Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7eb50c1-51ee-3f97-a222-a3759e921552.roa
File:                     c7eb50c1-51ee-3f97-a222-a3759e921552.roa (raw, json)
Hash identifier:          ClEE4xFRTXQdwV9cSlwnhS5kc5pTnhJMZ7eORexYS2k=
Subject key identifier:   0C:47:DE:79:0D:D5:55:8F:71:21:3C:23:25:F3:71:28:48:1A:2F:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BABFD261440AE2ADB6B3AB8C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7eb50c1-51ee-3f97-a222-a3759e921552.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     701
IP address blocks:        71.240.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:26:14:40:ae:2a:db:6b:3a:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=a89571f3-c4b5-4e3c-90ed-f21038c1ab19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:10:b7:12:2d:bd:8a:2e:f5:77:4e:18:6a:
                    ff:d8:d4:88:60:f0:8d:f9:7b:80:f4:d2:57:a5:e0:
                    00:78:b1:51:f7:ad:89:95:3f:ae:72:5a:d9:f2:41:
                    ee:0d:ce:6e:41:3a:82:5a:d0:6e:6e:db:fc:98:7d:
                    37:0d:3a:a8:f8:90:5e:6e:a9:56:0b:0d:4f:5d:b1:
                    c2:34:a2:dd:f9:f7:d9:15:0c:18:58:58:57:a0:3c:
                    cb:65:9f:6a:e8:a3:bf:0e:3f:42:90:ee:c1:c1:53:
                    eb:13:10:d3:dc:63:ef:c4:1f:65:af:36:9f:d8:14:
                    0c:5d:88:14:3d:79:af:26:83:7d:ae:12:a6:a8:6f:
                    8d:7e:e1:e8:1c:d8:63:aa:af:5c:4a:0b:02:f0:05:
                    87:78:4f:89:8e:a3:ff:3a:49:00:09:76:e4:9a:e7:
                    98:f1:9d:3f:93:5a:3e:78:7f:57:66:d6:cc:6e:5e:
                    d7:d6:a2:d8:00:a1:ea:37:fa:c0:b8:3a:58:76:c8:
                    f5:37:fb:ee:aa:36:23:bf:ad:2a:29:59:3d:b1:5f:
                    87:36:24:01:1b:97:d3:68:90:cb:f5:e0:2a:47:1f:
                    85:48:f9:81:66:68:6d:82:ad:a9:73:02:3e:78:43:
                    76:9d:fb:43:f3:20:6f:18:69:71:3f:bb:46:0e:c9:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:47:DE:79:0D:D5:55:8F:71:21:3C:23:25:F3:71:28:48:1A:2F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7eb50c1-51ee-3f97-a222-a3759e921552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.240.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:fb:be:1c:58:a2:67:95:0e:6e:da:0c:1d:94:78:8b:93:8f:
         74:35:36:92:94:de:78:f0:26:a4:dd:cb:e8:8b:ad:a9:a3:3b:
         38:6e:79:b3:07:19:ee:82:33:51:d2:b5:1e:ef:d2:c4:8d:ec:
         cb:69:a8:86:eb:17:2b:d9:eb:cf:d6:17:96:72:29:0f:c2:b9:
         b6:6d:03:f8:1d:1f:e7:69:83:61:3a:d3:90:09:98:ab:1d:fc:
         39:b6:a0:12:e3:4e:d3:63:c2:59:6f:fc:64:7d:7f:26:47:6e:
         c3:68:77:79:1a:e6:c7:cf:20:3c:89:87:50:d8:07:62:d5:0d:
         87:0c:15:f8:28:a2:c8:13:71:6c:f7:a7:e4:90:d5:02:71:72:
         76:36:31:63:bd:8c:87:76:88:c3:9d:20:14:0f:bb:0a:64:0e:
         37:52:34:55:bd:f0:82:a5:58:d6:f3:5f:0f:68:37:b9:74:74:
         ac:ed:b9:9f:d9:b0:0a:3a:43:39:51:45:74:1c:68:1f:bf:ce:
         e0:b0:2d:6d:6d:aa:57:09:68:9a:5a:70:ee:47:69:6c:f1:e1:
         88:94:24:ff:79:56:c1:3f:2a:3b:e5:fb:da:9a:5e:40:d4:a3:
         35:d3:6c:f3:38:54:6f:26:48:64:77:f7:db:6e:d2:12:cf:8c:
         32:33:38:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:18:39 2025 by rpki-client