Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a1f0104-fa65-3aed-8463-f103ee92b445.roa
File:                     1a1f0104-fa65-3aed-8463-f103ee92b445.roa (raw, json)
Hash identifier:          qn/xUYqkIort1zyE/J33CNo6tc7Qk2n2P6o4y3nv4kA=
Subject key identifier:   FE:78:F2:3D:9D:A8:02:C0:C7:7D:7F:F7:CB:E6:70:F3:D3:16:2C:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6C0FBC2B0605B1DC41D5A5C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a1f0104-fa65-3aed-8463-f103ee92b445.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     701
IP address blocks:        71.116.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:bc:2b:06:05:b1:dc:41:d5:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=dcb1e1ef-ba7f-4a36-ab59-9b748479e77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:75:99:f0:1a:12:ab:13:72:59:d1:f9:3b:
                    5a:76:3a:d4:9f:b1:99:58:02:f8:59:c4:90:c9:29:
                    35:3d:54:e7:66:95:b3:38:36:e1:4e:73:a3:e7:68:
                    27:2e:70:c2:53:44:a5:8c:c4:d1:95:a8:ae:cc:3b:
                    60:37:1c:91:ed:80:ba:b2:75:70:29:35:2c:5e:83:
                    66:43:5d:61:7d:90:e2:7d:f7:75:31:59:63:a8:71:
                    fe:6b:8b:54:0e:7d:ca:f5:e2:bf:7a:62:8d:05:94:
                    2a:af:79:d6:8f:53:b0:9a:3a:99:d7:fe:c2:d5:f6:
                    fc:e3:50:3a:37:19:7b:5d:0b:7c:14:8d:da:5e:48:
                    e0:72:ea:6b:8f:c5:a8:21:4d:72:a6:7a:98:13:3e:
                    c8:f6:a4:54:61:fc:6f:b9:10:5c:47:56:3b:f8:74:
                    b5:d6:9d:81:fe:78:e8:be:bd:07:96:b2:21:e8:97:
                    13:79:60:f7:f9:15:89:46:ee:4c:39:8e:35:a8:36:
                    57:2b:70:a6:09:85:4d:95:48:fc:b4:45:13:8c:de:
                    ba:7e:40:7b:5e:8b:5b:5b:ca:6d:90:bf:50:8e:27:
                    43:d8:79:af:d4:97:91:51:cf:a6:48:b8:97:93:cd:
                    71:83:94:95:98:b1:ea:dc:9e:a3:26:62:72:c5:70:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:78:F2:3D:9D:A8:02:C0:C7:7D:7F:F7:CB:E6:70:F3:D3:16:2C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a1f0104-fa65-3aed-8463-f103ee92b445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.116.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3d:25:6d:1a:81:e4:d9:53:1b:dd:00:fb:92:27:04:87:1f:
         0f:74:91:6a:ef:50:ab:b1:ff:18:ce:8f:43:9b:f2:12:1e:a3:
         c5:18:ec:62:f5:bc:81:02:d5:ca:72:fa:ee:5b:4f:5a:08:b5:
         58:8d:73:da:68:50:10:35:41:d0:89:fe:a2:77:61:af:45:38:
         35:f4:00:2e:6a:cf:f9:78:25:5b:d2:63:fc:d8:6a:57:d0:45:
         fc:84:92:b9:2a:c4:f2:de:93:f3:2c:e2:07:6f:1b:55:c4:80:
         b9:35:cc:cb:2a:38:bd:c0:ca:8b:d1:c0:f8:15:b1:83:80:39:
         a1:cc:9a:00:b7:fe:38:6c:2e:06:08:1d:dd:5e:65:a7:46:73:
         e1:c0:5f:93:1f:fa:48:9e:1f:de:0e:f6:1b:15:47:48:a0:a3:
         0b:19:b1:2a:8d:2a:69:04:3b:1d:9f:8d:63:14:31:85:b0:23:
         4a:f4:6d:db:69:36:9c:71:79:32:79:01:ec:b3:dd:b9:af:41:
         69:93:b6:db:96:6c:cd:73:5f:24:d1:e3:59:82:63:6d:a5:47:
         b3:25:11:bf:f1:02:46:de:cb:d7:95:14:84:55:ac:68:64:00:
         8e:f5:7e:c9:cc:ea:37:75:3a:be:9f:4d:fe:47:9a:3d:09:23:
         c1:8f:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:38 2026 by rpki-client