Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa
File:                     d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa (raw, json)
Hash identifier:          tEW7s0JXzvGmGSR9XmYZJGd3HSCOifwnqpX6yJ3GuVU=
Subject key identifier:   B7:D1:06:B5:54:4D:07:DE:6B:EC:55:2F:79:0F:DB:6F:8A:6F:52:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F90A30C39D4C098D2F61DFE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     701
IP address blocks:        70.105.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:0c:39:d4:c0:98:d2:f6:1d:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=63052fd5-714e-46d8-9715-02154b750ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:2d:89:cf:04:05:ab:1e:4f:9a:33:f7:a7:
                    b8:75:c4:59:e1:da:77:b0:88:1d:8b:19:52:db:55:
                    48:ad:b4:07:de:54:49:2b:8f:7f:f8:9e:05:aa:3f:
                    1c:4b:bf:13:1e:b2:b4:47:e6:09:ec:ce:bc:04:07:
                    88:c7:04:1f:60:6e:9e:4e:1b:a0:6f:45:77:b9:88:
                    46:7e:d0:0f:62:fd:04:39:9f:dc:cd:13:55:65:fc:
                    d0:10:95:eb:a2:44:38:bc:d7:ec:1e:7e:00:44:25:
                    89:63:5f:25:7f:1b:e8:9f:97:aa:41:e9:3c:59:82:
                    9e:2c:43:d5:63:ce:cd:8c:ad:9c:c6:58:95:2d:4a:
                    78:b4:9b:5a:f4:ac:e6:07:84:e5:c9:d8:7b:df:99:
                    7c:55:10:5f:1d:e4:5e:42:ea:6d:7a:d2:00:4b:6a:
                    9d:c6:28:ae:9c:eb:f0:a4:e4:0e:9d:b4:ff:5b:f2:
                    9d:60:18:e4:ce:40:af:3f:7a:c6:00:00:89:d4:ce:
                    b4:c1:eb:96:3a:b2:06:ac:89:d3:cd:3a:9f:26:a3:
                    e0:35:ce:0e:ad:e2:38:3a:0a:42:54:41:4a:3a:cb:
                    4c:bb:28:04:e5:2d:4e:db:04:25:0a:1c:ba:2b:9f:
                    a1:fa:6f:1b:30:46:57:b1:32:50:71:96:99:c3:45:
                    c4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D1:06:B5:54:4D:07:DE:6B:EC:55:2F:79:0F:DB:6F:8A:6F:52:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d62ddfda-7d69-3daf-bae1-b8178da37fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:09:1a:ef:3a:9b:0b:8d:dd:81:e2:bf:70:67:93:6d:25:7c:
         b1:c4:22:29:19:d4:66:97:a0:26:88:af:e4:2a:9e:e3:0d:d1:
         c5:e6:2e:67:c8:9d:f1:b0:1a:4b:26:3f:93:76:39:01:b4:f2:
         64:95:02:1e:3b:f5:cd:44:b1:ae:1b:bc:de:b7:0b:83:59:5b:
         7d:87:0f:04:af:08:33:01:03:95:e2:74:60:db:c0:3a:59:4b:
         07:5b:a6:e7:72:b8:5d:8c:02:c9:5a:c9:ff:1b:0f:87:f0:95:
         47:d7:3e:4f:36:4d:c7:9a:13:65:4c:8c:68:58:02:60:89:b5:
         ee:ac:51:ad:e2:8c:d7:52:5f:38:25:81:17:ca:df:b8:6a:c6:
         b8:36:7e:ef:dc:c5:56:ba:53:04:75:65:54:ef:e8:28:ad:6e:
         5a:61:1d:80:eb:61:ed:2f:35:b7:b6:6b:83:73:e7:fc:4c:98:
         bc:cb:15:97:db:76:bf:bf:5c:02:a4:a0:4d:68:6d:63:45:da:
         7b:6a:01:85:4d:9f:e5:84:23:4f:c6:44:25:b2:e6:78:e2:b5:
         a5:de:a1:0e:06:ea:3c:f1:2b:ce:83:78:46:1d:a3:77:01:1f:
         4a:1d:02:88:be:f3:28:de:9e:59:52:7e:a3:a2:d9:4e:a1:f6:
         bc:12:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:49:24 2026 by rpki-client