Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43a67629-fbc9-322c-8d64-f772ce1cac87.roa
File:                     43a67629-fbc9-322c-8d64-f772ce1cac87.roa (raw, json)
Hash identifier:          ZNjW/9DrbUDzJ1cqiFcwCNBIzEYz4eKZcPUwBqukJzU=
Subject key identifier:   57:68:C3:69:D6:F6:42:3D:5B:3B:2E:90:98:9B:11:1F:DB:D9:E8:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7D9016ECC13D4A345C680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43a67629-fbc9-322c-8d64-f772ce1cac87.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        71.251.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d9:01:6e:cc:13:d4:a3:45:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=f0e9d698-c499-4067-80ae-232faee49f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:82:a4:c8:36:9d:b4:ab:62:53:b0:24:99:
                    9d:f0:a0:19:7c:9f:9b:90:36:37:44:80:54:6d:cf:
                    78:19:01:45:04:40:7f:b7:45:4f:c5:1d:b8:a7:ce:
                    c2:24:68:74:89:83:fa:53:81:dc:3c:50:91:1d:43:
                    b6:2b:8b:7a:f8:e4:13:bd:7b:c2:53:fd:e8:2e:55:
                    07:13:43:ff:dd:a4:ba:3c:00:7a:e8:b6:ad:61:38:
                    af:ec:7b:36:9d:d0:d2:53:63:02:8d:27:89:5c:44:
                    85:79:74:8b:14:09:15:6f:6a:98:eb:89:b3:52:56:
                    2e:40:bc:ca:e2:3b:75:34:14:c4:9f:8f:2c:a7:45:
                    a6:12:87:d6:41:5b:c3:63:c9:01:ef:49:b7:f7:e1:
                    38:15:00:db:9f:7e:59:6c:44:62:23:1c:05:53:e2:
                    43:b7:2f:a5:71:aa:d1:83:3d:a6:b1:35:ef:74:d8:
                    32:19:27:40:95:e3:7e:a9:db:e1:c1:bb:b4:89:64:
                    52:93:ae:45:8d:ad:b5:fe:dc:7f:bc:c7:41:2d:3a:
                    26:64:be:10:4b:dd:03:2c:dc:81:ab:95:d6:23:93:
                    11:50:bd:87:cd:88:ed:93:95:11:96:b6:37:17:7e:
                    32:7a:3d:01:7e:7d:ee:49:be:69:4d:c0:b5:ee:28:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:68:C3:69:D6:F6:42:3D:5B:3B:2E:90:98:9B:11:1F:DB:D9:E8:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43a67629-fbc9-322c-8d64-f772ce1cac87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.251.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:45:8f:54:13:f1:a3:5b:98:6f:c3:7c:00:05:e7:7f:af:
         19:ac:ec:bd:33:fc:08:7e:73:1e:0f:55:c0:67:44:7b:01:90:
         e2:2c:9f:3f:5d:32:84:c4:2b:3e:12:3b:cf:94:81:e3:bc:30:
         b4:fb:63:0e:6f:35:65:06:63:06:8f:25:8d:b9:3c:03:35:2b:
         f1:fb:b8:4b:7b:54:b2:fa:1c:2f:ad:86:47:ef:01:dd:f6:d1:
         18:57:1d:b2:00:1c:6e:e7:17:a4:3a:ba:d2:3b:f0:39:3f:39:
         17:f8:92:c2:c3:92:ae:83:61:7a:7f:e7:04:9e:98:84:b0:90:
         98:3e:2e:32:fb:19:8f:c0:62:b2:77:23:24:41:0d:15:2a:1e:
         01:28:ac:09:01:52:74:91:72:9c:42:7d:35:b0:b1:e7:40:e4:
         8c:c8:c0:1c:be:20:2e:f9:66:ec:7e:19:fa:e7:2c:2f:52:b2:
         d4:ad:38:67:b1:e4:d8:24:e2:21:b4:5f:0d:95:c1:01:9d:e0:
         1e:6c:cc:5e:a6:45:09:e9:7d:b3:f4:8e:43:76:5b:99:73:76:
         0e:04:8f:d2:e7:c0:99:b5:3e:70:07:7b:03:8b:01:45:45:da:
         65:1e:d0:5f:6a:b6:d9:d5:2e:c5:4c:aa:fc:24:26:8c:89:cb:
         af:5a:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:45 2025 by rpki-client