Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fab77cc-80d5-3ad0-a822-d65320d28965.roa
File:                     1fab77cc-80d5-3ad0-a822-d65320d28965.roa (raw, json)
Hash identifier:          PHc2rY+VctCZjRaTYnqOlxz3dKkmIZ0zEttkrYEP4/g=
Subject key identifier:   84:A5:F6:F4:CC:84:D8:A6:26:60:72:CF:10:6F:48:D7:72:6C:F2:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7E302D7BF8AF5F9469F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fab77cc-80d5-3ad0-a822-d65320d28965.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        173.70.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e3:02:d7:bf:8a:f5:f9:46:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=a46ab60d-6049-4a94-b8ee-29336d1d426c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:ae:b5:10:ef:af:fd:42:e1:8f:8f:6a:a8:
                    7d:49:3d:f4:08:53:d6:67:28:a7:78:8c:84:d8:b8:
                    78:66:a3:36:96:b2:a9:bd:11:fd:d0:90:b6:89:16:
                    e3:0e:02:60:32:a5:ec:8c:a2:b7:ab:83:79:a5:cb:
                    2f:15:2d:1c:06:7b:ad:00:29:eb:0c:de:46:52:e3:
                    a7:f2:bf:43:d6:6d:c2:3f:8d:9f:98:ae:fc:ad:42:
                    e9:e0:a3:bf:dd:dc:56:8d:35:8c:e6:08:72:87:15:
                    ba:a7:54:83:47:21:8b:86:ba:02:5a:8c:0a:c3:1b:
                    57:18:59:f5:e5:b5:8d:55:ee:5f:01:24:73:c2:8a:
                    79:63:0d:86:f7:2a:2e:b4:35:fc:3a:b7:92:98:6b:
                    46:cc:6f:e3:ca:6a:cd:cc:e3:f6:0c:34:5a:29:d0:
                    88:19:0e:c1:2e:3b:23:9e:a6:38:cc:45:6e:51:34:
                    56:71:93:2f:a1:3f:ec:f6:d1:70:c9:15:eb:6f:96:
                    d3:97:a2:44:97:dc:a5:0b:2e:46:05:b8:1d:49:0b:
                    9f:b9:11:b7:56:f7:41:36:52:36:8b:ce:95:1d:e9:
                    7b:33:3b:4f:06:d6:22:05:80:eb:64:e7:90:18:6c:
                    df:2f:94:be:20:71:fc:43:e0:9a:c0:52:b4:a4:14:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A5:F6:F4:CC:84:D8:A6:26:60:72:CF:10:6F:48:D7:72:6C:F2:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fab77cc-80d5-3ad0-a822-d65320d28965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:42:21:f2:ee:bb:ab:77:7c:8f:8a:16:55:91:39:4e:01:19:
         7f:f2:74:29:59:e8:93:2c:da:96:fb:9f:f7:2e:5e:8c:6b:b9:
         58:a7:82:81:38:ab:ff:8a:8d:7a:c4:d2:27:c3:9b:c3:75:28:
         fe:78:9e:c8:b4:de:e9:39:2c:95:8e:f5:1f:8d:10:35:f8:e1:
         f9:66:a7:fe:17:e0:91:23:54:f5:99:d1:37:0f:4d:ba:e2:d7:
         a3:0f:c4:7c:a6:ee:61:88:17:39:b6:48:1e:32:db:07:64:4b:
         ae:2b:1e:5c:db:b5:69:c5:ce:7a:0f:cc:20:63:d7:de:ef:57:
         b3:9f:d2:56:46:5f:f5:b0:59:94:53:f3:68:4e:11:6a:b9:75:
         37:29:ba:3d:77:ea:c1:3f:1f:2d:b6:07:66:45:eb:76:7f:aa:
         aa:b5:a7:a4:d5:13:32:bd:77:b4:36:dd:95:b0:2b:09:9d:37:
         fc:99:d4:ce:94:c3:e3:72:5e:fc:b5:9b:c1:28:49:69:32:4c:
         10:43:70:bf:df:e7:2e:98:9e:13:97:63:9a:6b:ab:86:8a:fa:
         b2:39:48:10:71:f6:6f:2c:09:8d:c1:25:06:b4:3c:df:ba:de:
         2a:aa:ea:0e:64:1f:76:55:43:e6:0b:7b:cc:24:7b:2e:7c:53:
         bc:ed:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:48:34 2025 by rpki-client