:
         3c:3a:92:6c:b9:83:93:94:64:d7:dd:98:8b:0d:78:d7:02:57:
         36:eb:6d:64:76:b5:e5:45:6c:1b:30:28:55:42:4b:b4:b5:ae:
         7e:ce:f8:5f:1b:11:b1:91:70:39:74:8c:06:30:cd:a0:e2:c5:
         0a:29:7b:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSpwcQJOguA29YwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
Njk2ZDVjYzAtNGY3OS00MzZjLWJjZTgtZGZiNzRmNTVmMWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJhfQ0umdcEZVezXnuAUvv/lUfyuBFXTLO1H
Lr/WtFhueiiZ1UygRHsjNCMueAIgWDYlmxAeDvBFTuhwCYZJy7zVpDgVl9iwzcei
3GezwbNVeegayGg+i3U9caAfNVQwXequ814NlEUL/3GqkpFA2Nbys5nJOlDOzCEh
qAc1y+dEm8TkKhWSYOP220gnk3OrWn2SSEuGhEG3E2dBTgbmbpOY3TazMGPEXZJM
3TF0aunt373bh+EiTsAnGFHeJcFXAezrWf5RO47HuvLA0JOa6rccZl1nKkRBEsd2
JZZTPtmna9mSJK3JrNfk/4TXKSmryJMDEQ0NhjcWbbCHMq6DiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5YQtmxMum5eiesSgiz0WX8OINNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmJjN2M3NDMtZWUzOS0z
Yzg2LWJjYTktYTIwNGQ1ZDk1ZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR6awMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALC3UwgWtG7fBzK1rodljHQ9CrXsUNoTdNBedTKkBeVMHLoudsp6U2SS
C5NNS/hDNiSaqHFCKpVvXf9AXHJTL3adNi1sdJx13fn+6qH0qip9o0TVodLnMGV+
Wzyt3Sh2YU4ddsTNtrsxSVGDt2FoFnDFUrhtFEOt8WyTp/KBcQNgCeY0u+fQjXcs
uV11qfX9Ja6jZPkd3uDiV2Gst3qCsiCmNZGI+iZa/68TPiaOcF4PvOuZa+f9lyAo
NaX349dSbjAtpZsa1jw6kmy5g5OUZNfdmIsNeNcCVzbrbWR2teVFbBswKFVCS7S1
rn7O+F8bEbGRcDl0jAYwzaDixQope4s=
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:54:14 2026 by rpki-client