Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3b08d2-28f2-3f02-9115-7e1a0994b6d7.roa
File:                     ae3b08d2-28f2-3f02-9115-7e1a0994b6d7.roa (raw, json)
Hash identifier:          z5y2TKdBmcdLznNCItPYAa4XRlF9Ca5XgzDTCnOSFMc=
Subject key identifier:   D1:FC:13:DF:6C:0E:49:E9:92:FF:49:1F:BB:BF:A3:47:BC:82:26:C3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A5564E1D5F3B09AF5300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3b08d2-28f2-3f02-9115-7e1a0994b6d7.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        173.63.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a5:56:4e:1d:5f:3b:09:af:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=c615ac7b-0ae5-400a-a06c-48ac045c9b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:13:38:cf:9e:4d:7e:0e:31:b9:41:93:fb:
                    e0:29:27:f7:47:bf:f2:cd:a2:f7:8a:f2:37:e8:08:
                    fc:6a:3d:5e:7a:35:59:f9:9a:45:55:c5:e7:30:43:
                    f1:2a:c1:4e:a0:6c:68:cb:57:1a:b3:31:36:6c:ab:
                    ba:0d:83:07:fa:e5:ad:ce:2c:2e:87:a8:06:38:69:
                    7a:e7:40:51:50:f1:26:cd:19:6f:a9:9f:85:a3:b3:
                    e8:e2:ab:f1:23:d3:82:da:3b:ab:c4:1c:e7:a8:85:
                    46:9b:19:2f:cd:6b:8f:b8:f6:01:83:ed:75:f2:88:
                    2f:45:72:3f:65:83:b9:71:65:ab:94:bd:ac:76:e5:
                    e3:59:45:fb:b4:ad:76:63:48:70:b6:94:60:c7:f6:
                    8e:8c:c9:af:cd:fa:bd:13:be:61:33:0e:18:93:c8:
                    94:21:d5:dc:c7:9c:98:fe:e1:59:40:7c:d0:f7:ab:
                    4a:2a:3d:9b:0f:bb:40:10:66:04:ad:6d:3e:30:7b:
                    6b:33:ce:f4:ec:e7:a6:4e:91:42:7e:4c:84:99:91:
                    25:f1:94:ab:7c:02:c9:a6:c9:41:30:da:4e:3f:be:
                    8d:d6:39:7a:0c:b4:3f:2e:e6:24:7f:4c:ae:8f:9f:
                    b7:0f:c7:95:a0:76:4b:0a:d6:8e:59:d8:5b:9e:37:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FC:13:DF:6C:0E:49:E9:92:FF:49:1F:BB:BF:A3:47:BC:82:26:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3b08d2-28f2-3f02-9115-7e1a0994b6d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.63.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:39:5a:df:02:9b:22:29:36:06:64:6e:7d:a3:f9:7e:c3:1f:
         f6:69:e7:2c:5e:65:71:2f:0d:2f:30:13:5f:cb:3a:1e:d1:51:
         ce:52:2e:58:f1:80:87:3c:b6:a8:7f:b0:e0:06:e7:57:99:b6:
         71:e7:38:57:5f:e6:5e:c7:8c:9e:86:b3:5e:7f:3c:05:c1:14:
         f6:e2:05:0a:d8:2c:2f:b0:fa:2f:b0:d7:10:2f:12:33:0b:77:
         ec:14:68:44:9e:1f:f6:71:c0:35:22:2b:26:24:a2:ed:f3:b6:
         45:81:71:76:1e:d1:d5:a5:8b:91:79:75:19:46:d8:23:47:fa:
         07:af:1a:84:f2:40:2a:de:97:23:c8:5e:26:ad:21:67:5f:38:
         ea:6f:ca:31:6c:94:7e:d8:3d:28:50:56:d5:7e:65:11:de:e1:
         32:b3:83:48:26:bd:40:b1:61:af:9e:06:3d:0c:78:d0:ea:b9:
         09:03:00:25:af:76:78:32:fe:a7:11:1b:20:0d:ea:ea:30:97:
         02:2d:f7:24:f2:b4:1c:b3:94:79:42:4e:f4:1d:e4:b5:06:36:
         04:fd:80:ae:8e:11:67:9f:67:26:2a:20:b1:7d:7f:a5:3b:e9:
         ae:b0:38:cc:36:42:ae:38:e4:75:83:c6:37:e6:cc:d6:16:e6:
         0a:36:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:49:55 2026 by rpki-client