Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa
File:                     c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa (raw, json)
Hash identifier:          4rhfX4oPnG/psGh+odu//LALWyLvSt6hOqvZ6OXNPxU=
Subject key identifier:   39:2D:3A:5D:9E:94:A0:A3:95:57:00:71:3A:B8:12:23:0E:D4:D7:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717A07F0F260E0CB4712260
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        71.183.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a0:7f:0f:26:0e:0c:b4:71:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=0e920737-72d9-4d48-8d31-112bd84208d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:31:49:2b:ef:56:34:d6:60:31:12:af:c4:5b:
                    dd:03:ce:15:57:8d:28:ec:19:d5:93:2b:a4:7a:73:
                    4e:b1:b6:31:58:8e:a9:73:13:6b:9d:e1:0e:9b:72:
                    6f:e9:45:4a:61:3b:41:21:ef:16:4e:10:aa:07:fe:
                    28:8b:6d:00:d4:24:f9:49:12:6a:f3:d5:90:88:25:
                    92:2e:bc:f4:cd:3b:a9:61:10:13:83:4b:91:fc:c5:
                    35:a1:f6:e2:d7:d0:5a:51:ce:d7:a1:61:b1:bc:ad:
                    ab:51:9c:8a:13:f7:38:73:a0:2f:e0:f4:8f:bd:ac:
                    bd:ed:b6:77:bf:57:84:ec:60:ec:c9:31:95:a9:0d:
                    e1:29:83:31:13:b8:05:d9:17:91:00:6c:b4:5f:7c:
                    8a:13:fb:12:7a:70:d1:36:82:0c:7c:fe:5d:89:eb:
                    c1:65:e2:2f:e1:bb:7e:3d:dd:2e:cf:35:13:8b:ac:
                    5a:03:35:0e:be:2e:4c:96:94:d1:73:5d:ff:9c:9e:
                    08:b9:65:12:26:2a:bc:b2:b9:73:de:45:aa:46:f1:
                    a5:98:c3:03:db:c8:b6:86:20:ba:96:06:3f:f1:4c:
                    72:67:61:4a:85:71:77:04:a4:fe:1f:1d:dd:33:99:
                    35:ab:c2:a1:b4:6c:e9:03:5f:35:67:77:c4:62:73:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2D:3A:5D:9E:94:A0:A3:95:57:00:71:3A:B8:12:23:0E:D4:D7:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c768baa6-dd6e-3af4-9dff-0e39f474fb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.183.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:cc:df:cd:7d:02:12:d8:78:82:d0:73:c0:8b:58:b2:f3:2e:
         74:9d:ee:94:7b:e1:e0:cc:a9:28:28:6c:78:31:ee:dc:e6:37:
         5d:9a:57:6e:76:24:2a:81:8e:fa:ee:87:38:5e:f9:59:03:0b:
         68:b6:c5:5e:cb:d1:de:53:dd:ac:65:98:74:a3:93:90:3b:f4:
         35:a6:4d:ef:ea:0b:51:48:0f:69:84:a9:a3:6e:40:c9:c1:43:
         cb:c0:97:81:cb:e1:a0:0d:cd:87:6c:1b:87:94:e2:3e:19:32:
         cf:a0:21:78:4a:a7:d8:e1:01:be:1b:51:95:4f:02:71:74:dd:
         8e:35:c6:a8:49:eb:cb:12:6a:22:78:ac:33:3a:83:22:2a:c6:
         47:6f:61:48:ab:41:75:d3:71:a6:eb:79:ef:a3:2d:69:0e:a7:
         48:03:c2:eb:a0:27:45:bb:99:c4:99:41:92:9b:2b:09:14:96:
         07:36:39:a2:ad:b5:ac:db:bc:f9:0f:6f:dd:77:98:4d:20:08:
         f3:8f:df:5d:0b:d8:3e:d0:d6:1f:1a:de:88:14:a4:21:e6:a3:
         7d:d5:a1:68:a1:c3:07:02:72:8e:e2:0a:c6:6c:75:fe:e3:07:
         2e:6a:0a:7a:65:07:e5:40:bc:a0:64:6c:5c:68:5a:ba:08:84:
         8a:fc:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:49:48 2026 by rpki-client