Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa
File:                     91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa (raw, json)
Hash identifier:          1MRU6vcXGbfA7yja2Vfsg395CGLP7BwCXSkXKyYbb2o=
Subject key identifier:   29:41:5B:10:2E:F6:F1:FA:A7:3D:FD:C3:9B:10:AE:90:22:B0:66:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB75F71050FABA0839E04E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        72.70.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5f:71:05:0f:ab:a0:83:9e:04:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=d3c06667-28f9-4d74-a2e6-bffdce93c47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:56:86:5b:45:15:db:98:e5:ea:72:d7:5e:4d:
                    48:19:7e:74:12:db:db:34:a9:de:7e:26:3b:b5:6f:
                    f3:9b:6b:27:ac:c5:b6:db:88:04:b7:57:00:ee:51:
                    d3:0f:5a:bf:98:60:39:5e:67:bc:62:c8:78:85:48:
                    ea:3b:6f:c4:8c:98:3d:e6:ec:33:ad:6d:22:37:cc:
                    c0:ab:b8:b2:05:9a:c8:88:dc:7c:d6:5e:4e:d2:99:
                    1f:f9:5c:85:b1:de:93:80:13:96:82:0c:04:df:34:
                    df:3b:c3:9b:02:f5:42:46:fe:69:06:4c:42:da:31:
                    e5:c7:55:86:3f:4a:15:34:c7:8b:2d:0d:25:84:88:
                    e7:8d:f9:32:8c:01:92:f2:11:5a:a7:21:14:65:1b:
                    d8:b4:43:69:1b:57:fc:67:39:18:49:f6:20:fd:ea:
                    19:5c:8c:32:2b:7d:92:cf:a5:ca:ab:6f:c9:2f:22:
                    e9:6a:70:80:2f:da:6f:40:02:4b:0a:28:bc:8a:1e:
                    92:2e:2b:07:d6:5d:26:d0:ee:f8:30:5e:b1:a2:f8:
                    a3:f0:c4:e2:cb:6d:51:b1:a0:ef:05:5e:f7:9b:b8:
                    6d:f3:af:07:96:1d:5e:fe:af:e7:8e:de:3c:6b:bc:
                    24:f1:41:ea:84:0c:58:3c:d3:de:c2:23:f1:d3:64:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:5B:10:2E:F6:F1:FA:A7:3D:FD:C3:9B:10:AE:90:22:B0:66:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.70.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:cf:c2:13:6c:94:03:4f:c6:09:35:0f:a7:bb:d3:3b:85:33:
         ec:ac:f9:a1:a7:c4:15:fd:8e:80:85:82:ef:19:3a:49:a7:97:
         0a:18:ec:73:31:e0:a1:cf:18:e8:ba:12:87:f1:7e:de:a7:0b:
         d5:31:cc:db:06:74:d3:e3:57:1b:75:21:36:ab:48:ba:47:0b:
         7c:67:93:12:ba:45:bc:62:c2:34:d0:d2:1b:3a:91:c3:85:39:
         99:43:99:59:20:83:09:54:d4:4c:3f:64:2c:dc:ee:da:67:48:
         d2:dc:35:6c:48:69:61:1b:c5:d8:c5:e1:a6:68:f9:32:ff:da:
         2a:88:f0:9e:6f:4c:da:45:df:ae:0b:10:ce:e8:17:ba:4d:50:
         9f:86:99:22:52:20:77:9c:6d:f7:02:11:a7:aa:d2:39:14:91:
         4b:cd:40:29:f4:00:37:b4:8b:31:19:72:f0:31:d9:5a:09:58:
         52:f4:c0:05:81:7d:69:31:1f:e3:f5:3b:3e:c4:f2:3c:00:89:
         bd:2c:2a:2b:a0:a4:06:fb:ad:38:70:4f:52:d2:90:40:6f:b2:
         c8:a3:8a:a0:0b:b1:10:a9:34:5d:8d:a7:05:8b:45:f2:3f:f4:
         2f:34:7b:46:78:c0:d4:7e:0b:7f:98:ef:95:e7:42:27:b0:01:
         eb:75:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:43:35 2026 by rpki-client