Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f1e58e-152a-3fa5-8e13-75d75b1f282f.roa
File:                     c8f1e58e-152a-3fa5-8e13-75d75b1f282f.roa (raw, json)
Hash identifier:          nNNMHO1ZhlU/eQqh9K7O9DSpbSOGnojIvwbP3M+jasc=
Subject key identifier:   FE:60:E7:51:D1:C3:2E:85:0B:94:54:98:BB:5D:C7:5F:68:EA:82:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A688667B6D42E56D0DE1A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f1e58e-152a-3fa5-8e13-75d75b1f282f.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        173.50.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:86:67:b6:d4:2e:56:d0:de:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=53743cf1-b306-482e-a280-76f1acf4e235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:32:bb:a7:07:fe:37:97:9b:af:af:c0:85:
                    47:d0:1d:2a:60:92:71:0e:1a:1c:20:e4:94:ba:66:
                    42:ca:65:a6:4b:b1:d7:40:f7:5e:b0:c2:77:e0:91:
                    64:86:fe:c1:25:93:82:e1:55:d8:ee:ad:ab:62:ee:
                    dc:67:20:4b:28:34:6e:7a:a4:7f:ec:b8:e1:1e:b7:
                    95:e0:57:77:62:a4:34:cc:13:02:bd:09:e0:ef:82:
                    f1:67:aa:78:6b:10:c1:36:61:2a:78:1f:29:9b:c3:
                    d5:13:0f:31:8b:09:df:0c:56:a7:63:c7:cc:6b:5f:
                    8b:e2:6a:26:f9:49:73:8d:ef:f5:b8:6b:fc:0c:b0:
                    b8:9b:b3:8c:34:ad:48:87:2d:1d:30:60:bb:9c:a0:
                    51:fd:12:a5:be:13:aa:6c:2b:0a:47:8b:ec:6f:c3:
                    3c:ae:9f:1f:20:4c:21:74:89:51:e9:ee:33:8a:4b:
                    f1:a8:3c:53:f5:28:e5:08:81:2d:1a:44:42:a3:56:
                    de:1c:46:1a:79:8a:de:17:47:51:cb:49:27:57:23:
                    7c:c4:19:ca:be:b5:47:08:3c:ac:c4:6c:09:49:1e:
                    56:1b:0f:77:aa:c6:f3:35:4b:56:a9:df:bb:4c:66:
                    a5:4e:a2:04:3f:4a:a6:4d:ef:e7:25:29:cc:fa:39:
                    23:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:60:E7:51:D1:C3:2E:85:0B:94:54:98:BB:5D:C7:5F:68:EA:82:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f1e58e-152a-3fa5-8e13-75d75b1f282f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.50.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:aa:b4:dc:f8:9d:b0:df:56:2a:e9:a9:aa:15:5e:4f:69:b1:
         b8:36:b6:13:25:5b:0d:99:93:b8:6a:22:8f:6c:a3:16:57:93:
         53:5f:69:6d:6a:65:53:52:fc:47:e0:00:1c:7d:2f:10:6e:38:
         a8:df:49:b4:9e:9f:56:d0:d0:82:8e:66:5d:cc:3f:82:92:69:
         e8:1f:6a:16:f4:c6:54:77:a1:b3:4c:ef:e8:db:2d:87:2e:b1:
         dd:57:3b:58:ec:8c:57:2e:d5:e8:b5:95:7a:0a:7c:7b:97:88:
         e7:f7:e5:15:11:80:79:09:f5:b6:ab:d9:ca:6f:6b:b4:24:f8:
         86:04:63:fd:2d:56:14:5c:e7:b6:cc:da:d5:16:e7:44:46:91:
         db:dc:1a:3a:72:a5:08:27:ea:5d:4a:9e:a2:71:37:65:36:d3:
         60:70:a6:ef:19:4a:44:37:83:59:92:98:2d:76:95:73:ab:74:
         82:10:b2:d4:d9:d7:c8:23:7f:c7:8f:da:d4:5b:7b:db:d6:e8:
         fa:51:6d:59:8a:33:71:5a:95:3d:56:c5:f9:8a:52:86:b3:0f:
         09:d2:8e:81:3a:46:96:e6:a9:09:5e:3b:7e:d2:c6:38:d8:87:
         62:40:6c:46:84:6c:c5:0c:ae:60:58:f0:81:86:09:a3:2a:2f:
         40:9c:a2:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIZnttQuVtDeGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NTM3NDNjZjEtYjMwNi00ODJlLWEyODAtNzZmMWFjZjRlMjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol0yu6cH/jeXm6+vwIVH0B0qYJJxDhocIOSU
umZCymWmS7HXQPdesMJ34JFkhv7BJZOC4VXY7q2rYu7cZyBLKDRueqR/7LjhHreV
4Fd3YqQ0zBMCvQng74LxZ6p4axDBNmEqeB8pm8PVEw8xiwnfDFanY8fMa1+L4mom
+Ulzje/1uGv8DLC4m7OMNK1Ihy0dMGC7nKBR/RKlvhOqbCsKR4vsb8M8rp8fIEwh
dIlR6e4zikvxqDxT9SjlCIEtGkRCo1beHEYaeYreF0dRy0knVyN8xBnKvrVHCDys
xGwJSR5WGw93qsbzNUtWqd+7TGalTqIEP0qmTe/nJSnM+jkjRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5g51HRwy6FC5RUmLtdx19o6oJHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzhmMWU1OGUtMTUyYS0z
ZmE1LThlMTMtNzVkNzViMWYyODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErTIQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqqtNz4nbDfVirpqaoVXk9psbg2thMlWw2Zk7hqIo9soxZXk1NfaW1q
ZVNS/EfgABx9LxBuOKjfSbSen1bQ0IKOZl3MP4KSaegfahb0xlR3obNM7+jbLYcu
sd1XO1jsjFcu1ei1lXoKfHuXiOf35RURgHkJ9bar2cpva7Qk+IYEY/0tVhRc57bM
2tUW50RGkdvcGjpypQgn6l1KnqJxN2U202Bwpu8ZSkQ3g1mSmC12lXOrdIIQstTZ
18gjf8eP2tRbe9vW6PpRbVmKM3FalT1WxfmKUoazDwnSjoE6RpbmqQleO37SxjjY
h2JAbEaEbMUMrmBY8IGGCaMqL0CcotI=
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:40 2026 by rpki-client