Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa
File:                     e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa (raw, json)
Hash identifier:          /pRlbY/R5ZqrPBTVDRvlbOdDRd1jLt8+CZ9cUJoasdw=
Subject key identifier:   FB:50:9F:CE:72:1A:1A:51:63:F9:AD:45:F2:89:E9:08:0D:8A:48:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F90A31AF656BCF9652609D600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     701
IP address blocks:        70.106.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:1a:f6:56:bc:f9:65:26:09:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=8c4cc8b3-3c83-4268-a9c8-9b0de994f021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:02:b9:c8:ab:82:84:38:fc:55:44:dc:27:30:
                    af:d2:5f:23:5e:84:73:6b:49:b4:e2:d0:84:b8:d2:
                    94:1a:d6:fe:3f:3f:8c:64:90:35:c2:1a:e8:93:7e:
                    c4:61:03:57:df:73:c6:26:8d:49:42:79:9f:b5:77:
                    b9:08:01:6e:16:f6:fb:57:22:e7:3b:72:32:e2:99:
                    f6:e3:85:78:36:b0:06:a3:83:70:1f:9e:80:ff:16:
                    71:b8:6d:2e:df:0c:5a:1d:57:fd:14:72:84:30:6f:
                    5d:bc:06:16:4c:6f:3a:c9:72:8d:29:3e:6c:45:9a:
                    da:d7:17:a1:67:4b:dc:77:1d:d1:16:ca:e4:70:d4:
                    a6:5d:cf:f6:58:45:b4:01:88:2a:31:9e:32:ea:3d:
                    58:1b:f8:94:b7:d0:d1:da:90:f0:a1:46:1c:2a:27:
                    a9:73:4e:00:99:08:c6:8d:93:9e:64:bc:9c:84:25:
                    3c:b0:c6:ff:89:69:45:18:68:ce:45:30:ea:78:55:
                    8d:6d:6b:e9:e3:5e:66:71:17:5d:74:8c:e0:4b:a3:
                    06:b8:3f:c9:1d:d3:f3:65:0e:96:de:42:e0:d7:88:
                    e7:99:b1:20:28:7b:57:e9:df:ee:8c:c3:bb:dc:76:
                    0b:82:ef:8b:bb:35:4a:04:b7:29:31:af:76:c4:c1:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:50:9F:CE:72:1A:1A:51:63:F9:AD:45:F2:89:E9:08:0D:8A:48:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.106.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a8:8f:8b:b5:f9:d2:8d:3b:53:8e:db:21:f5:24:d8:f5:3d:
         7a:b0:a0:fd:73:91:72:84:07:6a:f3:69:32:4f:2f:a2:a0:ae:
         7f:82:da:ff:ed:44:8a:c1:0a:03:4a:c2:93:17:78:59:c7:3f:
         63:6c:d4:e8:5f:36:a0:64:f0:91:a0:2c:03:88:79:ec:ea:a6:
         87:90:ed:a8:8b:67:ee:df:89:fe:f3:30:1e:f4:4a:d8:e0:20:
         b8:b2:93:a0:c4:62:03:03:02:91:df:b2:56:1f:49:7d:5a:8e:
         22:fb:77:a5:81:c8:6e:46:16:b1:ee:ac:7b:e8:92:30:08:e7:
         73:7c:54:a3:e2:d6:46:07:57:83:ac:41:27:2f:5c:d3:63:89:
         27:ba:6c:9a:f0:4a:c1:87:94:73:91:a7:b4:99:d9:a3:81:9d:
         50:c1:71:36:00:09:1d:87:ad:c1:3e:55:5e:06:cf:5c:94:4e:
         90:c0:e2:33:1d:98:56:1f:7f:f3:44:ab:18:c4:81:3a:c7:86:
         6b:dd:fc:8d:52:c9:53:71:ab:24:50:7d:84:54:5e:9d:d2:ab:
         79:00:74:9d:5d:cd:c5:b1:be:bd:df:1f:e3:0b:2f:36:03:6e:
         10:25:a1:e4:5c:c9:4e:8c:74:e8:85:7f:97:97:07:96:81:93:
         9e:fd:19:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:25:37 2026 by rpki-client