Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa
File:                     0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa (raw, json)
Hash identifier:          hdJHyl1zZcY96fna2Jw81oXNk+cOHz7U7tpJLZpNvSw=
Subject key identifier:   F1:1C:F5:CA:1C:6A:E7:F4:3F:EA:96:67:3D:A1:25:22:A0:44:1E:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC679260CC2787145D54CE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        70.23.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:92:60:cc:27:87:14:5d:54:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=8c3aafe6-66bb-40c4-96a4-566813a44ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:34:f7:cb:64:76:18:65:aa:ba:06:c6:90:
                    50:e7:33:33:e5:20:cf:6c:6b:40:77:f3:41:7a:e7:
                    25:ed:a8:4f:ca:bd:23:66:ba:cb:dd:07:fe:f2:d5:
                    e2:62:5d:72:df:ed:46:44:b0:51:f2:70:33:57:41:
                    37:d9:26:2c:23:69:fb:1c:66:1c:9e:7c:c3:e9:19:
                    63:79:3c:b0:e5:d6:02:dc:d7:57:93:71:1e:77:f2:
                    f7:e2:5b:8c:b4:18:b7:84:8a:9e:69:75:76:6b:b5:
                    8d:69:18:7d:3d:00:8f:fc:da:c3:a2:c1:1a:5d:94:
                    e5:a1:39:00:59:86:42:8b:29:5e:76:dc:a2:ef:f9:
                    01:23:8a:01:76:b7:45:00:ad:72:8e:49:dd:5b:6e:
                    84:91:dc:b7:0c:e7:1d:e0:11:93:30:13:6d:29:80:
                    77:8e:90:3c:a1:ae:e8:9b:70:d3:b2:7f:fb:73:84:
                    34:af:d6:e1:7e:24:f0:62:4f:87:b8:12:75:0d:4b:
                    e8:00:43:f2:01:d3:49:da:5a:3e:7a:e0:1f:1b:ac:
                    07:19:f7:e2:e4:21:26:11:d1:fd:19:60:06:87:7c:
                    f4:42:95:17:be:41:7d:71:fd:88:d2:1d:00:0f:6b:
                    c8:30:65:1b:89:1b:ce:5e:a8:dc:ee:fa:85:ab:36:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1C:F5:CA:1C:6A:E7:F4:3F:EA:96:67:3D:A1:25:22:A0:44:1E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab21566-1266-3d1b-9420-b53b19aaa3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:66:52:b1:dd:2d:31:64:f3:bf:e5:c2:2a:07:51:3d:fa:
         b8:48:ce:d1:25:55:1f:7b:fe:57:86:9d:ad:66:e5:f1:0c:2a:
         d0:5c:fc:09:49:d4:cb:4e:2e:05:3f:63:85:d2:59:0c:30:9a:
         50:5d:ae:ec:5d:ac:39:c4:3e:d7:70:28:2a:5d:58:a5:3e:62:
         20:cd:c1:5e:60:52:d2:31:3e:cc:dd:0c:ca:9d:9d:e7:7b:2a:
         dc:e1:2d:05:46:15:09:5c:3f:86:e6:d9:fc:fb:d9:6c:89:bb:
         40:26:dc:60:3b:ad:98:70:1b:99:4e:6b:0d:6e:6a:d4:bc:84:
         12:57:77:b9:81:ab:46:1d:1c:64:e7:4a:62:50:23:d8:89:2e:
         58:35:f3:63:d9:ef:98:c0:d5:74:8c:f2:3a:e4:c2:af:85:64:
         6d:b7:b9:98:b3:c8:0e:6f:69:a4:18:4c:79:b3:27:d1:ce:3e:
         4c:ed:1f:77:c3:c2:2f:f7:57:13:ec:38:ab:a7:94:a9:e9:44:
         67:70:50:20:47:10:b7:fe:27:93:1a:86:84:54:8e:e2:0d:ea:
         f5:89:d3:de:20:bb:61:c2:b6:69:69:9d:32:6a:df:1c:d8:80:
         3f:22:a5:e0:01:b4:af:71:aa:57:1c:6f:d9:a2:35:39:33:a9:
         eb:0b:50:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:53 2026 by rpki-client