Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2957fc85-8830-394a-b555-15a6a4ffb5ca.roa
File:                     2957fc85-8830-394a-b555-15a6a4ffb5ca.roa (raw, json)
Hash identifier:          aU6jvZEso/q4PAXCx6r4UJ2WCno56n2dSZb9q24qcpQ=
Subject key identifier:   75:65:13:44:24:DC:77:69:E6:1F:AE:3A:D4:6D:F5:07:B2:01:89:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6C0FBB20E336583A73BE3E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2957fc85-8830-394a-b555-15a6a4ffb5ca.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     701
IP address blocks:        70.105.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:bb:20:e3:36:58:3a:73:be:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=d6b19b7c-8c21-4931-a6d8-060de2456be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:ea:ae:93:c4:3b:d9:59:25:38:aa:37:cd:
                    0b:7f:bd:8e:3d:29:6a:52:73:3d:37:bb:a6:47:61:
                    be:a1:bb:71:da:2f:9c:1a:0d:36:69:73:19:bb:e9:
                    71:a6:72:5d:68:a5:7d:78:15:79:33:d5:8d:74:92:
                    63:00:2f:ab:a7:37:a6:dd:c6:d3:43:f2:62:67:82:
                    c3:53:52:3b:71:0e:fa:8c:74:18:0a:09:74:f9:e8:
                    5a:fc:bb:9e:87:e9:19:02:88:cf:4f:88:0f:2f:df:
                    e9:81:ba:04:3d:0a:0b:85:6a:14:8f:ca:16:7f:38:
                    8f:de:24:32:a6:d1:74:09:f3:58:4a:12:09:6d:a2:
                    72:7a:95:9d:da:45:fa:2e:0c:d2:76:5d:09:5f:4e:
                    a3:66:47:2a:0f:23:62:9f:82:09:81:a7:a7:6f:88:
                    2a:27:08:ae:0d:d2:98:c7:a2:fd:0d:5a:a0:04:79:
                    29:05:3d:8e:b3:7d:d3:e6:ee:5c:45:5d:f2:de:1c:
                    bd:c2:a1:ee:32:a5:8a:31:c0:e7:bb:3d:d0:e3:38:
                    30:4c:be:32:cc:9f:c6:11:0d:ee:a8:53:5f:a9:e2:
                    72:c3:05:12:35:0c:9f:df:b1:a6:dc:bf:fb:ad:82:
                    18:6e:15:07:d8:a1:7a:04:26:25:81:19:85:7f:a3:
                    45:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:65:13:44:24:DC:77:69:E6:1F:AE:3A:D4:6D:F5:07:B2:01:89:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2957fc85-8830-394a-b555-15a6a4ffb5ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.105.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:49:9b:29:4c:13:ca:ec:f0:27:e2:80:05:ba:8f:85:f9:52:
         41:61:8e:66:2d:19:7c:d1:f6:b9:09:85:1e:86:cc:d9:89:a2:
         3f:aa:a1:e1:1d:10:81:f9:b3:22:e9:46:aa:07:b6:0f:37:2a:
         c3:c2:0c:ec:ca:1b:c2:82:84:23:ee:fa:c0:7b:7a:22:99:31:
         a2:8a:aa:1a:f8:02:6c:81:73:ec:16:36:f8:ed:0a:12:ad:c2:
         89:87:3e:bb:f9:05:45:4b:fb:8e:44:32:c8:b6:56:cf:d9:eb:
         c9:bd:a6:67:d1:3b:54:59:7d:6a:94:c1:04:0b:13:ef:77:6d:
         80:5d:06:58:e6:1e:15:41:a6:2a:e1:cf:b9:e3:55:1c:2c:21:
         d9:36:90:ec:a8:f3:0d:22:ff:a9:07:ad:3e:c4:f2:87:05:b7:
         19:ba:be:d8:60:3a:3f:0b:23:e8:09:38:ac:88:54:03:46:bd:
         1e:7b:2a:0d:3b:f0:30:db:1f:a9:70:d7:59:8e:c1:1a:ff:41:
         1b:31:d7:30:e9:2c:1d:ca:b1:7a:d4:89:1e:69:2b:18:ef:0e:
         82:00:20:db:e8:68:a7:52:11:64:d2:51:45:c1:0b:30:4b:53:
         5c:c4:52:da:6e:78:1d:84:ae:22:dc:a0:ea:d4:65:8c:77:63:
         e5:f7:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:22 2026 by rpki-client