Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/180fd2a6-88f9-313e-b28d-a6410a55fa51.roa
File:                     180fd2a6-88f9-313e-b28d-a6410a55fa51.roa (raw, json)
Hash identifier:          qdfhbo/aOht8Q0K6CJbWVjytc5Jn/XivD1Jba4/katk=
Subject key identifier:   B1:8F:36:EA:67:64:96:45:ED:2B:F9:50:3D:BD:C6:AF:24:59:07:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7D8A90CCD2263527784C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/180fd2a6-88f9-313e-b28d-a6410a55fa51.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        71.246.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d8:a9:0c:cd:22:63:52:77:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=a3280988-06c0-48ca-bff1-597a4f26e25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:26:a1:a9:67:73:c5:d7:b2:77:f7:90:e8:
                    e1:0d:fd:f8:dc:28:9a:82:a9:0d:d5:36:a7:b1:5e:
                    b1:cc:a9:93:eb:16:72:2d:91:b7:96:e3:39:49:71:
                    a2:87:11:c5:36:d1:0a:d8:4c:d2:aa:79:06:9a:13:
                    39:ef:72:df:a2:b2:53:53:c8:ae:58:4a:4f:f1:51:
                    06:7b:63:0f:28:02:c7:ab:b4:a1:34:67:1f:b1:d3:
                    b3:c7:df:49:78:86:63:ab:d0:01:63:8c:06:86:b6:
                    a2:c3:8c:9c:58:37:ec:75:43:fd:53:ae:94:06:33:
                    0f:f9:df:db:f1:15:6c:6f:6e:98:24:8c:98:1a:7d:
                    62:72:b7:30:c4:56:2b:0e:de:6c:e3:f1:b4:a8:ff:
                    c0:ca:ec:e2:74:9e:9e:98:01:89:6a:73:55:c0:37:
                    f6:18:fd:6b:38:cb:c2:58:43:9c:46:ee:74:dd:51:
                    f3:4c:7e:84:65:9d:2e:26:6f:97:11:79:e8:d9:4e:
                    a1:b1:df:2f:94:7a:a8:86:2d:db:e6:5f:2e:5a:65:
                    a8:db:e6:3b:93:8b:24:7b:24:12:b4:b9:7b:74:49:
                    00:f7:38:dc:79:fb:5f:ca:1c:13:55:11:26:69:1a:
                    33:b9:28:58:47:64:a9:5f:c4:2d:d2:f0:56:5c:1c:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8F:36:EA:67:64:96:45:ED:2B:F9:50:3D:BD:C6:AF:24:59:07:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/180fd2a6-88f9-313e-b28d-a6410a55fa51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.246.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4e:d5:de:96:02:f4:82:e6:a7:a9:23:f6:34:41:4b:d6:fb:
         4a:f0:08:c6:33:7b:41:f5:d2:a0:3d:1a:d2:a4:d6:9c:bb:34:
         19:61:d1:59:a0:55:3e:de:77:9b:2a:16:b6:d5:31:f8:61:3e:
         3a:0f:3d:48:9c:86:35:83:a2:b6:fe:be:be:44:f8:f1:9c:d7:
         be:ad:72:1d:89:5d:ec:3f:38:01:9b:3a:e4:bd:10:5b:68:0e:
         26:dc:30:01:5d:7b:a2:f5:d5:f8:93:72:fd:5a:d8:ee:23:6c:
         55:9f:46:51:d3:1f:6b:cf:e6:1a:84:d8:42:bb:fb:c9:87:53:
         81:4c:91:a1:86:92:cf:e8:b5:1d:54:ba:49:fc:b7:53:7e:37:
         6b:49:32:da:fe:ac:e7:66:3b:14:23:13:30:c8:94:80:85:88:
         bf:9f:d8:f1:25:04:b6:5a:d8:f9:c7:89:dc:44:b3:63:31:b6:
         54:a0:9e:c5:a7:c2:8e:17:ff:52:22:dd:06:fb:5e:83:0b:fa:
         e0:7e:9d:75:9a:47:01:d4:c8:74:11:ac:e7:c3:33:00:06:cc:
         27:36:89:fc:76:91:7e:b0:ec:44:71:c8:bc:e6:ec:3f:69:0a:
         1d:eb:ca:4b:e8:46:df:8e:42:47:00:fa:a6:45:90:2c:18:1b:
         af:87:a2:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99ipDM0iY1J3hMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
YTMyODA5ODgtMDZjMC00OGNhLWJmZjEtNTk3YTRmMjZlMjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq40moalnc8XXsnf3kOjhDf343CiagqkN1Tan
sV6xzKmT6xZyLZG3luM5SXGihxHFNtEK2EzSqnkGmhM573LforJTU8iuWEpP8VEG
e2MPKALHq7ShNGcfsdOzx99JeIZjq9ABY4wGhraiw4ycWDfsdUP9U66UBjMP+d/b
8RVsb26YJIyYGn1icrcwxFYrDt5s4/G0qP/AyuzidJ6emAGJanNVwDf2GP1rOMvC
WEOcRu503VHzTH6EZZ0uJm+XEXno2U6hsd8vlHqohi3b5l8uWmWo2+Y7k4skeyQS
tLl7dEkA9zjceftfyhwTVREmaRozuShYR2SpX8Qt0vBWXBwlFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGPNupnZJZF7Sv5UD29xq8kWQezMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTgwZmQyYTYtODhmOS0z
MTNlLWIyOGQtYTY0MTBhNTVmYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/aQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpO1d6WAvSC5qepI/Y0QUvW+0rwCMYze0H10qA9GtKk1py7NBlh0Vmg
VT7ed5sqFrbVMfhhPjoPPUichjWDorb+vr5E+PGc176tch2JXew/OAGbOuS9EFto
DibcMAFde6L11fiTcv1a2O4jbFWfRlHTH2vP5hqE2EK7+8mHU4FMkaGGks/otR1U
ukn8t1N+N2tJMtr+rOdmOxQjEzDIlICFiL+f2PElBLZa2PnHidxEs2MxtlSgnsWn
wo4X/1Ii3Qb7XoML+uB+nXWaRwHUyHQRrOfDMwAGzCc2ifx2kX6w7ERxyLzm7D9p
Ch3rykvoRt+OQkcA+qZFkCwYG6+Hols=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:13 2025 by rpki-client