Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35133f23-2db2-3119-a6e0-f214c49d82ca.roa
File:                     35133f23-2db2-3119-a6e0-f214c49d82ca.roa (raw, json)
Hash identifier:          LX0rXx63bUM5KI+/lHuaTeU8OVQAzpjyvCE711X4z5c=
Subject key identifier:   7C:EA:45:9A:4A:27:BC:F7:94:F5:5C:91:95:B2:2C:A0:61:06:4A:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67C50409A65B22AF2AC300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35133f23-2db2-3119-a6e0-f214c49d82ca.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        65.205.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:c5:04:09:a6:5b:22:af:2a:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=84153112-ad81-40ef-ad1f-6a215264b8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:2a:37:42:95:05:91:07:cb:f4:bd:46:14:
                    7e:f2:2b:42:e4:e0:7d:cd:cb:58:91:5f:da:58:66:
                    a6:b0:04:81:5f:85:14:c8:8a:22:63:d4:21:3d:de:
                    62:78:79:90:14:83:d1:4b:aa:07:2e:fd:00:01:be:
                    80:89:e0:fb:da:b7:08:a7:47:71:5f:01:3d:43:d5:
                    5b:09:35:7c:6e:99:54:9c:75:e3:67:14:39:0d:87:
                    53:b3:85:c1:75:1f:2e:b8:f5:40:40:44:b9:9f:7f:
                    5f:d7:d0:d5:3d:1d:8c:38:65:42:c2:b7:03:33:3c:
                    c4:91:f9:77:0a:29:03:0b:06:22:43:cc:aa:01:cf:
                    fe:f0:77:ce:0c:7e:2e:b2:b3:01:d7:70:21:c0:06:
                    80:b8:9e:b0:4f:e2:a6:08:eb:28:8b:39:ae:9c:7d:
                    26:39:1a:51:8f:58:a3:31:58:da:31:a7:ed:46:83:
                    e3:03:d2:c2:c0:c6:67:a5:68:4d:a3:77:cf:80:c3:
                    fc:8e:b4:15:88:fb:53:3c:12:d9:02:62:45:b2:c6:
                    15:ba:38:70:ea:64:41:f3:d7:85:6e:57:b7:2a:06:
                    59:6f:36:12:d1:0d:a8:51:bc:ae:40:eb:45:80:05:
                    68:02:0c:75:f2:c6:1a:a2:b4:4a:96:5d:eb:10:78:
                    83:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EA:45:9A:4A:27:BC:F7:94:F5:5C:91:95:B2:2C:A0:61:06:4A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35133f23-2db2-3119-a6e0-f214c49d82ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.205.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bd:06:94:64:18:ab:a4:ee:57:d3:f7:e7:19:90:5c:7f:13:
         d7:f9:05:e2:3e:38:03:86:53:3b:f5:38:39:3b:95:c3:42:7c:
         46:2d:00:9a:ed:b4:30:d9:34:39:d0:a6:4f:37:c1:3c:16:e4:
         f5:df:ed:9c:fb:01:e0:d9:a2:41:3b:73:30:65:98:2f:ba:72:
         96:ff:39:0e:eb:e6:f0:f1:b6:f4:b4:75:39:68:2c:cd:11:7d:
         84:99:66:20:22:4f:62:78:1b:5f:e1:89:71:e0:4a:5b:0d:c2:
         48:c2:26:46:e4:e1:6e:f7:7b:02:bb:5d:f1:10:2e:a0:42:15:
         d6:0b:1e:7f:f8:08:c6:4e:3f:d4:c0:94:81:0c:85:d5:61:21:
         01:ef:7f:65:17:83:a5:a2:85:bb:f5:82:be:36:a0:d4:09:11:
         de:88:16:a3:66:7f:3f:f3:16:29:63:f8:4b:26:82:cb:c1:54:
         d4:0f:59:7d:a5:0c:d5:46:f7:eb:84:05:0d:4e:aa:2b:a5:36:
         42:d0:f7:de:f8:a6:fe:2f:4b:07:c2:0f:ff:94:7b:58:0e:f3:
         31:10:dd:7f:2f:2e:0c:00:c7:55:31:49:49:c3:14:e8:e4:4e:
         08:b0:ed:09:7f:6b:7a:08:a8:a7:a5:64:2b:2c:7c:67:02:d1:
         23:4a:d5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:21 2026 by rpki-client