Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa
File:                     dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa (raw, json)
Hash identifier:          Hlo6e6TsyZPQ9xQ/XogTa6eoBjIpapFRkHxNEWzcD3Y=
Subject key identifier:   29:06:A7:45:D5:C8:26:4F:C6:0A:CF:D6:39:9A:5E:67:B7:BB:A5:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A577C971AD28BDC3DA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        71.191.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a5:77:c9:71:ad:28:bd:c3:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=69f2c3ec-6301-4b08-a002-fe389d17b7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:63:67:fa:7a:2b:ce:cc:f6:08:b9:3e:bf:3d:
                    f2:fd:90:35:40:fc:a6:95:1d:63:55:96:25:e3:35:
                    9f:0d:59:fd:61:4c:e6:46:ca:b3:0f:c9:8a:8d:5c:
                    0d:77:4a:08:4a:f9:f9:19:5f:d3:20:c8:08:18:8d:
                    f5:64:a2:91:a2:e7:25:32:49:0d:99:75:e6:a5:5c:
                    68:ed:7c:e2:d4:3b:0e:51:30:b9:bc:a6:60:e8:2d:
                    10:32:9b:f6:64:a2:06:ea:0b:dc:ab:39:46:dc:cd:
                    b4:f2:2c:01:15:c0:47:6a:dc:14:83:54:1f:e0:5b:
                    23:c1:bb:bc:8c:12:e0:04:24:38:af:b8:cc:27:07:
                    bd:54:d9:a6:25:2e:92:f4:18:bb:ef:13:75:79:67:
                    65:23:ab:c0:a8:c4:18:57:52:5d:b0:0a:c8:01:0e:
                    dd:9a:71:1d:ca:d0:63:43:e0:b3:3e:ed:0d:9c:e2:
                    5d:95:e9:0b:52:ec:b2:71:9f:cf:ed:f5:2b:11:01:
                    80:dd:be:da:4f:0a:ce:da:ff:c6:7e:d0:68:e0:98:
                    79:eb:88:bc:16:48:ef:29:69:6b:55:ed:00:bf:51:
                    b4:c8:b4:d2:de:51:77:f5:d1:37:b9:c3:08:20:f1:
                    29:0f:1a:8a:48:71:c5:9f:7c:c9:8a:fc:a5:b4:2f:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:06:A7:45:D5:C8:26:4F:C6:0A:CF:D6:39:9A:5E:67:B7:BB:A5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:7f:39:7f:1a:08:34:de:c9:c5:89:db:b0:f8:2b:a5:64:
         5a:b9:e1:ed:c6:4c:9c:3f:16:b9:dd:5a:7c:ee:d9:78:ab:bf:
         dc:c3:5f:7b:d6:de:ac:d3:8a:b6:44:49:e8:12:b4:a3:fd:89:
         92:06:a4:bc:42:eb:17:7c:3f:08:49:e2:9f:04:16:2f:48:dc:
         1c:78:4d:63:9b:78:96:98:27:32:00:0d:29:a9:af:37:eb:29:
         32:9a:fc:8b:81:f1:f4:51:6b:27:db:eb:5b:30:e9:b8:0f:46:
         3e:5e:32:25:17:6f:24:4e:fb:58:23:bc:3b:21:09:0b:d8:6b:
         10:5a:b9:ab:43:40:9b:55:53:7e:a7:e8:d2:49:86:06:41:ad:
         60:8b:de:a3:8f:d0:ca:cf:3e:c0:14:21:6f:df:64:e4:bc:c4:
         ea:75:7a:e5:2b:7d:6f:71:05:56:93:58:0c:e8:99:9a:71:60:
         f6:41:1a:6c:28:54:8a:f8:04:65:c1:e9:42:f7:5b:e6:d9:ac:
         07:6b:33:02:d8:53:8d:1b:d3:ed:55:c5:01:11:76:2c:11:56:
         9d:ce:77:a2:1b:18:b1:ef:2b:9a:2a:87:04:bc:0a:a8:c7:2f:
         5f:60:e7:18:19:61:4a:88:1b:43:a8:e6:23:2c:00:73:6e:2c:
         34:fc:0a:2c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+aaKV3yXGtKL3D2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NjlmMmMzZWMtNjMwMS00YjA4LWEwMDItZmUzODlkMTdiN2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mNn+norzsz2CLk+vz3y/ZA1QPymlR1jVZYl
4zWfDVn9YUzmRsqzD8mKjVwNd0oISvn5GV/TIMgIGI31ZKKRouclMkkNmXXmpVxo
7Xzi1DsOUTC5vKZg6C0QMpv2ZKIG6gvcqzlG3M208iwBFcBHatwUg1Qf4Fsjwbu8
jBLgBCQ4r7jMJwe9VNmmJS6S9Bi77xN1eWdlI6vAqMQYV1JdsArIAQ7dmnEdytBj
Q+CzPu0NnOJdlekLUuyycZ/P7fUrEQGA3b7aTwrO2v/GftBo4Jh564i8FkjvKWlr
Ve0Av1G0yLTS3lF39dE3ucMIIPEpDxqKSHHFn3zJivyltC9JTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCkGp0XVyCZPxgrP1jmaXme3u6WjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGZmNzE3ZDktNWNjYi0z
YTFlLTg1MDMtYjEzMzBkM2VlNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR78wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIPN/OX8aCDTeycWJ27D4K6VkWrnh7cZMnD8Wud1afO7ZeKu/3MNfe9be
rNOKtkRJ6BK0o/2JkgakvELrF3w/CEninwQWL0jcHHhNY5t4lpgnMgANKamvN+sp
Mpr8i4Hx9FFrJ9vrWzDpuA9GPl4yJRdvJE77WCO8OyEJC9hrEFq5q0NAm1VTfqfo
0kmGBkGtYIveo4/Qys8+wBQhb99k5LzE6nV65St9b3EFVpNYDOiZmnFg9kEabChU
ivgEZcHpQvdb5tmsB2szAthTjRvT7VXFARF2LBFWnc53ohsYse8rmiqHBLwKqMcv
X2DnGBlhSogbQ6jmIywAc24sNPwKLA==
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:59:20 2026 by rpki-client