Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb1809fa-97d9-3d1d-bb0e-7b18dc66b694.roa
File:                     fb1809fa-97d9-3d1d-bb0e-7b18dc66b694.roa (raw, json)
Hash identifier:          ucKYm8I+CJ9wRnYz184f92oNHugMeMAtZ8gvCJgPHZc=
Subject key identifier:   D3:CB:D3:9C:28:96:7C:6D:03:08:6A:63:41:3A:A6:67:48:A6:5B:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A9BA9D765EFA0EBD06840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb1809fa-97d9-3d1d-bb0e-7b18dc66b694.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        71.166.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:9b:a9:d7:65:ef:a0:eb:d0:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=7b15fa40-e50c-4925-a3c9-b6058cc7cfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:3e:59:e0:88:da:22:51:5d:14:d8:a9:53:
                    2a:1b:9f:03:57:68:f3:27:2a:27:02:0f:7f:34:98:
                    0b:33:15:c4:ec:e8:fe:fa:88:09:4d:20:5c:55:7d:
                    f0:9c:86:2e:bc:f1:18:ac:4f:b3:f3:81:d7:7b:6f:
                    84:42:43:1d:75:2d:ab:8d:a0:d2:d1:81:3b:37:d9:
                    fd:44:01:de:4f:19:e5:9f:1f:3b:09:8f:cc:b4:27:
                    e5:49:bb:28:1b:a2:91:58:0a:90:e6:b6:7f:93:a3:
                    78:a3:e9:11:be:ec:45:bc:81:76:a0:7d:72:55:58:
                    50:3d:a2:6c:61:5b:76:dc:70:3f:24:e8:01:3b:69:
                    49:ef:03:aa:64:67:5c:87:94:31:9d:6f:d6:58:d9:
                    9e:ab:55:70:51:43:e2:a9:1b:a5:36:49:6d:5c:cb:
                    f5:80:bc:3b:30:74:5c:fc:11:4c:dd:45:15:09:3e:
                    12:7c:7a:74:fb:d2:8f:be:af:b3:1b:b9:1a:6a:90:
                    fb:f8:9b:a2:ce:6d:39:b7:67:fa:6c:8a:54:46:e3:
                    9b:72:8c:3d:72:b5:2c:b6:f3:96:1f:41:78:6b:b8:
                    fa:5a:51:67:a2:38:af:7b:90:fd:53:70:d1:fe:68:
                    b0:a9:01:a0:c6:cd:25:98:af:77:b8:55:7b:3c:32:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CB:D3:9C:28:96:7C:6D:03:08:6A:63:41:3A:A6:67:48:A6:5B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fb1809fa-97d9-3d1d-bb0e-7b18dc66b694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.166.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:17:8f:4a:1d:12:6d:bb:d1:a7:06:a3:37:de:87:5d:38:2d:
         c8:c4:d7:ba:48:45:79:35:34:60:73:fe:0a:61:f4:56:83:e6:
         6b:f6:d9:75:b1:ae:46:51:c8:22:15:64:57:98:b2:0d:6e:94:
         4a:18:79:43:55:f7:23:6d:28:f6:93:4d:53:d8:ee:7b:11:23:
         c8:06:51:42:33:ff:bc:2c:c9:7d:13:33:4e:1f:45:42:22:69:
         2a:c6:dc:26:bf:a9:a1:35:ea:e3:f2:d0:d1:ba:db:ce:5c:7c:
         81:94:59:42:79:db:d3:1d:cd:a8:64:f1:e2:60:78:cf:1d:c4:
         9b:ed:50:b5:82:ae:ef:a4:6e:3f:25:1b:7d:b5:21:29:fc:42:
         c7:9a:84:2d:ff:f8:77:54:4b:a2:36:da:1d:76:a1:03:96:16:
         73:bc:85:74:e7:cf:42:45:40:7a:af:2f:23:aa:c1:0a:44:19:
         03:b8:c7:04:31:a8:34:fa:46:df:e2:ed:8b:5c:d5:f3:45:fe:
         ff:82:f2:4e:4f:f6:7c:a0:07:94:d8:88:8a:ff:b6:b8:e3:6c:
         ea:bb:39:6d:1b:0a:d0:42:cc:c1:44:45:95:36:99:a8:18:99:
         d2:e0:6c:b1:d4:12:82:e9:37:ca:40:19:95:d7:cc:b2:e4:8c:
         f8:73:e8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:57 2026 by rpki-client