Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1fcf017-aed8-311f-89d1-f028d335b4c1.roa
File:                     e1fcf017-aed8-311f-89d1-f028d335b4c1.roa (raw, json)
Hash identifier:          o4Rjqr7+SyIQ1iusUwUqdwzeSVbosje/l6rP5QadV3A=
Subject key identifier:   7D:F8:01:64:1B:5B:97:B5:0A:F2:CC:09:F5:02:A9:70:C9:F3:D2:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF717802703E5DFB34046C200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1fcf017-aed8-311f-89d1-f028d335b4c1.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        71.185.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:80:27:03:e5:df:b3:40:46:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=943e35ca-5307-4749-bc78-d26ec7b21208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:55:4e:25:ce:8b:1a:5e:8f:f6:66:c9:89:e2:
                    ae:23:59:d4:d3:f3:fd:0b:79:9b:c5:ae:99:b4:63:
                    d6:cc:57:72:48:76:7e:bd:36:ad:23:b7:16:25:fc:
                    fc:72:f3:bd:05:51:4b:b2:55:3c:f0:ff:ab:8f:a6:
                    91:df:bb:20:6a:7d:71:f6:be:a6:bf:98:07:9a:b4:
                    06:ed:aa:8b:c1:a8:32:07:b7:77:89:41:97:87:0c:
                    54:b0:b7:3e:70:eb:07:61:5d:29:36:d0:aa:fe:a3:
                    c1:f3:cf:dc:8a:5e:de:d1:49:84:77:cc:fe:9c:9c:
                    10:28:5b:09:22:e2:ad:b5:a3:a3:72:ae:ae:c8:c8:
                    de:98:92:6d:b1:05:9b:fb:e4:3b:ca:0c:7f:f5:fd:
                    d8:3f:75:3f:87:bd:f7:cd:9b:d9:9c:dd:14:60:9b:
                    38:83:90:be:e1:1f:ca:67:c9:ec:e5:db:cf:95:19:
                    af:b4:8d:c5:39:6b:ef:29:c5:2f:02:d6:c7:74:47:
                    94:8f:64:e1:e3:4f:c3:b2:c5:1d:5d:4c:f8:07:e9:
                    5e:7b:7e:74:6a:4b:dd:4a:33:fc:b8:70:33:4c:9b:
                    f6:a1:c9:7f:5d:01:a9:f4:2f:77:0b:43:a7:e7:a5:
                    5b:2b:6c:9d:e0:9b:e9:73:34:c6:56:87:20:4d:5f:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F8:01:64:1B:5B:97:B5:0A:F2:CC:09:F5:02:A9:70:C9:F3:D2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1fcf017-aed8-311f-89d1-f028d335b4c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:02:18:9d:b6:ad:c0:11:cb:64:85:41:19:53:f8:2b:a8:27:
         6a:a3:86:b5:da:e4:b7:b7:ae:25:af:5f:bc:43:f5:cb:92:0a:
         84:cf:f5:c9:8b:93:20:35:7d:ee:eb:1d:92:26:7f:8a:af:90:
         f9:bf:02:3b:cc:c7:d1:45:f0:2a:38:bf:75:14:12:67:4d:fb:
         19:64:4f:ca:fb:88:7d:1a:10:3e:0d:79:fd:8e:c9:b6:a7:86:
         7e:62:2b:ae:ce:d3:e2:6d:b5:00:a8:c8:6b:e2:6e:58:82:56:
         aa:e5:a2:8f:ff:8c:4a:8d:02:8c:ec:83:0d:f8:2a:47:ef:21:
         59:9d:bf:e6:fa:c1:72:0d:94:c5:d0:02:9c:db:32:9d:88:66:
         b6:43:ab:02:b9:0e:76:27:37:04:e8:48:b8:55:80:7e:9f:3a:
         8a:2f:ac:46:98:61:c2:ef:ce:93:0c:fa:45:af:3a:58:69:e4:
         a3:e2:c7:d7:c1:47:57:ec:c0:97:b6:0a:46:9f:4e:85:02:e0:
         85:d1:ad:fa:ca:c8:6e:25:83:22:dc:1a:8f:5f:d1:46:61:8b:
         43:1c:76:ea:e8:b4:da:3e:ec:fd:f0:3f:0f:82:8c:2d:4a:ec:
         e3:9c:8b:47:bf:dd:47:8b:cb:e7:c3:fa:e1:5d:c8:50:d0:65:
         e9:f7:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:41:43 2026 by rpki-client