Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b14d94dc-648e-3778-963e-bdb0b95b14eb.roa
File:                     b14d94dc-648e-3778-963e-bdb0b95b14eb.roa (raw, json)
Hash identifier:          +4GUMzkRiMFuDbxq1+oZ5XSV7frsebt8lrXof0IUoNE=
Subject key identifier:   09:96:61:F1:A8:48:DC:16:BE:D1:10:37:14:E1:14:3E:AE:5F:A9:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A7D00C86133AD7C425280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b14d94dc-648e-3778-963e-bdb0b95b14eb.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        162.84.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:7d:00:c8:61:33:ad:7c:42:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=5c870773-1c67-40bf-8abb-b1b5c05221cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:03:36:6e:46:9b:25:f0:1c:23:bc:0b:8a:5a:
                    d6:5f:19:2a:98:fe:fd:88:52:c8:dd:35:ea:08:1f:
                    ad:10:be:54:bd:58:81:2a:cb:06:56:a6:d9:2f:d4:
                    57:64:db:67:b2:fc:68:fe:eb:98:8d:04:b5:a7:e9:
                    13:a9:8e:6c:2e:7a:07:e6:91:60:3f:f9:c2:e7:c2:
                    c1:31:66:5d:cd:ad:82:23:e2:56:bc:6a:bd:a3:ba:
                    c6:98:d2:bd:78:1a:29:44:3d:ca:20:82:38:70:a2:
                    ae:92:71:3d:1a:95:93:f9:c0:92:c7:4d:da:90:bd:
                    3a:81:c2:a0:13:81:1d:a7:6f:e7:8c:85:37:53:60:
                    6f:53:c2:b6:8d:57:e6:13:c6:32:b4:bc:12:58:c8:
                    d9:92:37:ae:45:4b:90:8e:fb:32:43:a2:bc:6a:34:
                    10:86:c8:79:06:00:3a:ad:30:ae:e1:a9:dc:93:0e:
                    60:f1:24:29:b6:0a:2f:ca:c7:72:33:04:79:49:b2:
                    95:6a:3e:d0:e1:75:d8:df:69:5b:e7:26:d7:58:cd:
                    47:7d:8d:f3:73:de:1a:25:39:74:ad:ba:12:9b:c2:
                    a3:41:d4:2d:ea:71:ae:1d:d1:ae:2e:0c:ef:e2:c6:
                    ac:fe:53:d4:45:cc:15:0e:2a:7f:8d:30:2e:3e:03:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:96:61:F1:A8:48:DC:16:BE:D1:10:37:14:E1:14:3E:AE:5F:A9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b14d94dc-648e-3778-963e-bdb0b95b14eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.84.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:9c:df:a0:3b:d9:fb:4c:97:1c:05:68:a0:d4:e1:99:61:
         8a:34:bf:e0:b2:1c:24:ea:69:b4:9a:56:9b:6a:27:2a:50:bb:
         e3:5c:a8:e4:16:33:ee:f8:51:15:c0:22:87:05:35:6f:9c:08:
         d9:05:5b:3e:53:50:a6:57:11:12:a9:3c:de:4a:69:f1:45:0d:
         9c:3f:c3:2e:4f:15:fd:5b:b2:57:15:92:1a:7d:4f:48:f8:9e:
         47:d5:c5:a0:45:1a:49:3e:d8:87:b8:21:c7:48:b3:2b:eb:ff:
         e4:31:a8:8e:4d:16:1f:3a:7d:4a:c3:6e:09:45:b3:f9:6f:ae:
         62:d3:06:e1:90:c0:7e:a1:6e:df:6d:d2:92:e8:c2:df:a9:04:
         cf:d6:de:95:cf:b1:ed:f7:31:83:3f:50:a2:f6:8c:3f:72:62:
         28:f0:da:fb:d0:4b:26:ab:33:09:df:d1:88:a1:cc:51:40:27:
         14:9e:8b:4e:44:67:58:32:97:75:6b:24:3e:70:a9:b9:da:9c:
         6f:d8:71:75:9c:0f:bd:e3:22:d9:6c:97:1f:b8:d0:80:6c:d7:
         7f:95:f3:b5:f9:b9:3d:12:e0:8f:17:0f:81:96:9c:17:26:89:
         ba:93:7a:55:db:60:a6:f1:72:1d:de:18:88:59:1d:ac:1a:5e:
         1a:50:db:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:52 2026 by rpki-client