Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa
File:                     99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa (raw, json)
Hash identifier:          Qhgb0TDNxeEljIvA2KVwA4+aRI2jY7CfUPBTMys7BoU=
Subject key identifier:   DB:AA:1D:05:EC:30:7D:38:1F:53:AA:00:16:A1:10:BF:20:FD:D1:A6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6C0FBB9BEA253D3313ACF380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     701
IP address blocks:        70.104.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:bb:9b:ea:25:3d:33:13:ac:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=0143d499-0b57-441c-a297-cb71de132b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:bb:c8:fc:36:51:d1:07:74:d3:7c:d0:51:
                    58:6b:fa:91:38:c3:6b:e7:4a:b8:44:d8:76:39:6e:
                    f4:50:44:c5:d1:1e:99:90:95:55:bd:23:05:5a:79:
                    fe:80:21:aa:88:c5:4c:5c:4c:c9:6b:d3:a3:88:02:
                    82:06:bf:40:43:e9:04:65:ab:c3:24:84:86:bb:9d:
                    8f:7f:26:d0:e6:16:91:21:4b:83:bc:36:ab:8e:f3:
                    f8:5f:e1:1f:34:e0:e3:f4:4f:c4:b8:a0:ce:e0:e9:
                    db:9d:b6:16:c1:fb:55:69:e3:db:ef:1d:42:3e:dd:
                    a6:4b:18:7a:92:35:ba:50:8a:10:81:f1:5b:35:d9:
                    74:44:63:44:d2:30:36:df:27:05:f1:d7:2c:3f:90:
                    e7:23:94:9f:d0:02:f6:04:78:2e:29:46:cc:8f:a9:
                    2f:33:87:78:34:04:f7:3a:48:97:83:48:b3:76:1c:
                    54:cf:e9:40:8a:94:17:95:67:51:14:2e:e2:68:80:
                    6f:81:16:d7:a2:fd:aa:27:e7:66:cd:2c:d9:34:32:
                    c7:67:e2:35:b6:34:8c:8b:05:5a:04:ca:9f:5e:7e:
                    7d:c4:a8:43:6e:53:d8:34:06:84:9a:12:8c:2f:30:
                    6b:56:d3:af:d0:2e:36:ed:54:b9:25:00:65:2c:cc:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AA:1D:05:EC:30:7D:38:1F:53:AA:00:16:A1:10:BF:20:FD:D1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.104.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e8:7d:83:59:56:f3:84:23:8c:3b:1b:4e:f9:aa:04:d7:76:
         6b:75:81:21:e2:26:92:21:a3:f6:36:10:a7:27:b9:db:ce:af:
         bc:85:98:74:f7:ed:7f:77:0d:2c:5f:82:db:64:b8:02:21:8c:
         86:5b:2c:97:08:5e:8e:37:ee:b1:93:ad:7f:cf:34:78:c1:5a:
         4e:57:b9:30:9c:36:02:a2:5d:f2:20:f5:8e:b1:48:7a:e7:c4:
         73:42:31:5a:33:0d:64:23:4a:e0:c0:b7:95:5e:05:11:d7:22:
         d7:f3:53:3c:e9:69:f3:ea:55:3d:7b:0a:29:1c:13:a7:9b:32:
         b4:e4:8f:57:68:51:8b:93:56:5c:00:47:49:5e:ef:3d:e8:9c:
         54:4b:5d:02:57:d4:33:45:3f:d1:f3:00:ec:16:40:2c:59:06:
         56:7d:87:92:d0:9b:b7:83:3b:da:f3:74:10:6a:6c:3c:4c:40:
         1d:63:ab:93:34:11:c5:3a:3b:c0:f2:72:a9:25:4b:a5:f1:e4:
         92:5e:72:3f:63:df:3a:9a:08:1e:e0:7d:87:5b:ff:a9:30:3e:
         1a:4a:6b:b2:bf:a3:35:8a:c4:5e:a0:2a:78:08:14:2e:56:d5:
         c3:92:71:e2:09:a2:30:f4:b0:05:37:d8:24:8f:16:4f:e5:bc:
         66:d8:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:06 2026 by rpki-client