Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2be55c2-045b-366e-9669-52a17acac6bc.roa
File:                     d2be55c2-045b-366e-9669-52a17acac6bc.roa (raw, json)
Hash identifier:          bRQ84ZrDARSVris1lIYwTIo0PJVSx1OskeGE855cAHU=
Subject key identifier:   DC:E6:D1:22:CF:1E:70:BC:73:18:81:B1:BC:28:CE:33:C0:61:41:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB76ADFDBAC194A49DD7E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2be55c2-045b-366e-9669-52a17acac6bc.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        70.105.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:6a:df:db:ac:19:4a:49:dd:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=31fa80c7-a8d8-4c22-a7ec-9e9f2b78cfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:23:39:cd:46:3e:72:15:d1:d6:1d:67:55:
                    fe:22:5e:98:ce:3f:4c:fa:b6:fe:8d:4f:90:a2:b0:
                    c3:91:81:0c:47:09:9a:67:0e:7f:05:2a:0c:48:14:
                    f2:db:a9:0e:d1:d1:26:76:cb:83:fd:19:40:dc:db:
                    56:00:39:7d:e4:e4:a5:02:fa:f8:6e:26:3e:95:93:
                    62:9f:10:64:e1:1b:60:d5:6d:85:6d:84:16:05:6b:
                    af:90:43:4e:d6:4d:c9:0a:76:80:1c:8a:7d:0a:85:
                    eb:92:d2:1d:ed:39:ec:30:db:22:1a:ef:91:31:cd:
                    f9:91:4f:28:4d:fb:81:12:16:cb:bb:bb:9d:f7:73:
                    d9:4c:58:1b:b4:d9:95:2a:19:9c:c3:3d:da:54:51:
                    36:8b:4c:31:91:f8:0c:67:a8:a4:ba:1b:fa:3e:4d:
                    7b:2e:c3:ab:b7:e0:a9:73:53:c4:49:db:3b:a4:77:
                    b1:d9:9d:3c:a6:4d:17:dc:16:59:01:11:d9:49:0a:
                    fd:e5:2d:d5:71:06:b0:5d:5e:5a:2c:e6:6d:42:37:
                    f7:0d:ea:60:35:99:d0:29:76:77:89:93:35:27:04:
                    ff:8f:12:5c:31:0b:34:66:a6:93:75:b5:f8:7d:1c:
                    77:5b:d6:49:66:83:a9:e2:a7:26:d9:7f:4e:1a:4c:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E6:D1:22:CF:1E:70:BC:73:18:81:B1:BC:28:CE:33:C0:61:41:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2be55c2-045b-366e-9669-52a17acac6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:28:7c:db:ce:fa:1b:9b:e8:e5:e3:43:f9:f8:f7:b8:62:c8:
         bf:09:04:c5:28:22:47:40:ae:34:a7:d6:57:0a:76:7e:27:f7:
         ed:54:7b:ab:eb:4e:01:4e:d8:62:e9:fa:e4:5b:00:25:fc:b3:
         a3:93:00:a4:ff:eb:46:58:38:2b:c4:4f:b3:9e:b2:5e:4d:eb:
         78:e7:d0:58:34:f6:eb:6f:28:f3:28:39:c9:f6:59:f4:eb:db:
         cb:3b:df:13:fa:5f:11:6c:e5:41:15:6e:2e:f4:52:74:53:8e:
         7b:8b:8c:cd:d4:20:96:67:f1:74:f3:96:83:ec:73:0b:45:c8:
         66:c2:c5:4b:fa:b7:80:10:95:33:02:48:00:76:ee:95:52:50:
         8e:7e:7f:30:22:61:2f:66:b0:ee:a0:f0:63:2e:d7:9c:2a:96:
         91:28:fe:cf:8d:30:df:4f:4d:0f:da:e0:09:3c:da:9f:17:bb:
         53:7d:9a:42:fc:df:70:52:d6:01:10:7f:9b:51:bb:8d:d8:ed:
         c5:e5:d3:41:6f:a6:0c:c0:c4:f6:ae:ef:9c:3d:f9:07:b9:1b:
         d1:82:da:b4:aa:32:d4:b2:96:7f:7a:f1:3f:66:7e:ce:1b:dc:
         30:3b:03:bf:2c:a2:84:f3:d9:f1:39:25:f9:e3:a4:a3:d8:f4:
         df:bf:c3:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2rf26wZSkndfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
MzFmYTgwYzctYThkOC00YzIyLWE3ZWMtOWU5ZjJiNzhjZmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv38jOc1GPnIV0dYdZ1X+Il6Yzj9M+rb+jU+Q
orDDkYEMRwmaZw5/BSoMSBTy26kO0dEmdsuD/RlA3NtWADl95OSlAvr4biY+lZNi
nxBk4Rtg1W2FbYQWBWuvkENO1k3JCnaAHIp9CoXrktId7TnsMNsiGu+RMc35kU8o
TfuBEhbLu7ud93PZTFgbtNmVKhmcwz3aVFE2i0wxkfgMZ6ikuhv6Pk17LsOrt+Cp
c1PESds7pHex2Z08pk0X3BZZARHZSQr95S3VcQawXV5aLOZtQjf3DepgNZnQKXZ3
iZM1JwT/jxJcMQs0ZqaTdbX4fRx3W9ZJZoOp4qcm2X9OGkyawQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzm0SLPHnC8cxiBsbwozjPAYUHuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDJiZTU1YzItMDQ1Yi0z
NjZlLTk2NjktNTJhMTdhY2FjNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARmmEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsofNvO+hub6OXjQ/n497hiyL8JBMUoIkdArjSn1lcKdn4n9+1Ue6vr
TgFO2GLp+uRbACX8s6OTAKT/60ZYOCvET7Oesl5N63jn0Fg09utvKPMoOcn2WfTr
28s73xP6XxFs5UEVbi70UnRTjnuLjM3UIJZn8XTzloPscwtFyGbCxUv6t4AQlTMC
SAB27pVSUI5+fzAiYS9msO6g8GMu15wqlpEo/s+NMN9PTQ/a4Ak82p8Xu1N9mkL8
33BS1gEQf5tRu43Y7cXl00FvpgzAxPau75w9+Qe5G9GC2rSqMtSyln968T9mfs4b
3DA7A78sooTz2fE5JfnjpKPY9N+/w8U=
-----END CERTIFICATE-----
Generated at Sun Sep 13 18:07:55 2026 by rpki-client