Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dedb224e-c21b-37fc-a09d-32a7408f1077.roa
File:                     dedb224e-c21b-37fc-a09d-32a7408f1077.roa (raw, json)
Hash identifier:          XZ/tQfniBUuERcdZon65Dokg6DeQ2sO3vwD9yXGwv1s=
Subject key identifier:   A2:0F:DA:1D:E4:D8:7F:89:44:2E:DC:15:3D:94:99:B3:E1:3A:A6:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF7178093FAD613BA68FE03C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dedb224e-c21b-37fc-a09d-32a7408f1077.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        71.163.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:80:93:fa:d6:13:ba:68:fe:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=0ef31d8b-38bc-4214-8568-75a58a450a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a8:11:40:f5:84:5e:06:d5:ac:6c:50:28:ee:
                    79:b0:cc:3b:b0:96:96:40:86:a5:8f:4d:28:0d:65:
                    0a:11:ed:8b:77:75:a1:72:96:07:04:86:35:38:a5:
                    01:67:96:03:6a:a5:5f:02:92:16:49:77:6d:8a:31:
                    70:46:d9:2e:48:21:88:17:ff:57:ba:9e:15:61:6c:
                    52:c2:87:d2:09:0a:52:96:41:63:8e:7c:09:e9:4e:
                    ea:b4:29:19:4e:5e:7a:0f:09:eb:a5:2b:22:f3:45:
                    60:ea:50:c8:ce:2d:b0:2a:77:29:7c:33:5f:14:0a:
                    ea:a9:b9:9c:72:1a:3e:cf:4d:93:39:a2:ce:65:ba:
                    7b:e4:91:6e:96:62:a4:f9:89:f9:b4:82:78:0d:9f:
                    08:62:10:36:00:c7:16:6f:95:2d:52:dd:35:46:7a:
                    56:0d:0a:f8:84:bd:f3:b3:b5:ff:82:b6:51:be:e2:
                    31:19:6b:f3:28:5c:40:df:6f:2f:76:f5:63:1f:66:
                    6c:f7:29:e8:bd:09:f5:d7:89:9d:ce:4e:26:d2:f7:
                    85:b4:48:6f:15:42:76:5f:24:c0:fd:45:b2:ac:d0:
                    69:ab:5e:ab:40:47:1a:54:27:52:36:4d:8f:88:7a:
                    8b:8d:18:97:8b:15:29:a7:58:40:90:f2:8b:16:ee:
                    8b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0F:DA:1D:E4:D8:7F:89:44:2E:DC:15:3D:94:99:B3:E1:3A:A6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dedb224e-c21b-37fc-a09d-32a7408f1077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:2f:33:5a:ad:0f:fe:0e:7d:57:ea:38:9c:e1:05:bc:15:a6:
         8f:09:da:2d:ac:30:50:19:8b:fa:a0:fa:20:b3:0b:81:10:38:
         3f:0f:0a:09:a6:e0:c1:41:64:1e:69:5d:33:da:f4:dd:4b:61:
         c2:7c:ec:2a:dc:36:94:b7:97:3e:56:9e:a7:8c:6d:0c:d1:a8:
         79:65:d3:c9:b2:9e:0d:8d:24:ed:17:94:64:ad:29:60:89:a0:
         da:50:d8:d9:28:01:2a:67:be:95:c9:34:23:52:d2:3d:58:58:
         30:8a:0c:33:64:06:3d:70:15:47:c3:58:a0:0b:80:c6:75:78:
         e7:c9:c4:06:79:a9:19:6e:8f:3f:0f:0f:fe:b5:26:3c:e9:1e:
         d4:ec:39:a6:53:19:05:36:42:78:00:83:66:18:31:3a:d9:fc:
         04:e6:b7:4a:c0:5a:fa:b5:8d:3f:60:05:e3:4c:b7:9b:83:f2:
         c1:d2:93:2d:b6:b4:3f:be:19:23:ea:73:5b:d3:db:c2:f0:ef:
         81:3b:2d:c5:79:63:7e:9f:96:83:84:9c:7b:ac:67:33:04:94:
         3c:49:2e:f5:d9:89:9a:cf:4f:22:f1:1f:cf:4c:c3:30:21:59:
         ff:6d:52:30:9b:dc:c5:47:77:42:2d:63:e1:0e:5d:7b:4f:9d:
         ab:ce:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:09:16 2026 by rpki-client