Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b00aeef8-b710-36e5-a79f-67d1d8129595.roa
File:                     b00aeef8-b710-36e5-a79f-67d1d8129595.roa (raw, json)
Hash identifier:          8T7R2XOZbQDF8jT7L99og1XrGtIcwuZs9OwHYcFqZe0=
Subject key identifier:   4C:29:B4:EA:18:30:AD:25:7B:5D:AB:67:4E:41:EC:98:7C:DA:DC:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF7179CDE70313E7D163535A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b00aeef8-b710-36e5-a79f-67d1d8129595.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        71.245.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:9c:de:70:31:3e:7d:16:35:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=4d8f7c8f-564a-4ff6-b697-5a79978eb54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:be:bd:fe:bf:9d:74:b7:73:b7:95:db:9a:
                    17:e8:c5:04:aa:ea:e7:7e:e6:92:7f:c2:d1:cf:68:
                    d0:d9:3b:13:5b:6e:1b:89:45:50:0b:61:1e:3d:7e:
                    b6:2d:6f:ba:c5:32:73:73:2c:fa:99:25:dd:f3:9b:
                    27:1c:de:4e:ac:93:6e:14:42:a4:78:d7:f4:58:72:
                    44:5d:b3:9d:d2:7e:92:6b:02:7d:09:cd:52:b3:fe:
                    86:7d:b7:f9:44:39:8e:66:a8:2e:3c:c4:15:83:6f:
                    ba:a7:f3:7f:f4:53:72:78:ab:29:f4:a3:16:00:97:
                    f4:c1:7b:bd:3d:98:4e:73:9d:64:34:e1:f7:43:82:
                    e7:a5:6a:08:62:b9:81:c5:7b:8a:cb:f5:d9:07:1e:
                    ba:86:8f:40:f8:26:2e:00:0b:ff:58:21:9e:4e:1e:
                    b3:c4:d8:b8:e3:cf:94:99:01:08:c8:02:db:01:b6:
                    37:8d:dd:1e:6d:9a:ae:57:55:64:19:64:37:81:a0:
                    d7:9a:02:52:a3:e1:bc:91:32:99:02:d9:c6:60:d7:
                    a2:b9:3e:a7:31:58:b4:02:cd:a4:7b:73:e2:a4:67:
                    3a:6a:d1:30:85:28:3c:63:12:85:db:9c:a1:2f:66:
                    5c:77:43:24:cf:5c:7e:63:d6:13:ea:26:25:84:37:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:B4:EA:18:30:AD:25:7B:5D:AB:67:4E:41:EC:98:7C:DA:DC:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b00aeef8-b710-36e5-a79f-67d1d8129595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.245.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a3:9d:7a:60:09:56:05:e7:af:b7:fd:f6:d2:0a:64:11:36:
         e4:78:c1:7f:ac:05:ba:cf:09:f4:4a:e4:3e:d2:33:d8:5a:33:
         04:76:24:68:81:27:77:a8:ba:ff:80:3b:7f:58:a8:e2:69:b0:
         cb:e0:80:f2:38:1a:36:ef:bf:97:d0:07:6d:17:c9:d7:be:41:
         b9:cc:90:51:75:1e:d3:3d:d7:2c:f2:e2:87:8b:84:35:fb:9b:
         26:ab:25:42:93:da:9d:4a:89:51:43:8d:2d:0a:3b:d2:f3:af:
         1f:5a:39:76:73:99:8b:2f:45:47:41:a3:6c:a3:05:e4:84:df:
         20:33:d8:15:59:c9:1e:e3:8a:9e:f6:2e:f7:96:39:2d:db:0d:
         be:e2:2b:12:ac:33:15:c1:5e:fd:b4:c3:2b:de:0a:01:73:0e:
         ed:1d:57:1f:0e:c1:f0:16:22:fb:b5:6e:c7:47:9e:35:b4:30:
         e5:03:60:27:38:2c:bf:ce:83:b7:c6:20:ee:ed:49:4b:af:b9:
         03:a4:cb:cf:dd:32:ef:bf:a8:3e:07:df:05:05:95:95:5b:a0:
         df:4b:c9:60:57:af:84:69:89:1a:08:54:86:62:6b:fd:87:d0:
         ff:c8:58:2f:00:8d:5e:6a:92:50:59:03:db:f4:e5:ee:00:e0:
         0b:e2:04:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F5zecDE+fRY1NaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
NGQ4ZjdjOGYtNTY0YS00ZmY2LWI2OTctNWE3OTk3OGViNTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGy+vf6/nXS3c7eV25oX6MUEqurnfuaSf8LR
z2jQ2TsTW24biUVQC2EePX62LW+6xTJzcyz6mSXd85snHN5OrJNuFEKkeNf0WHJE
XbOd0n6SawJ9Cc1Ss/6Gfbf5RDmOZqguPMQVg2+6p/N/9FNyeKsp9KMWAJf0wXu9
PZhOc51kNOH3Q4LnpWoIYrmBxXuKy/XZBx66ho9A+CYuAAv/WCGeTh6zxNi448+U
mQEIyALbAbY3jd0ebZquV1VkGWQ3gaDXmgJSo+G8kTKZAtnGYNeiuT6nMVi0As2k
e3PipGc6atEwhSg8YxKF25yhL2Zcd0Mkz1x+Y9YT6iYlhDe9bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwptOoYMK0le12rZ05B7Jh82tzLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjAwYWVlZjgtYjcxMC0z
NmU1LWE3OWYtNjdkMWQ4MTI5NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/VwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKijnXpgCVYF56+3/fbSCmQRNuR4wX+sBbrPCfRK5D7SM9haMwR2JGiB
J3eouv+AO39YqOJpsMvggPI4Gjbvv5fQB20Xyde+QbnMkFF1HtM91yzy4oeLhDX7
myarJUKT2p1KiVFDjS0KO9Lzrx9aOXZzmYsvRUdBo2yjBeSE3yAz2BVZyR7jip72
LveWOS3bDb7iKxKsMxXBXv20wyveCgFzDu0dVx8OwfAWIvu1bsdHnjW0MOUDYCc4
LL/Og7fGIO7tSUuvuQOky8/dMu+/qD4H3wUFlZVboN9LyWBXr4RpiRoIVIZia/2H
0P/IWC8AjV5qklBZA9v05e4A4AviBLU=
-----END CERTIFICATE-----
Generated at Sun Sep 13 15:03:38 2026 by rpki-client