Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a66d58c-a0ed-3dde-b0e8-3866908d2008.roa
File:                     1a66d58c-a0ed-3dde-b0e8-3866908d2008.roa (raw, json)
Hash identifier:          fWVv7hhDSyhTQ2DocsjjghjQfHRqTWIRtT9Lss80qKc=
Subject key identifier:   02:0F:CF:B4:08:3D:61:F5:61:80:65:B4:0C:38:40:FB:82:ED:A9:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FDF1E03204E9ADAA30A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a66d58c-a0ed-3dde-b0e8-3866908d2008.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        71.251.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:df:1e:03:20:4e:9a:da:a3:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=ae1cda4f-4822-443c-bc73-803251e940c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:d1:05:ea:44:a2:8b:43:5f:86:b6:d6:8b:
                    14:98:e4:f2:a9:27:66:b2:d6:dc:94:84:2a:73:21:
                    f9:d9:34:5d:c6:31:d7:7e:10:83:72:c3:6b:66:f5:
                    05:d7:9d:65:7b:ea:05:ef:d8:3b:8c:20:2a:4e:36:
                    1b:87:b3:ad:b5:da:38:06:2e:fc:39:89:24:e5:97:
                    12:a1:fd:43:ed:38:96:d8:93:9c:b8:a5:78:d0:a2:
                    68:d1:88:d2:4e:18:88:d2:1a:c5:c4:96:4b:f1:19:
                    29:b6:1a:92:c6:cf:3d:f1:12:39:f5:40:ba:7d:dd:
                    41:00:ae:7e:1b:34:12:d1:5f:c6:d8:20:f2:f8:62:
                    59:96:16:81:cb:57:07:e3:4f:5b:0d:63:ec:02:be:
                    2e:7e:6a:96:5b:eb:9a:ff:c8:f1:d8:a5:f5:c9:fa:
                    5c:79:84:df:fc:ab:3b:71:32:35:8d:9f:89:58:47:
                    85:ac:f5:7c:67:44:e0:19:9c:43:36:4d:66:e5:6d:
                    da:79:5e:fe:b6:f9:f4:b1:6c:14:31:f6:b4:97:68:
                    27:b4:20:ea:ed:bb:53:dd:a2:af:fe:aa:56:ff:d2:
                    95:7b:d3:8a:9a:eb:4f:0b:48:2e:ea:12:14:8f:c8:
                    35:24:1e:70:73:b2:d4:f9:cc:f5:de:f7:10:87:f3:
                    e1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0F:CF:B4:08:3D:61:F5:61:80:65:B4:0C:38:40:FB:82:ED:A9:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a66d58c-a0ed-3dde-b0e8-3866908d2008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.251.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:de:1d:f7:44:ca:08:d2:91:85:08:9f:c2:3a:57:4b:9e:64:
         1a:3c:9b:5c:d5:bf:81:2d:24:5d:d6:f9:75:7e:d1:4e:54:07:
         64:d8:d1:93:bd:39:28:b9:2a:3d:5a:02:a4:78:d5:d5:e9:87:
         1a:4d:6f:70:ac:b9:9b:54:2f:d6:d5:8a:08:b2:77:d8:ac:ba:
         b6:d5:96:e2:e0:e3:94:8a:25:20:43:7a:fb:35:a6:7e:02:bd:
         49:09:1c:fe:ed:0a:b8:01:db:31:f1:72:0c:24:21:80:f8:66:
         db:29:0c:1d:c2:e3:bb:a8:a6:56:b2:72:3c:0f:ed:da:f2:20:
         fe:08:48:bd:57:dc:6a:30:2c:c0:fd:f8:19:33:44:2d:c7:e8:
         06:b5:bc:61:fa:d5:3d:d2:73:20:33:c2:42:cd:99:8d:5a:d6:
         45:d6:00:9c:5f:b0:0a:9a:c0:84:30:cd:69:73:d0:d3:ed:7d:
         31:d6:7d:cc:d7:2c:02:f3:3e:35:fc:e6:90:3a:4e:a6:ee:ee:
         9d:3e:4a:e7:c0:92:4c:5d:a6:9d:ae:87:74:57:55:8f:7e:91:
         ec:e0:19:e4:5b:57:92:e7:2d:2f:61:be:9b:e9:bd:e8:93:61:
         56:03:93:15:0f:bb:32:d5:b0:7d:28:06:9a:f0:da:9e:8b:6c:
         ca:e1:61:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b98eAyBOmtqjCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
YWUxY2RhNGYtNDgyMi00NDNjLWJjNzMtODAzMjUxZTk0MGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvTRBepEootDX4a21osUmOTyqSdmstbclIQq
cyH52TRdxjHXfhCDcsNrZvUF151le+oF79g7jCAqTjYbh7Ottdo4Bi78OYkk5ZcS
of1D7TiW2JOcuKV40KJo0YjSThiI0hrFxJZL8RkpthqSxs898RI59UC6fd1BAK5+
GzQS0V/G2CDy+GJZlhaBy1cH409bDWPsAr4ufmqWW+ua/8jx2KX1yfpceYTf/Ks7
cTI1jZ+JWEeFrPV8Z0TgGZxDNk1m5W3aeV7+tvn0sWwUMfa0l2gntCDq7btT3aKv
/qpW/9KVe9OKmutPC0gu6hIUj8g1JB5wc7LU+cz13vcQh/PhsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIPz7QIPWH1YYBltAw4QPuC7al+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWE2NmQ1OGMtYTBlZC0z
ZGRlLWIwZTgtMzg2NjkwOGQyMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/uQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfeHfdEygjSkYUIn8I6V0ueZBo8m1zVv4EtJF3W+XV+0U5UB2TY0ZO9
OSi5Kj1aAqR41dXphxpNb3CsuZtUL9bVigiyd9isurbVluLg45SKJSBDevs1pn4C
vUkJHP7tCrgB2zHxcgwkIYD4ZtspDB3C47uoplaycjwP7dryIP4ISL1X3GowLMD9
+BkzRC3H6Aa1vGH61T3ScyAzwkLNmY1a1kXWAJxfsAqawIQwzWlz0NPtfTHWfczX
LALzPjX85pA6Tqbu7p0+SufAkkxdpp2uh3RXVY9+kezgGeRbV5LnLS9hvpvpveiT
YVYDkxUPuzLVsH0oBprw2p6LbMrhYUs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:13 2026 by rpki-client