Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/986c1083-04d3-3db4-8299-2f8b0160ce19.roa
File:                     986c1083-04d3-3db4-8299-2f8b0160ce19.roa (raw, json)
Hash identifier:          Alz5etWEzkR5qTm0RTPR5dic5JRBOit7qvAX698I2XA=
Subject key identifier:   28:20:C4:48:75:49:9A:48:85:FE:70:AA:03:31:D6:18:47:80:B6:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D65153562856FE21FC524C200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/986c1083-04d3-3db4-8299-2f8b0160ce19.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     701
IP address blocks:        71.126.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:35:62:85:6f:e2:1f:c5:24:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=d19ba9d4-0805-4e35-8e22-dddd379bdc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:74:95:88:4e:ac:1c:66:5b:97:54:d4:4b:
                    2e:73:ff:2c:10:c0:e8:ad:86:00:1d:cc:d1:f1:13:
                    8d:e3:43:1a:1f:9d:35:0a:18:4a:60:b6:eb:cd:b8:
                    d4:20:d0:14:dd:ce:b2:6c:9e:fd:09:6d:58:a5:b0:
                    cc:64:9b:90:40:90:0c:2e:20:b4:51:1c:d3:70:0f:
                    b0:a4:1b:aa:90:8e:41:29:f8:a8:e5:d5:35:9b:86:
                    44:21:5b:86:1d:53:cb:64:53:c3:ee:71:e8:44:d0:
                    31:68:84:0b:6a:d9:f8:d6:17:d9:53:eb:1c:79:e1:
                    29:6b:f6:c3:b7:4e:23:9a:e1:23:b6:df:63:e4:ee:
                    67:df:f4:6f:06:8a:7b:1f:21:dd:ed:74:cf:f5:60:
                    02:81:8c:71:ec:d3:53:b5:26:be:20:18:d7:64:a5:
                    f7:e9:a8:47:b1:64:32:0b:3b:7d:96:3e:c7:09:64:
                    db:8d:28:91:d2:c4:a3:39:39:12:f3:7e:bb:26:60:
                    8f:84:7b:f7:fc:2c:9c:74:3c:36:e9:a8:5e:1f:e4:
                    60:c1:b8:c8:f7:9c:dd:5b:2b:0b:01:f3:30:d1:54:
                    f9:7e:51:47:93:0f:d7:0f:45:ac:30:c8:4c:91:1d:
                    60:65:7d:db:cf:3e:10:04:6d:2f:76:9d:f9:0e:5a:
                    4d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:20:C4:48:75:49:9A:48:85:FE:70:AA:03:31:D6:18:47:80:B6:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/986c1083-04d3-3db4-8299-2f8b0160ce19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.126.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c2:9f:f6:78:c7:ba:99:a1:b4:ca:03:32:52:a0:96:86:51:
         a9:52:64:ce:57:03:d7:ac:63:e3:de:0a:6f:4a:e7:d5:0f:1c:
         fd:42:61:f8:23:06:22:16:cf:1b:ed:b9:89:9c:c3:1a:a7:51:
         1c:62:48:16:bf:34:38:ea:ed:51:2f:28:5b:67:59:93:8e:1c:
         55:eb:c0:bd:51:16:c8:ea:40:14:c0:92:ec:04:ad:6e:59:1b:
         77:cf:5d:cc:a4:b5:7c:e9:75:23:fd:2a:cf:3c:ca:76:04:c9:
         7a:19:94:4b:74:93:02:09:0a:a2:d3:68:b9:ce:d7:cb:b1:88:
         cb:d8:ce:98:6f:c7:28:3c:65:f0:95:e9:9f:81:ad:30:1e:86:
         0c:7e:29:c5:e6:0c:6e:6e:66:52:85:20:ea:37:36:ef:4f:93:
         3f:17:6c:c5:1d:bc:f2:1f:eb:90:18:9b:8d:e3:b8:df:41:4f:
         c7:5d:78:87:59:59:24:45:97:98:ea:3e:94:4d:69:02:0b:2f:
         1f:61:18:f4:7d:e0:c8:ec:b8:79:96:e8:89:68:4d:2f:9c:2b:
         ef:e6:f2:b7:de:40:97:ee:7a:4f:a5:05:d6:f4:ee:15:91:65:
         91:66:2a:57:ea:92:b5:eb:1b:fc:a0:41:8f:51:c3:a8:b3:b2:
         47:c0:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:17 2026 by rpki-client