Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2479ab2-de84-3532-98ab-7080dbd44691.roa
File:                     e2479ab2-de84-3532-98ab-7080dbd44691.roa (raw, json)
Hash identifier:          OvT582ZJienLzMZu7xcqai+eDOHPcF+wio2NtRA2QIY=
Subject key identifier:   77:4E:E7:A6:6D:C2:71:2A:C9:C3:91:11:C2:87:FD:68:3D:3F:DC:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D651531AC352783BFC85D4680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2479ab2-de84-3532-98ab-7080dbd44691.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     701
IP address blocks:        71.127.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:31:ac:35:27:83:bf:c8:5d:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=6915aad9-53f7-468a-885f-f819e4498620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:c4:fe:d6:f9:ac:f5:2e:4e:fe:58:42:ff:
                    0e:71:35:6d:a6:97:84:aa:5b:60:df:0a:3f:c1:91:
                    d7:19:76:44:b6:5b:81:32:f6:0f:e1:52:30:c6:c9:
                    d8:72:55:f0:1e:72:be:9d:18:18:aa:8f:93:07:05:
                    c6:d5:dd:36:2a:5f:4b:c3:db:28:d8:fc:c8:69:20:
                    9e:b6:05:c2:f8:c9:7c:28:81:d1:98:f8:99:1a:53:
                    6f:e0:3a:6b:fa:d4:09:35:08:33:43:3c:0a:6b:78:
                    e3:54:6e:8a:90:4b:4c:56:03:42:8d:4e:dc:62:a6:
                    47:49:24:10:67:92:a0:2f:d8:08:a0:d0:b7:3b:6a:
                    9e:53:3a:9b:c6:b8:af:2f:73:c3:5c:91:84:d4:d4:
                    cc:26:7a:6e:72:ce:19:53:d5:58:c0:9e:8c:40:55:
                    43:3b:bd:03:17:a7:cb:ff:a4:52:60:eb:70:6e:cf:
                    6c:60:df:19:9b:1d:be:de:16:ff:9e:a0:41:5e:7a:
                    78:ae:78:8f:cb:51:de:b0:d8:b3:d6:1d:c4:fa:a7:
                    2f:d4:91:79:f0:98:52:02:c3:85:7e:c8:44:1b:ee:
                    a9:ce:45:9a:6a:d7:1e:68:90:d5:15:a2:c9:2f:c5:
                    63:35:ab:2f:e3:aa:20:c8:fc:76:f6:a0:2c:af:3a:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4E:E7:A6:6D:C2:71:2A:C9:C3:91:11:C2:87:FD:68:3D:3F:DC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2479ab2-de84-3532-98ab-7080dbd44691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.127.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:38:c0:9e:bc:e4:e0:1d:c5:60:17:ad:0e:d1:8d:18:24:47:
         34:66:b7:6a:83:1d:d5:24:8d:d4:75:a3:f4:bf:ca:47:6b:e9:
         5f:f6:99:27:58:1f:36:58:5f:a6:8f:2e:56:d1:a2:4c:0a:a3:
         ea:de:00:9d:d2:4a:74:c0:6e:de:14:8f:82:a9:4e:60:d7:ac:
         f6:57:0f:2c:1f:07:86:11:4d:d1:a7:85:f2:16:02:5a:bc:91:
         9c:08:ea:e8:6c:f5:34:8a:3c:24:b0:8e:a6:9d:a9:96:71:4a:
         7d:96:de:1b:76:07:f8:8b:2f:fe:e4:8b:28:37:e2:a2:84:b1:
         64:d6:80:0f:6c:10:76:c3:aa:b9:18:9c:00:99:9e:35:6b:3f:
         88:cb:7b:2b:0f:fb:a3:96:b5:11:a4:25:dd:35:f0:22:99:ee:
         8d:06:91:88:bc:1a:65:a4:9c:9b:6e:45:ab:c1:80:1b:34:98:
         d5:ef:48:d8:7f:43:f7:98:5d:ab:b2:33:50:bf:08:f1:df:6a:
         32:a7:e9:29:76:d0:d8:63:aa:61:77:91:1a:56:30:a5:f3:ea:
         95:45:df:fc:3c:45:2d:90:14:fc:fb:b1:db:c5:0f:06:11:87:
         60:99:d3:0f:a6:b8:e3:07:ab:f8:87:94:17:a7:c4:5e:7c:aa:
         da:95:b5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:12 2026 by rpki-client