Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa
File:                     1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa (raw, json)
Hash identifier:          04TeBLBrjlvPht7t3F0fp1hfvf8jn7mtT71keMejaDo=
Subject key identifier:   6C:8C:19:65:B7:07:AF:B4:FE:D7:7C:45:84:54:0B:03:DD:43:3E:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F80902480C60C502FA16C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        71.187.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:09:02:48:0c:60:c5:02:fa:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=2c7cebab-800f-4d1b-b221-1bb29c4a4c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:99:e3:e4:e2:39:c0:8d:3a:11:24:cd:e5:
                    aa:db:f8:ec:fb:a8:e0:a5:04:73:30:3b:58:ab:61:
                    20:f9:4d:91:ae:1b:3a:45:e5:46:57:11:64:ce:82:
                    23:c6:f7:ef:e5:70:20:83:52:d4:9c:af:c8:60:d0:
                    65:f0:40:26:21:88:27:81:53:68:46:27:37:c6:4f:
                    be:0b:b2:c8:40:3f:72:2b:4a:e1:db:42:b8:14:96:
                    9e:91:49:aa:8e:4a:b4:44:4b:b1:38:e8:7e:67:52:
                    bd:91:19:cb:8c:10:7d:7f:7e:a7:1e:54:4b:c7:cd:
                    d5:64:41:68:56:ef:30:ad:2d:b0:59:91:cd:69:97:
                    44:0b:f9:72:94:09:de:50:48:01:ee:35:7e:df:39:
                    5c:3d:ad:e6:54:a6:05:73:a1:bd:bb:be:8b:fd:4f:
                    4f:85:09:e5:0d:f1:6e:95:c3:81:2d:cb:1d:ee:7e:
                    4d:ac:10:86:e5:52:74:fb:7f:e0:4a:58:7d:fa:5d:
                    c3:cd:cd:0b:29:42:74:b6:ce:df:a4:52:d8:81:ad:
                    18:ca:fa:b9:ea:93:55:e1:af:ef:4a:07:db:f8:1e:
                    1f:72:0b:d6:4a:7b:a0:77:d3:08:d6:f1:15:67:50:
                    44:5c:0d:62:9a:e1:e6:d6:cf:ab:b8:c5:c8:3a:ff:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8C:19:65:B7:07:AF:B4:FE:D7:7C:45:84:54:0B:03:DD:43:3E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.187.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:08:ac:f4:79:16:6f:42:fa:67:29:6b:1b:ed:fc:05:bf:6e:
         55:81:21:e2:b8:22:ce:85:6e:d1:95:04:c1:de:8f:ff:92:cf:
         8f:89:db:67:8a:e7:48:fc:00:0a:60:bf:fb:e7:55:97:59:67:
         81:81:7f:61:d1:17:24:66:50:10:36:6b:63:40:0d:05:9f:7c:
         9a:38:0a:f0:f3:09:0d:43:e8:73:1c:ac:d2:d7:4f:76:80:a5:
         5d:46:b4:be:70:e6:10:39:ac:1c:08:6b:1f:71:0a:64:59:72:
         c8:7f:bd:12:da:9f:89:e3:fd:83:df:14:0d:f3:00:64:65:0b:
         6e:8b:d1:59:5a:0f:bb:7f:4a:82:3e:c0:48:24:a1:2a:42:0d:
         71:9d:ee:a4:c7:b9:20:c4:1c:31:53:e0:01:d2:ec:81:b3:a5:
         34:cf:9a:1f:50:fe:02:0a:aa:d8:fb:eb:65:bc:b8:62:78:31:
         26:48:05:92:97:55:3f:03:f0:02:3a:1c:73:16:61:b4:85:c9:
         40:e5:a0:2a:bd:26:69:3f:83:e9:3f:2b:2d:10:ca:df:10:1f:
         f1:85:71:ac:33:c5:fa:f7:05:c5:0e:14:c4:b7:6e:cc:9d:25:
         5e:ae:0e:54:00:0c:bb:c6:87:95:90:11:3d:d3:9e:4d:e0:14:
         09:88:fe:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy+AkCSAxgxQL6FsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
MmM3Y2ViYWItODAwZi00ZDFiLWIyMjEtMWJiMjljNGE0YzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApomZ4+TiOcCNOhEkzeWq2/js+6jgpQRzMDtY
q2Eg+U2Rrhs6ReVGVxFkzoIjxvfv5XAgg1LUnK/IYNBl8EAmIYgngVNoRic3xk++
C7LIQD9yK0rh20K4FJaekUmqjkq0REuxOOh+Z1K9kRnLjBB9f36nHlRLx83VZEFo
Vu8wrS2wWZHNaZdEC/lylAneUEgB7jV+3zlcPa3mVKYFc6G9u76L/U9PhQnlDfFu
lcOBLcsd7n5NrBCG5VJ0+3/gSlh9+l3Dzc0LKUJ0ts7fpFLYga0Yyvq56pNV4a/v
Sgfb+B4fcgvWSnugd9MI1vEVZ1BEXA1imuHm1s+ruMXIOv+vNQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGyMGWW3B6+0/td8RYRUCwPdQz4uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWQxNzI0NzQtNmY0OC0z
MWU3LWFiNmQtYWMwYzYwOTBjMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR7swVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjQis9HkWb0L6ZylrG+38Bb9uVYEh4rgizoVu0ZUEwd6P/5LPj4nbZ4rn
SPwACmC/++dVl1lngYF/YdEXJGZQEDZrY0ANBZ98mjgK8PMJDUPocxys0tdPdoCl
XUa0vnDmEDmsHAhrH3EKZFlyyH+9EtqfieP9g98UDfMAZGULbovRWVoPu39Kgj7A
SCShKkINcZ3upMe5IMQcMVPgAdLsgbOlNM+aH1D+Agqq2PvrZby4YngxJkgFkpdV
PwPwAjoccxZhtIXJQOWgKr0maT+D6T8rLRDK3xAf8YVxrDPF+vcFxQ4UxLduzJ0l
Xq4OVAAMu8aHlZARPdOeTeAUCYj+hg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:43 2025 by rpki-client