Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde8d70-0f57-3229-b406-03351a5f8311.roa
File:                     dbde8d70-0f57-3229-b406-03351a5f8311.roa (raw, json)
Hash identifier:          AEEurP2oxtOMB5xwTf4xVSnFahFt0K5t/rdS2/7D5mI=
Subject key identifier:   1C:D6:DC:64:64:57:66:B1:BA:A2:47:42:FD:86:77:E8:A1:01:A2:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE7049A96A5C713A96580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde8d70-0f57-3229-b406-03351a5f8311.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        173.56.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e7:04:9a:96:a5:c7:13:a9:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=c70ea870-9e03-4a8e-b1b7-f03f78706413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:fb:1f:3c:f6:29:3c:e9:32:b2:ba:6e:1a:
                    fb:24:f0:ac:1b:59:1c:9b:f9:fa:e0:f2:bf:60:81:
                    05:84:e5:a8:50:71:a7:df:59:a9:32:64:6d:ed:34:
                    d3:1c:4c:e4:5a:fa:3c:03:17:3e:58:b4:e6:42:f6:
                    af:d0:51:76:43:7f:e2:4d:6f:72:5e:72:d8:3d:c7:
                    5a:e0:7f:ea:85:35:0b:eb:f5:d7:01:a7:87:0e:b5:
                    d2:84:3b:ff:d4:a1:16:d9:06:da:56:7f:e4:1f:a2:
                    c4:b0:84:9a:94:fa:31:8d:7f:bd:32:12:29:98:16:
                    5c:82:20:19:35:33:16:83:23:5b:59:0c:18:c9:f3:
                    c4:fa:52:1c:f9:90:3c:86:c7:c8:a7:da:eb:a4:45:
                    9e:17:44:75:8e:92:9f:fa:5b:2b:98:99:30:a4:e8:
                    08:52:6d:9b:a7:33:5a:15:d9:82:63:ae:88:4c:c0:
                    61:b9:3f:9f:5d:e1:ab:ae:c4:85:c2:d7:7c:9f:76:
                    42:d7:9c:e3:86:6d:43:88:27:55:53:76:25:12:c8:
                    4e:55:38:40:3d:b7:03:16:f9:c3:b8:49:13:18:d3:
                    e5:0b:44:9f:a8:e3:07:70:5e:e1:0b:8b:81:77:ea:
                    e6:39:de:65:dd:ed:af:03:ca:0a:5b:75:b7:43:40:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D6:DC:64:64:57:66:B1:BA:A2:47:42:FD:86:77:E8:A1:01:A2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbde8d70-0f57-3229-b406-03351a5f8311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:e3:2a:bb:96:e6:11:a5:d8:ef:de:2e:3a:2b:47:82:93:
         8b:79:90:02:e3:8e:e1:38:1b:76:df:7a:4c:16:76:c7:54:00:
         76:f0:0e:58:66:40:47:94:d2:06:67:1f:64:e6:76:b4:9f:8f:
         9f:4b:60:e8:d9:77:f7:dd:fc:a3:ae:ed:66:84:81:ec:c4:28:
         e8:81:41:b0:2c:4b:ef:14:99:16:e9:fe:31:b3:18:a3:f1:4d:
         7b:68:00:6f:c8:34:33:26:e1:61:b5:35:f0:f3:41:be:e3:84:
         34:b6:e8:75:15:2e:27:d7:1f:37:60:16:9b:bd:8b:11:15:41:
         f5:95:a5:87:26:6c:7f:e7:d6:ce:6b:16:2a:31:4a:33:45:18:
         d1:25:84:8a:e8:ca:b9:67:1c:d0:a7:d5:b2:ad:dd:dd:30:41:
         fc:80:13:da:11:98:9a:8e:a8:80:56:dd:cd:fa:44:65:d6:ab:
         53:d7:65:b0:6a:a4:f5:57:85:40:e7:64:1f:68:dc:1d:97:76:
         c3:37:47:a2:53:fe:2e:5a:8a:ed:30:a4:11:a7:9f:4f:c1:b3:
         66:e7:ce:6f:77:09:d3:f5:22:24:65:fa:51:47:16:c1:19:df:
         57:87:ca:f1:08:43:9a:ca:a6:85:41:5a:a3:f6:d2:28:62:54:
         b1:0c:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:38:57 2026 by rpki-client