Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa
File:                     b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa (raw, json)
Hash identifier:          grtrjv0Zddvbt2WCRang7Cr9MQ7v7bUY8FiPxxp8WaA=
Subject key identifier:   85:33:8B:51:82:43:51:67:F6:23:D9:D6:B0:78:3A:12:33:C1:61:C5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE71EA4712BD94036AF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        173.66.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e7:1e:a4:71:2b:d9:40:36:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=25c55a76-d8f0-452c-9c18-5363568da673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:95:25:6a:a3:6b:37:d8:ba:5b:df:39:9b:
                    56:cc:7b:5d:44:43:2c:f4:eb:4b:55:cc:76:c8:8f:
                    94:ec:cf:7c:52:29:7c:49:1c:b1:3e:75:46:b7:2b:
                    97:89:25:ae:57:0b:a8:63:45:56:b4:c8:67:57:1a:
                    c7:79:80:9c:40:a0:51:67:3b:6d:1a:93:d1:58:ed:
                    32:76:ea:03:ba:e5:71:fc:9d:16:e7:87:87:b0:d7:
                    f3:a5:7a:ae:f3:56:09:04:e7:15:f3:0b:44:28:3e:
                    8c:98:e8:65:4f:38:bb:02:82:e8:a0:a7:ba:14:58:
                    79:11:5e:9d:73:47:c2:58:30:3d:0f:e7:7a:1c:28:
                    bc:ff:08:d9:c0:23:1e:d5:04:89:ef:73:06:c3:5e:
                    40:95:3e:8e:66:13:95:3c:4f:db:cd:79:3c:b5:52:
                    9e:d8:7b:82:1e:da:90:9d:46:a5:a8:0e:63:ec:5c:
                    64:4c:31:55:9d:b4:89:c5:ee:99:41:65:24:a1:6b:
                    d1:50:a6:d0:16:34:fa:91:35:13:ca:b6:3b:a1:2d:
                    93:a4:ed:70:fa:73:e8:12:98:b7:ae:0f:02:46:c4:
                    f7:8c:ac:7f:08:94:29:53:71:89:70:fc:03:25:71:
                    b6:37:2b:8a:36:57:25:f0:7e:ac:03:d1:54:34:92:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:33:8B:51:82:43:51:67:F6:23:D9:D6:B0:78:3A:12:33:C1:61:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:0d:b9:61:12:03:8e:29:d2:67:a8:c4:20:38:43:05:fe:87:
         f1:9a:f4:b5:99:37:f1:e8:d5:e2:98:8d:b9:ed:a5:41:05:a6:
         79:1d:db:4a:d1:78:06:9f:f6:b2:5b:dd:cb:ec:9d:7b:49:d5:
         96:70:d2:3d:4f:b1:df:7a:7a:25:96:19:8f:92:58:34:fe:b9:
         34:db:6d:b8:57:71:4b:af:79:a8:86:fe:85:47:37:45:75:40:
         b6:2e:8a:67:eb:0a:bc:04:42:64:ff:4c:ee:6b:b7:4f:7e:8e:
         84:27:2f:65:c8:6c:ce:13:01:33:51:c2:2f:c1:63:c2:61:9f:
         98:76:2a:29:e3:4c:fa:fe:4b:19:0f:5c:a2:ae:fb:67:d6:c5:
         89:b6:41:95:2b:55:b0:f4:41:b5:46:e1:72:dd:f5:6d:f2:3b:
         6f:ce:0b:ad:1b:11:b8:ec:0f:2e:9c:5d:e3:33:ac:2d:70:32:
         f3:a5:78:b3:19:09:11:50:c3:0b:e3:ce:c0:ea:ab:c0:da:01:
         49:d6:4d:7a:52:be:ed:52:14:b1:ee:a4:89:2e:42:68:80:cd:
         57:9c:b7:15:f6:ee:04:62:74:b3:22:2d:bd:63:ff:34:5a:3c:
         1c:8a:e4:fd:88:82:c3:80:5c:89:d3:bf:14:23:9f:fd:c5:35:
         d4:13:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:23:45 2026 by rpki-client