Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa
File:                     a535c59e-2c45-3850-a45d-c635cd99514e.roa (raw, json)
Hash identifier:          4R8hb2hWijxdYWXCamG/hT1BFq5UJkVthnGctCdKw38=
Subject key identifier:   22:59:3C:35:0E:59:AD:26:4D:E9:58:44:D4:8B:5B:CF:FF:66:FA:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE14328615B7D08046E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        71.162.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e1:43:28:61:5b:7d:08:04:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=2b8aae55-9382-46a7-b191-8dd70295dc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:77:11:c3:9d:18:ac:c3:71:25:fd:91:98:
                    7a:a9:02:a5:02:07:72:f4:90:57:5f:52:c3:31:71:
                    0c:2d:3c:7c:7c:89:3d:32:a2:3e:a8:bb:22:11:24:
                    33:10:37:8d:44:1e:84:69:cb:c5:24:7b:58:90:b2:
                    12:45:94:3d:76:62:b6:8f:6c:a4:2c:d5:fb:d1:eb:
                    72:4f:68:13:6f:7f:97:4c:a1:ca:fd:bd:40:40:a0:
                    8e:be:a3:12:e6:cf:15:6c:aa:98:9f:51:5a:57:c9:
                    df:c6:b3:e2:8d:06:6c:af:3b:e5:52:3a:35:8d:2d:
                    e8:7e:dc:ea:79:ef:15:2f:62:21:cd:66:fe:09:89:
                    9b:77:6e:30:f5:b2:05:21:ed:a1:3b:51:08:61:84:
                    9d:91:a6:42:22:2e:94:6b:e6:77:36:b0:4e:35:c8:
                    66:4b:4a:b3:d6:bc:d9:4f:d9:7b:84:9e:ff:38:d0:
                    e6:ee:dd:5e:a6:d5:0a:d9:a3:e2:a8:19:1b:91:41:
                    b0:b7:84:76:3d:d9:73:49:49:56:bc:95:89:3f:e9:
                    87:64:17:d0:0b:83:f1:af:9b:1a:5a:2b:03:c4:a8:
                    1c:b5:45:a0:52:3d:36:07:6a:e5:a8:37:0e:4b:94:
                    06:24:af:fa:c9:96:84:20:d9:d4:a5:59:1b:29:92:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:59:3C:35:0E:59:AD:26:4D:E9:58:44:D4:8B:5B:CF:FF:66:FA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.162.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:cb:9c:11:82:86:9c:67:c9:46:94:55:7b:5b:12:be:df:e0:
         c1:5b:2c:39:d9:90:1d:98:6c:80:f3:69:37:8c:1d:9e:98:99:
         5d:df:d3:2c:4f:69:2d:4e:51:be:1d:8e:fe:da:22:99:e8:28:
         a0:31:43:4e:66:c8:7d:29:b9:2a:0a:47:0f:ac:b5:08:00:66:
         0a:89:3e:5a:10:66:fa:4f:23:87:ea:82:cf:91:c0:3a:ee:1b:
         0a:b4:dd:8c:77:49:bc:8d:e3:b1:31:61:d9:5a:0f:5e:db:22:
         f1:67:a9:09:f4:b2:ab:42:d0:c7:c5:70:e9:fd:c9:ce:ae:66:
         7d:b9:6b:9d:2c:98:b7:08:a8:9d:b6:b1:44:8b:c1:01:09:9a:
         a7:f4:ac:ca:d5:75:2c:40:57:9b:67:21:47:a1:bd:98:8f:27:
         fe:23:4f:a7:4a:3f:b3:47:21:e1:95:6e:37:d4:0f:12:89:2a:
         4d:09:4b:43:f1:71:3f:a9:95:3e:54:a0:24:c3:f5:81:c9:99:
         4c:71:30:56:74:11:9d:19:b7:52:00:09:e6:25:12:90:aa:fe:
         61:61:88:cf:59:8b:04:8e:34:75:de:f9:34:b2:62:d2:20:e8:
         4f:1d:1b:4b:41:88:b8:5b:4c:67:62:c3:4e:35:bb:20:ff:8a:
         6e:70:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:53 2026 by rpki-client