Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c91234ee-3db4-3f36-b031-44ca94db6a7c.roa
File:                     c91234ee-3db4-3f36-b031-44ca94db6a7c.roa (raw, json)
Hash identifier:          hZg2b6YT7+Ar/6h3YdgYPLRH6YoEULHsTo3RnfkdjP4=
Subject key identifier:   D5:8C:5B:27:20:95:3B:38:86:41:7A:45:5A:DC:81:D1:F1:D4:79:3A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A436E7E2C406A6E6D700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c91234ee-3db4-3f36-b031-44ca94db6a7c.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        70.106.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a4:36:e7:e2:c4:06:a6:e6:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=044007a9-11eb-4066-82c7-de3b9b2c350f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:83:22:bd:21:cf:66:f0:20:40:3d:7d:f7:92:
                    12:8b:95:a1:d0:a8:c9:39:3c:00:66:ed:a4:32:11:
                    fe:a2:87:d0:90:c6:fa:78:5b:ac:86:74:4a:b1:7f:
                    9d:85:98:04:b9:6a:91:04:ac:65:f9:44:d1:ce:39:
                    d0:88:18:83:e4:07:c2:d4:8c:68:2e:33:b7:96:39:
                    77:55:2b:d1:c4:f9:ab:8c:f5:12:98:7b:2b:ac:44:
                    2e:fe:cd:e2:cd:28:2b:e1:4f:e7:c3:fe:56:26:b1:
                    18:77:08:6d:1e:97:99:76:e9:66:67:a0:40:08:03:
                    87:1c:d9:ed:7e:7e:33:c4:1c:e5:6d:f1:a4:01:1f:
                    08:33:9c:b9:95:f6:f4:6d:96:3d:c5:17:30:4c:a6:
                    7e:fd:d6:44:47:5a:3b:aa:42:ea:86:50:4d:8c:e3:
                    ae:65:21:28:5a:59:bc:a7:c1:47:5d:0d:50:c2:fb:
                    98:b5:22:00:0c:9d:31:c9:21:9e:fb:1b:56:ea:67:
                    2a:d8:5f:30:24:05:65:91:f1:f4:19:f0:28:b0:a6:
                    7d:12:18:02:4a:c5:07:45:ab:e9:2c:07:d1:c6:a2:
                    99:23:06:c4:fa:ff:66:f8:a8:e6:e4:f5:f8:b0:00:
                    b9:53:5a:1e:03:c0:a8:bf:d5:ef:6a:11:53:b2:1f:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8C:5B:27:20:95:3B:38:86:41:7A:45:5A:DC:81:D1:F1:D4:79:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c91234ee-3db4-3f36-b031-44ca94db6a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.106.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:95:a3:41:3b:4f:de:c5:e8:bc:2c:7e:84:1e:80:e4:13:d0:
         39:20:85:35:5a:9a:ca:e5:a0:12:a6:9e:ac:60:d0:e0:38:69:
         dd:f0:42:f7:7c:22:2a:21:9c:84:c7:01:e3:09:7d:83:6c:1a:
         e6:16:6e:fe:4e:76:5b:11:1a:a5:1f:65:f8:cf:86:e1:16:3f:
         91:76:cf:ff:95:8c:50:c3:e8:4c:8f:19:e5:39:3d:a8:75:18:
         03:60:8c:11:8f:33:bb:33:23:0f:44:30:25:a2:c5:ab:88:e7:
         1a:5f:29:fd:59:02:c4:9a:3c:be:87:74:76:94:1f:b4:55:ae:
         ce:21:11:4e:9d:1b:31:2e:38:19:e6:fb:4d:27:58:0e:77:18:
         26:5d:2a:33:c3:df:40:94:33:2f:9c:05:5a:d2:7c:11:aa:93:
         64:d6:14:1b:da:7d:db:d5:38:8a:99:6f:9f:9d:00:8c:c4:6d:
         73:f9:08:34:22:d2:72:d5:f6:b3:81:f5:13:9e:4f:08:d0:1d:
         44:be:df:8e:e0:86:ef:18:b6:9d:50:b6:59:0a:ab:2c:a7:08:
         68:90:b5:81:cd:aa:e8:77:b4:35:0a:47:0a:8a:3c:f9:5e:9d:
         8a:cd:71:00:14:a7:3c:d4:33:0b:c1:62:08:45:39:6c:ee:dd:
         8d:c8:af:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaKQ25+LEBqbm1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
MDQ0MDA3YTktMTFlYi00MDY2LTgyYzctZGUzYjliMmMzNTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIMivSHPZvAgQD1995ISi5Wh0KjJOTwAZu2k
MhH+oofQkMb6eFushnRKsX+dhZgEuWqRBKxl+UTRzjnQiBiD5AfC1IxoLjO3ljl3
VSvRxPmrjPUSmHsrrEQu/s3izSgr4U/nw/5WJrEYdwhtHpeZdulmZ6BACAOHHNnt
fn4zxBzlbfGkAR8IM5y5lfb0bZY9xRcwTKZ+/dZER1o7qkLqhlBNjOOuZSEoWlm8
p8FHXQ1QwvuYtSIADJ0xySGe+xtW6mcq2F8wJAVlkfH0GfAosKZ9EhgCSsUHRavp
LAfRxqKZIwbE+v9m+Kjm5PX4sAC5U1oeA8Cov9XvahFTsh90SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWMWycglTs4hkF6RVrcgdHx1Hk6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzkxMjM0ZWUtM2RiNC0z
ZjM2LWIwMzEtNDRjYTk0ZGI2YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRmpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6Vo0E7T97F6LwsfoQegOQT0DkghTVamsrloBKmnqxg0OA4ad3wQvd8
IiohnITHAeMJfYNsGuYWbv5OdlsRGqUfZfjPhuEWP5F2z/+VjFDD6EyPGeU5Pah1
GANgjBGPM7szIw9EMCWixauI5xpfKf1ZAsSaPL6HdHaUH7RVrs4hEU6dGzEuOBnm
+00nWA53GCZdKjPD30CUMy+cBVrSfBGqk2TWFBvafdvVOIqZb5+dAIzEbXP5CDQi
0nLV9rOB9ROeTwjQHUS+347ghu8Ytp1QtlkKqyynCGiQtYHNquh3tDUKRwqKPPle
nYrNcQAUpzzUMwvBYghFOWzu3Y3IrzM=
-----END CERTIFICATE-----
Generated at Sun Nov 1 05:52:25 2026 by rpki-client