Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c540b00e-8aa7-3400-924f-bce1fcb83fa6.roa
File:                     c540b00e-8aa7-3400-924f-bce1fcb83fa6.roa (raw, json)
Hash identifier:          gqWc+epimLvXzOB0D7GW+wGxOTWq3k5Bet6chGlnPn0=
Subject key identifier:   00:75:01:A8:66:21:C3:B7:A9:AB:3B:F1:BE:54:1B:C4:08:A6:DE:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F80824923B69720A366A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c540b00e-8aa7-3400-924f-bce1fcb83fa6.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        71.246.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:08:24:92:3b:69:72:0a:36:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=973ddc6f-9a21-4a61-b20f-67e923e1b21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:71:36:f8:d3:cd:8d:b1:f3:01:f8:b4:25:
                    60:49:e6:8d:89:7b:6f:f1:b6:65:67:4b:92:b1:c9:
                    78:26:70:29:f7:74:bd:1f:47:cc:63:8a:9b:11:e9:
                    64:82:47:d2:52:04:dd:24:ef:ed:3c:f5:ce:30:e6:
                    41:10:1e:98:60:ab:d1:c2:fc:b7:1c:bd:d8:41:5d:
                    93:ef:25:a8:2a:ae:c1:0b:7b:be:09:bf:15:1d:85:
                    30:50:77:66:98:ac:e5:e9:18:da:e6:2c:a1:f4:89:
                    61:e8:64:98:e1:d2:12:fd:8e:73:f2:a2:11:4a:c0:
                    22:8a:ff:b3:b7:bd:d8:d5:f2:da:a2:77:0d:89:36:
                    06:9f:37:34:8b:a4:5e:fb:5b:b6:68:ac:94:50:24:
                    b2:6f:33:f8:5c:30:af:80:05:3e:31:02:4b:6d:82:
                    df:c1:31:9a:13:63:6b:84:ff:35:98:ff:7d:ce:c9:
                    dd:0a:90:2c:af:b7:a7:29:47:77:6c:98:02:44:ca:
                    ab:50:c5:f6:4e:e2:5e:84:fe:98:87:50:c9:0e:ae:
                    76:a0:a7:68:bb:f0:68:89:ca:ea:63:99:42:b1:80:
                    31:a3:2f:8f:40:e2:a0:34:90:6e:3a:1e:26:3e:a9:
                    a3:57:68:fb:8a:9f:ec:d9:7c:b5:f0:4b:ea:98:20:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:01:A8:66:21:C3:B7:A9:AB:3B:F1:BE:54:1B:C4:08:A6:DE:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c540b00e-8aa7-3400-924f-bce1fcb83fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.246.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:10:66:23:37:82:d4:5d:e7:cc:d0:98:ef:42:d0:f8:ab:ce:
         c9:52:97:e6:81:a0:7c:95:73:6f:73:8e:fe:f6:c2:5a:8d:71:
         98:a3:65:85:68:94:bf:e2:cd:63:db:08:48:c6:9f:2a:6b:27:
         64:66:39:f3:42:c3:e2:70:3f:70:b6:57:51:0a:ee:b2:c4:91:
         0e:3d:e3:af:32:60:ba:d7:a0:3c:7c:e3:a4:3b:98:d1:86:f9:
         b7:ee:38:85:7a:0e:e0:6b:4f:02:93:c3:68:72:a1:92:40:06:
         fa:22:a7:07:fe:3d:1b:b9:dc:e8:f0:1d:93:03:50:34:a7:30:
         bc:a5:38:aa:5b:4e:12:ab:17:e9:1c:40:82:57:a0:ce:ae:6b:
         b7:6a:25:dc:db:1b:37:69:1c:e0:c1:7c:1a:f8:31:12:42:75:
         f2:37:be:da:86:21:8a:a1:19:98:37:80:a7:11:d6:12:d8:30:
         da:5c:cc:72:2b:e1:d8:29:9c:ac:69:6a:3d:09:a1:ba:17:5d:
         4c:e3:86:e4:b7:93:12:6c:6c:39:79:71:5c:e9:90:a1:96:4f:
         fa:db:6e:7f:dd:0f:06:00:50:55:56:77:6d:29:c5:a4:38:8a:
         1d:06:cf:0d:98:39:a8:dc:79:02:de:ca:1d:76:f8:b1:8e:63:
         f7:80:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:24 2025 by rpki-client