Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa
File:                     e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa (raw, json)
Hash identifier:          JBrTZQ40PRJcWMKO1eSOE3qP/bQ+SDEHrmk3EGlk0Mc=
Subject key identifier:   5F:F8:D9:F5:7A:BC:60:04:F3:D7:B9:D3:58:83:90:95:20:5B:E8:46
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A883E4AFB6148F785840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        173.64.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a8:83:e4:af:b6:14:8f:78:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=9cb5e6d5-b158-40ba-bb52-8b317f58b1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:48:17:b7:87:ad:1b:f0:72:52:85:24:95:23:
                    df:00:1b:01:d6:8f:b3:61:e2:a1:a9:38:57:37:b0:
                    5b:12:56:17:6d:39:11:33:d4:d7:8b:3f:d6:98:6d:
                    03:c4:e3:e1:84:d8:81:16:8c:88:88:e1:b4:93:03:
                    fc:5e:70:ca:13:8b:ca:8c:ea:be:80:8e:6d:c6:b0:
                    d6:1c:c6:bd:d5:fb:57:88:c5:e7:bf:23:72:51:e7:
                    3c:09:ca:90:69:2a:78:9f:0c:6b:37:fe:7e:d7:29:
                    83:ec:97:fc:43:10:87:94:13:1a:5c:35:04:cf:01:
                    b4:ad:d2:e3:4f:6d:70:96:f7:be:ff:64:aa:4a:51:
                    c1:8f:7d:57:a7:0e:15:ae:f0:c7:89:fe:c0:f1:58:
                    0f:21:d1:3d:be:e0:47:28:25:48:85:a1:04:d7:54:
                    6a:8d:5e:79:47:af:2b:bb:ab:7c:8f:dc:d8:98:58:
                    b0:5d:36:73:77:d2:74:d2:14:f6:4b:4d:28:af:82:
                    c5:d0:cc:ed:8b:4f:ac:6a:e3:13:27:17:90:6e:a8:
                    b9:c4:80:69:7c:c9:08:1c:a3:b4:46:df:e2:e8:cf:
                    24:5d:29:c5:3c:5a:76:43:19:f7:53:6a:13:18:e1:
                    2d:15:3a:26:03:08:cd:41:be:7b:2f:41:ef:14:25:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F8:D9:F5:7A:BC:60:04:F3:D7:B9:D3:58:83:90:95:20:5B:E8:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e05f7e0b-5331-3a5a-93bb-a5bbc38230b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.64.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:64:0e:3a:f1:33:ce:1e:27:d3:bc:c5:5e:04:81:6c:44:
         e2:1c:6b:bb:52:18:ee:bc:7c:20:99:63:c8:98:50:7e:ee:75:
         8b:6b:6d:ce:a8:bd:23:e4:9a:9c:1c:63:32:92:48:9b:02:89:
         3b:ce:54:97:02:62:cf:00:87:c9:6a:31:18:51:cb:b2:08:80:
         ca:93:b0:89:a5:8f:6f:50:03:b2:d1:71:8d:7b:ef:a7:cc:48:
         57:d2:9a:d1:af:2b:89:f9:0e:b2:5d:36:0d:0b:b4:46:56:74:
         ee:b5:2e:54:97:75:d9:db:14:3a:28:10:54:ac:e6:84:8e:66:
         0e:55:bb:71:89:bc:15:32:d9:15:94:a2:68:83:9a:d9:69:12:
         fe:e3:c5:38:bc:ab:03:06:c5:b8:a8:4d:3c:35:d2:92:d7:42:
         23:15:a8:60:15:6b:e8:b6:7a:5a:3a:eb:d7:7f:9e:84:ef:5c:
         9e:e6:01:fc:2c:36:7f:d8:c7:72:f5:1d:bd:dd:5a:b0:f8:16:
         5a:8b:97:0e:27:1a:78:6e:34:3b:56:3e:93:cb:4d:0f:8c:30:
         ac:2e:f4:c5:96:af:c2:d5:d7:47:91:86:85:15:9d:b9:ad:35:
         d1:17:ad:00:68:18:52:02:c9:7f:36:dc:31:fa:53:6b:2a:a0:
         cc:35:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:52 2026 by rpki-client