Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f81f6de-d599-3782-ae09-e90fbdc16865.roa
File:                     7f81f6de-d599-3782-ae09-e90fbdc16865.roa (raw, json)
Hash identifier:          cjcU8rhjUhxug0trmnlIP55ZlJ8U0WF2MqOMXB8T3O4=
Subject key identifier:   7C:14:31:23:B3:40:BC:0B:2C:68:29:D7:2E:A3:98:98:F8:BB:2A:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A00518AFFFAFD1A5DAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f81f6de-d599-3782-ae09-e90fbdc16865.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        71.241.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a0:05:18:af:ff:af:d1:a5:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=dae7d2c1-4ed9-4f81-bd9a-f741ca3dd77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:1b:ea:a3:9b:3a:79:45:58:9a:a2:05:ed:
                    eb:48:c4:22:98:ea:ee:5b:d1:68:33:72:c3:e0:16:
                    fb:32:59:8b:23:b2:bf:b3:cb:5c:3c:78:1b:7e:38:
                    86:96:db:30:ae:c6:23:d4:4e:26:fb:01:e9:fa:7a:
                    6e:7a:e8:9a:ce:ba:8d:c3:25:a4:a6:ea:38:c3:ce:
                    e1:98:e6:71:50:7c:25:f2:9a:cd:58:e8:e4:03:bf:
                    e0:60:21:4f:1e:ce:65:1d:04:17:65:9a:be:c9:69:
                    2f:ed:b5:32:56:72:5c:6c:ce:d1:c5:ca:88:6a:9f:
                    3c:b8:d5:b7:c8:49:f2:a9:7d:ec:7e:98:cd:f8:1b:
                    83:9e:c9:d3:a9:a1:76:66:7c:79:d1:3d:ed:c1:a9:
                    32:00:36:63:b0:9e:26:23:b5:dc:2a:bb:bf:6b:58:
                    7d:da:c6:48:9f:42:24:f2:30:a6:fa:8e:fe:0d:e6:
                    10:d1:e3:a0:1b:c1:4e:f6:24:db:cd:72:a8:99:d9:
                    e8:73:37:49:88:e3:5a:85:8b:1b:e5:0f:83:81:5f:
                    e9:c9:77:1e:51:e0:4e:f7:4b:15:e9:1c:0c:09:fa:
                    59:7f:ae:00:48:6e:b8:18:58:87:dc:a8:9b:5a:15:
                    bb:8e:08:7a:72:e7:5d:37:43:8d:4c:09:87:2e:10:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:14:31:23:B3:40:BC:0B:2C:68:29:D7:2E:A3:98:98:F8:BB:2A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f81f6de-d599-3782-ae09-e90fbdc16865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.241.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:17:e9:b6:57:27:d3:bd:a1:e0:01:0f:6d:13:e3:aa:90:fe:
         45:07:f6:c2:a9:fc:92:ab:8a:ca:47:c8:a8:5d:e4:35:d5:cb:
         f5:8b:93:aa:12:de:8b:6a:53:2d:4f:d8:1e:c8:1f:fb:8d:ee:
         41:cc:22:1e:ec:c1:b8:23:17:6e:b0:ab:04:63:9f:02:4b:43:
         d5:af:3c:84:05:dc:82:d5:27:5c:27:8b:e6:37:d9:b5:44:87:
         3d:9d:64:6d:f0:ce:a7:58:40:cd:15:6a:a8:49:48:51:97:93:
         b6:08:82:25:e0:b2:7f:73:f6:2c:e9:cd:e2:b3:05:d4:96:2b:
         e3:68:20:aa:ae:c0:6a:88:05:d6:54:cf:de:9a:dd:a1:01:30:
         d2:29:28:9d:c1:c2:c5:44:3e:96:ae:1c:71:39:2a:07:d7:6f:
         d8:c6:e3:56:e5:02:6b:4c:8c:11:e3:03:b2:5b:d5:9a:c0:a0:
         a5:8d:4e:f1:2c:84:86:a9:48:b5:0b:51:6e:40:d1:ce:ff:d1:
         14:87:17:e5:af:f3:20:e0:c3:ad:85:fc:37:3e:8c:c5:45:f3:
         39:1d:1f:de:65:b8:2e:4a:4d:b2:96:a7:7f:17:bf:a1:73:48:
         cb:e4:b3:57:79:11:df:51:40:c6:ba:2f:a0:9b:3f:c6:ac:ab:
         a8:80:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:08:42 2026 by rpki-client