Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58e6cac-5df6-35bf-a4e9-2a08eede6fed.roa
File:                     d58e6cac-5df6-35bf-a4e9-2a08eede6fed.roa (raw, json)
Hash identifier:          +waDYk3mLLxH0JBXM9PhA+qKRbPt4CzBm2ZgdM1RiLo=
Subject key identifier:   07:A8:CA:FA:3C:B6:4B:B5:17:DE:9E:44:14:5C:3C:7C:35:75:BC:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A0FD453F44411BD79380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58e6cac-5df6-35bf-a4e9-2a08eede6fed.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        70.106.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a0:fd:45:3f:44:41:1b:d7:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=69b1c3cd-6afa-4bf4-882b-b1b16bee0c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:59:ae:7c:5d:86:74:23:79:6a:b8:a0:f9:
                    dd:a9:f7:4d:7f:d3:c5:57:db:c5:3a:81:f3:62:9a:
                    3f:e8:2b:cd:50:d7:eb:18:f2:8a:34:9f:27:5c:7d:
                    b3:d1:2a:9b:1e:23:b5:6e:2d:2c:a0:1c:3f:d4:68:
                    28:9d:38:80:6d:ff:7f:3d:d7:96:7f:59:d4:04:40:
                    1e:cd:ba:f6:7e:7a:27:e0:ab:b3:a7:6f:31:7f:52:
                    27:85:9f:8d:2c:dd:24:ae:da:2b:80:a9:d1:49:26:
                    7c:af:d3:8b:63:81:5a:86:5f:0b:83:c4:84:e7:7c:
                    4e:cf:41:36:0c:ea:8e:80:ab:83:fd:b3:a7:37:aa:
                    04:d3:4f:f8:e1:0f:2f:70:15:da:c6:42:df:38:76:
                    8d:ca:3c:c4:bb:d1:63:39:f7:06:4d:ec:f8:b5:9d:
                    a7:c1:01:4a:4b:6b:c0:ea:28:5d:bb:3e:3b:a0:6d:
                    4e:99:2c:3d:41:10:a5:f5:57:39:e1:a9:e7:89:90:
                    03:cc:9c:be:6e:48:00:0d:54:85:29:b9:45:c4:e8:
                    87:5b:eb:b5:49:e1:ea:f6:a2:d2:e6:13:d7:2f:c0:
                    9a:76:3d:ac:39:b5:f0:73:a8:4b:8e:72:70:c8:af:
                    bf:f8:34:07:44:6f:07:34:a2:94:a3:7e:96:3c:74:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A8:CA:FA:3C:B6:4B:B5:17:DE:9E:44:14:5C:3C:7C:35:75:BC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d58e6cac-5df6-35bf-a4e9-2a08eede6fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.106.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:24:02:b2:a7:af:c3:cc:50:2c:cc:15:c8:db:f9:76:22:be:
         a8:e4:c7:e6:ee:58:96:0d:6b:26:a2:c7:da:ff:29:1f:9d:38:
         67:77:7c:6b:2c:0a:d9:f9:6c:eb:f3:ff:91:6a:df:65:49:1c:
         16:24:ed:ef:6c:b0:ad:da:79:91:64:e3:fe:81:20:c7:1c:1f:
         d9:e2:9f:72:05:90:a9:6a:9b:bb:cc:5e:5f:20:01:e1:07:0c:
         fd:12:a9:52:d5:3b:f9:d1:8c:37:61:3a:80:3f:23:6f:10:c2:
         71:82:7c:29:12:f3:38:8f:fc:24:84:b9:30:af:d8:88:f0:a5:
         73:91:3e:13:fd:80:3a:98:ed:9e:93:1f:e0:36:76:88:1f:f8:
         45:76:df:ab:42:b1:63:2b:74:e3:e2:39:14:a4:88:43:75:9f:
         b6:98:e4:e6:12:77:87:7f:d2:84:89:b0:30:f5:2b:da:20:41:
         61:92:21:11:e8:4c:15:57:0a:c0:cb:7e:87:da:76:09:7d:7d:
         09:b0:17:d7:3d:9c:35:ec:14:ea:43:26:97:1c:0a:57:5f:48:
         d5:a8:ed:90:0e:8f:af:4f:7e:b6:9e:95:dc:15:01:8f:d3:c3:
         d3:25:9c:23:85:f8:1e:92:ab:98:03:62:63:7d:bb:11:a0:be:
         77:34:58:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaKD9RT9EQRvXk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NjliMWMzY2QtNmFmYS00YmY0LTg4MmItYjFiMTZiZWUwYzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGlZrnxdhnQjeWq4oPndqfdNf9PFV9vFOoHz
Ypo/6CvNUNfrGPKKNJ8nXH2z0SqbHiO1bi0soBw/1GgonTiAbf9/PdeWf1nUBEAe
zbr2fnon4Kuzp28xf1InhZ+NLN0krtorgKnRSSZ8r9OLY4Fahl8Lg8SE53xOz0E2
DOqOgKuD/bOnN6oE00/44Q8vcBXaxkLfOHaNyjzEu9FjOfcGTez4tZ2nwQFKS2vA
6ihduz47oG1OmSw9QRCl9Vc54anniZADzJy+bkgADVSFKblFxOiHW+u1SeHq9qLS
5hPXL8Cadj2sObXwc6hLjnJwyK+/+DQHRG8HNKKUo36WPHTGEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAeoyvo8tku1F96eRBRcPHw1dbzQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDU4ZTZjYWMtNWRmNi0z
NWJmLWE0ZTktMmEwOGVlZGU2ZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERmqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKgkArKnr8PMUCzMFcjb+XYivqjkx+buWJYNayaix9r/KR+dOGd3fGss
Ctn5bOvz/5Fq32VJHBYk7e9ssK3aeZFk4/6BIMccH9nin3IFkKlqm7vMXl8gAeEH
DP0SqVLVO/nRjDdhOoA/I28QwnGCfCkS8ziP/CSEuTCv2IjwpXORPhP9gDqY7Z6T
H+A2dogf+EV236tCsWMrdOPiORSkiEN1n7aY5OYSd4d/0oSJsDD1K9ogQWGSIRHo
TBVXCsDLfofadgl9fQmwF9c9nDXsFOpDJpccCldfSNWo7ZAOj69PfraeldwVAY/T
w9MlnCOF+B6Sq5gDYmN9uxGgvnc0WKo=
-----END CERTIFICATE-----
Generated at Sun Nov 1 07:41:44 2026 by rpki-client