Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d74cb54-5690-3d03-a381-97da4f37ef86.roa
File:                     6d74cb54-5690-3d03-a381-97da4f37ef86.roa (raw, json)
Hash identifier:          uLch78JKsHQ5xDnEL6+ImaByc2gbrpu8bFwj+eFLf1o=
Subject key identifier:   0D:14:27:45:94:55:78:F6:92:BF:6C:35:53:73:72:1B:06:2F:41:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F90A31DDA46AAA53BDB5C5D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d74cb54-5690-3d03-a381-97da4f37ef86.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     701
IP address blocks:        71.249.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:1d:da:46:aa:a5:3b:db:5c:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=b8712465-9e4d-426a-a35a-28e285004e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:a1:1d:53:40:aa:f7:79:fe:1e:8b:c8:09:
                    b6:a9:0f:a6:18:0e:d3:6d:f4:16:22:1f:37:a8:42:
                    c0:c6:c7:18:3c:c3:84:56:82:9e:05:40:fd:79:17:
                    05:cf:21:eb:5b:88:b6:96:8a:9f:d8:4b:b9:ee:a5:
                    87:8a:da:81:37:8d:20:4e:cc:9d:77:5c:99:a1:2b:
                    c5:90:73:0e:0f:07:78:3a:9a:50:f6:1d:08:55:34:
                    f2:d8:f7:38:bb:0f:b7:a5:e3:f2:77:ab:93:44:86:
                    41:df:bc:53:15:b8:28:03:89:85:dd:7a:28:07:ff:
                    9f:c9:c2:c2:5b:da:81:1b:1f:04:10:bf:65:99:11:
                    bc:1e:3d:e8:52:25:12:f9:cb:b7:f2:0e:03:41:08:
                    44:a9:9d:27:6f:a3:79:02:95:b6:fa:f8:84:fe:52:
                    17:8a:9d:8c:dd:f9:8d:51:d2:ef:58:41:ab:c2:4c:
                    16:f7:df:fb:7b:ce:be:ba:4b:59:43:08:57:a1:36:
                    b6:9b:88:7e:10:b3:6a:20:d8:dc:81:89:ec:fd:36:
                    b9:7c:d5:a4:11:de:79:ab:81:a2:b6:22:59:4e:1d:
                    8b:54:f4:9c:99:d1:75:4f:97:a8:81:00:61:25:d4:
                    41:80:e7:24:7b:6e:d3:03:e0:6e:76:ed:b8:08:6d:
                    3a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:27:45:94:55:78:F6:92:BF:6C:35:53:73:72:1B:06:2F:41:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d74cb54-5690-3d03-a381-97da4f37ef86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.249.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0e:a2:df:e5:84:8e:6c:28:0d:8c:86:9c:69:6c:c2:67:a1:
         d1:4f:3d:85:94:90:3e:e7:6c:0c:fe:d1:58:d1:15:5d:f7:4f:
         9d:d7:51:7a:2f:6f:d8:60:74:cb:54:ef:7d:83:04:16:38:9b:
         e5:8c:5d:a4:97:2f:48:0a:33:93:59:21:fd:16:3c:a0:7e:07:
         21:a9:c1:de:73:bc:cb:94:d8:e8:93:d7:ee:3d:f9:46:16:a2:
         0f:7d:f3:21:2f:69:33:4a:5f:99:65:da:f3:3c:3a:15:2c:23:
         46:19:7a:91:3e:9a:3e:b2:01:81:f0:9c:55:c1:06:5d:34:95:
         c3:cb:3b:41:72:c5:4b:37:b7:84:f3:c1:cd:b2:6b:d9:05:f8:
         9c:2e:3f:48:5c:f9:35:04:e2:62:e8:eb:78:6e:69:b2:90:9a:
         20:c4:83:1a:c4:0b:4d:bb:3a:26:50:58:11:8e:17:87:c4:3d:
         cc:23:9b:7d:bc:15:50:d2:26:53:42:ae:ba:05:fd:67:5a:be:
         00:62:8b:cb:97:ef:c3:a4:f6:89:c8:d7:bb:1a:7f:08:22:fd:
         60:9a:f4:de:bf:8f:5b:17:4c:43:26:55:92:db:fd:2f:f7:c8:
         b7:14:83:b2:a3:59:e7:85:b1:2d:ed:f4:02:4d:19:03:91:62:
         30:cb:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:57:47 2026 by rpki-client