Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa
File:                     a535c59e-2c45-3850-a45d-c635cd99514e.roa (raw, json)
Hash identifier:          qky5YNWftROS+X2z5Lzji9GY2GdXllWaACLotMbbA5Y=
Subject key identifier:   9A:78:DC:44:3B:21:0D:76:80:FC:A2:3D:B1:25:EB:8C:7E:56:85:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68851ADDACB49E6EE3E800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        71.162.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:85:1a:dd:ac:b4:9e:6e:e3:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=67f3a727-caa3-498f-9dc8-cccfbb2d1720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:37:cf:96:51:65:ba:6d:3b:2c:88:16:bd:
                    2f:83:f8:eb:c4:44:7e:31:08:2f:ae:72:7e:b8:9b:
                    23:54:7e:b4:7b:46:91:9a:cf:c7:63:d4:14:0c:a3:
                    74:fa:4f:a7:23:74:47:d7:72:39:e3:5c:c3:80:67:
                    d6:71:56:c6:e4:fa:4d:35:fa:6b:9c:c6:77:e7:32:
                    26:ad:f0:f7:e6:fe:24:4f:98:ca:65:ca:c0:19:8b:
                    37:3c:64:20:d9:08:3d:1c:ed:ff:7c:e2:a3:8a:4b:
                    7d:e5:df:58:f9:3c:6a:fc:d4:4f:fd:f4:0f:9d:06:
                    df:84:79:63:75:f2:ce:c8:6d:e4:95:ac:14:87:50:
                    c6:1f:f7:be:c8:54:5b:12:8e:e4:44:70:3e:dd:30:
                    53:1e:b7:e5:69:d1:63:c0:22:58:c1:bf:11:27:1b:
                    ae:ab:7f:57:32:87:ae:96:d3:23:0a:62:3e:b3:8a:
                    1d:87:93:78:7b:ec:9f:c8:1f:6d:c1:26:93:2b:59:
                    ce:fa:b7:a1:0c:c1:33:3d:ff:8c:07:fc:c7:c1:6f:
                    0c:a7:25:61:4f:b6:6c:31:34:a5:c8:39:cf:b9:7c:
                    32:1a:8d:11:45:f4:3b:ec:75:c4:4c:99:5b:34:c9:
                    c6:d9:ce:27:44:52:ea:f5:d4:84:05:88:b3:55:4f:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:78:DC:44:3B:21:0D:76:80:FC:A2:3D:B1:25:EB:8C:7E:56:85:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.162.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:ba:6f:a2:bf:ee:d4:db:d7:f4:08:52:99:9e:7c:54:a1:
         69:a4:24:c9:98:ec:c3:72:2e:19:0c:ea:55:ea:ae:32:9a:6a:
         ce:f6:d8:eb:2d:8f:6f:3a:f5:a4:c1:58:1c:c0:b6:ec:a6:9c:
         e7:b7:c0:c2:21:23:7d:96:b3:88:23:7d:c2:2d:17:03:70:d2:
         ab:f7:62:10:78:4c:b7:fb:6c:b4:2c:a1:65:ea:1b:e9:ab:6c:
         2c:00:20:38:31:39:78:27:a8:a7:12:de:5d:42:60:37:f5:09:
         c0:d2:87:aa:b5:87:66:57:e9:4f:8a:55:91:f5:61:f7:dc:d5:
         9a:2c:5a:53:19:a0:66:19:b0:b2:99:cc:a8:f5:5c:8d:ab:d9:
         5e:cc:7d:d6:f8:15:5d:bc:2c:3c:0a:2d:e7:46:de:90:1a:0a:
         f3:0a:77:7e:32:d5:30:ef:9c:83:8e:18:bf:fc:7c:86:5d:3b:
         b6:ce:95:8f:5b:8f:a5:62:f5:94:69:b0:99:1e:61:a5:c6:d5:
         d0:93:a3:12:7d:c3:9c:9e:db:3c:3a:1c:21:8e:02:53:18:be:
         27:e1:a2:4f:47:4a:10:62:91:c7:45:a8:0f:79:ec:b7:18:ea:
         97:ae:41:cf:cb:1c:46:7c:08:e6:15:c4:fe:9f:0c:4d:df:ee:
         23:f3:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:57:39 2026 by rpki-client