Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1fcf017-aed8-311f-89d1-f028d335b4c1.roa
File:                     e1fcf017-aed8-311f-89d1-f028d335b4c1.roa (raw, json)
Hash identifier:          3s8Ldd6oT+5SVqfNfzRE4lAvS3gfIUypdCenvn7x7CQ=
Subject key identifier:   66:21:09:AF:98:30:EE:A2:CA:A4:EE:AE:66:90:7B:8E:5F:2D:1C:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE1880897E41D39D2E600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1fcf017-aed8-311f-89d1-f028d335b4c1.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        71.185.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e1:88:08:97:e4:1d:39:d2:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=8efbc940-f5ff-4004-ab6f-8ebc8cfde0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:fe:fb:5c:ee:8f:dc:de:72:45:e3:cd:52:
                    9a:1a:96:df:15:d3:08:49:4b:32:30:cb:c1:14:73:
                    dc:9e:6d:02:e3:51:1d:17:a7:e5:bb:8e:2c:8e:91:
                    8f:95:09:08:8f:0c:fc:76:bd:22:f0:dc:ff:e6:5b:
                    44:76:c0:ab:44:a8:df:ca:20:87:7b:39:b1:d8:09:
                    14:5b:fd:c0:d4:bb:31:02:e3:62:ff:4f:1e:e4:f0:
                    a6:dd:28:b4:36:49:85:44:09:5d:d6:64:16:1b:f0:
                    b2:e0:98:0d:3b:3c:7b:4b:eb:df:1b:8c:28:3f:d5:
                    fb:cd:b3:45:a5:86:05:59:62:31:96:12:7b:9d:30:
                    05:5b:73:de:7f:c9:65:68:0c:dd:a9:0d:54:30:e1:
                    0a:b8:84:b9:61:ba:8d:e1:88:2b:a7:0e:d2:20:c0:
                    f4:2e:d7:74:26:7f:f9:b3:bc:ff:87:85:91:1e:40:
                    8a:5d:60:43:db:b0:62:4c:08:cf:14:d0:26:87:62:
                    aa:a2:ca:bc:4a:f6:a4:4b:5c:a1:14:72:58:e5:0c:
                    d9:3c:3c:53:56:4b:31:24:94:b0:36:2c:77:6f:d9:
                    ac:e9:92:7f:2f:2e:07:5e:29:85:65:32:94:13:93:
                    19:88:e3:a7:58:e9:d7:fa:f5:4b:2f:99:2d:51:ea:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:21:09:AF:98:30:EE:A2:CA:A4:EE:AE:66:90:7B:8E:5F:2D:1C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1fcf017-aed8-311f-89d1-f028d335b4c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:41:12:85:ff:e1:a0:f4:28:36:57:e4:4b:8d:d1:99:94:
         a4:7d:9c:9d:b4:de:88:ee:70:33:bf:8c:b7:73:55:aa:18:39:
         93:2b:a5:b5:eb:89:20:69:0e:12:c7:c9:3b:1e:1d:d4:b5:6c:
         8b:34:94:30:15:df:08:dd:67:ec:53:29:93:b9:32:b1:ee:c0:
         2b:61:5f:68:1b:1a:fe:96:4d:da:68:8d:fb:b0:7e:69:aa:8d:
         19:ee:9b:a4:ee:35:79:54:d8:cf:50:e8:ec:9c:e1:43:d3:3c:
         d7:f6:57:99:07:50:5e:6c:51:1e:30:2b:2e:ce:3c:ef:00:fa:
         94:44:70:0f:9a:90:cb:b3:dc:9e:70:c8:df:1e:98:72:3c:9d:
         24:a2:d7:47:d3:31:a3:a7:4b:21:cd:42:89:77:91:3d:fa:55:
         3d:ba:1b:6b:c0:a4:eb:b3:b9:90:27:9d:2e:74:11:64:89:08:
         a6:14:5d:31:2c:dc:45:41:ce:3f:5d:45:73:57:d2:9c:f5:1e:
         fe:a9:5b:96:c7:d5:44:41:7c:90:d5:53:fd:2c:59:20:be:70:
         a0:4d:52:b6:56:0e:29:53:0c:52:21:03:58:ff:d4:3a:79:37:
         f2:53:f3:12:a9:5e:20:98:8e:52:3d:08:92:da:fb:15:5b:c7:
         48:91:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:25:48 2026 by rpki-client