Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e973c7f-f303-3473-b8b8-2c44d1f9413f.roa
File:                     9e973c7f-f303-3473-b8b8-2c44d1f9413f.roa (raw, json)
Hash identifier:          QREBkrojf5+VuaUyMeTYBs0TA+wnQuYo+nEXMl7AUZM=
Subject key identifier:   58:68:F8:03:C7:B4:E9:1B:B3:16:99:DC:46:F2:6A:A5:CE:EE:A8:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7D8F00C493E5503C38420
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e973c7f-f303-3473-b8b8-2c44d1f9413f.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        71.251.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d8:f0:0c:49:3e:55:03:c3:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=2c8c19c7-ce85-4473-bdf0-59f825d59b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:72:9f:41:bf:c6:b5:e6:1c:e5:bf:9e:f3:
                    23:ae:ec:a5:62:fd:52:80:28:42:40:01:eb:89:0d:
                    76:52:51:a3:0a:e2:ff:b9:31:95:3a:2c:97:08:9c:
                    cb:65:3d:68:fe:9a:28:e6:af:f4:6a:d0:2f:c4:ec:
                    2e:c0:80:94:a4:70:5e:db:b4:1b:b4:f1:52:38:6d:
                    a5:cc:ee:f9:44:c9:6d:8f:dc:fb:e2:e0:dd:cb:8a:
                    76:49:b5:bd:10:52:5e:b6:f4:36:74:30:8a:e3:76:
                    77:a3:94:5e:a4:62:8c:df:70:61:6f:b6:db:dc:af:
                    3b:45:bf:e1:d3:05:5b:15:c3:42:2e:20:4f:79:3a:
                    17:7e:d2:da:2a:7e:06:41:ab:8a:23:86:f3:d0:4d:
                    d7:41:69:2f:75:46:c1:79:e4:0f:1c:8d:9a:26:d2:
                    57:d7:84:fb:9e:03:db:3c:68:0e:47:fc:84:f8:57:
                    be:75:d2:ad:8e:db:ff:c0:ae:c7:77:2a:71:a4:2c:
                    ed:c3:56:55:bd:37:f8:95:fa:df:83:49:b8:53:17:
                    bc:32:ab:70:00:ff:63:2c:d8:de:21:bb:2c:40:49:
                    12:83:eb:4e:3c:e6:ca:cb:cc:56:43:41:bb:74:2a:
                    c0:80:07:fc:a4:f8:dc:69:e1:89:c9:fb:bc:a2:cb:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:68:F8:03:C7:B4:E9:1B:B3:16:99:DC:46:F2:6A:A5:CE:EE:A8:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e973c7f-f303-3473-b8b8-2c44d1f9413f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.251.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:88:1d:ea:7d:c3:b8:7d:98:25:7a:9a:6f:b2:5c:d8:02:5a:
         21:82:66:ee:70:9a:e9:1d:7b:08:f9:a5:af:48:55:e0:51:bb:
         a0:cc:03:3a:cb:2b:ba:d9:eb:ed:ed:58:0b:b1:f0:fd:93:24:
         f1:98:da:ee:bb:b7:12:e4:d3:9f:dc:f3:f2:62:55:c0:b8:03:
         3d:7b:37:a6:93:67:e7:1e:42:f8:7f:00:dd:ff:4b:42:a1:6b:
         17:fb:e0:5f:66:9f:93:29:3a:f5:a6:2a:98:b1:1e:69:3f:b1:
         89:e5:c7:f2:81:c7:8a:85:2d:5e:3a:c7:62:0d:47:c1:94:1a:
         51:fd:8e:5f:21:f6:7b:57:33:6a:74:aa:13:e3:49:88:4f:23:
         a5:62:a9:48:c5:ae:a3:3b:f7:56:ad:2a:49:91:4c:b7:af:41:
         20:14:68:dc:30:f6:ee:1c:d5:d9:dc:7c:88:d1:ce:ea:fe:9d:
         7c:80:95:a9:ca:f3:2c:e2:c0:90:c6:72:07:a8:f0:69:2d:b5:
         c6:62:63:70:2b:4f:ca:13:ba:ea:10:6c:88:28:28:b8:d5:b9:
         cc:14:ed:2c:f2:8c:1a:88:e4:42:0b:bb:0f:df:5e:46:6e:d6:
         41:34:9a:d2:a6:7c:64:a1:a9:89:28:9b:04:59:39:00:fc:9a:
         2f:be:0e:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99jwDEk+VQPDhCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
MmM4YzE5YzctY2U4NS00NDczLWJkZjAtNTlmODI1ZDU5YjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLtyn0G/xrXmHOW/nvMjruylYv1SgChCQAHr
iQ12UlGjCuL/uTGVOiyXCJzLZT1o/poo5q/0atAvxOwuwICUpHBe27QbtPFSOG2l
zO75RMltj9z74uDdy4p2SbW9EFJetvQ2dDCK43Z3o5RepGKM33Bhb7bb3K87Rb/h
0wVbFcNCLiBPeToXftLaKn4GQauKI4bz0E3XQWkvdUbBeeQPHI2aJtJX14T7ngPb
PGgOR/yE+Fe+ddKtjtv/wK7HdypxpCztw1ZVvTf4lfrfg0m4Uxe8MqtwAP9jLNje
IbssQEkSg+tOPObKy8xWQ0G7dCrAgAf8pPjcaeGJyfu8osu0VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFho+APHtOkbsxaZ3EbyaqXO7qhdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWU5NzNjN2YtZjMwMy0z
NDczLWI4YjgtMmM0NGQxZjk0MTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/sAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6IHep9w7h9mCV6mm+yXNgCWiGCZu5wmukdewj5pa9IVeBRu6DMAzrL
K7rZ6+3tWAux8P2TJPGY2u67txLk05/c8/JiVcC4Az17N6aTZ+ceQvh/AN3/S0Kh
axf74F9mn5MpOvWmKpixHmk/sYnlx/KBx4qFLV46x2INR8GUGlH9jl8h9ntXM2p0
qhPjSYhPI6ViqUjFrqM791atKkmRTLevQSAUaNww9u4c1dncfIjRzur+nXyAlanK
8yziwJDGcgeo8GkttcZiY3ArT8oTuuoQbIgoKLjVucwU7SzyjBqI5EILuw/fXkZu
1kE0mtKmfGShqYkomwRZOQD8mi++DqU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:42 2025 by rpki-client