Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0b484f3b-ccb8-3bcf-8d65-78f7e89181e1.roa
File:                     0b484f3b-ccb8-3bcf-8d65-78f7e89181e1.roa (raw, json)
Hash identifier:          vHsh9a1dXPjxHUtu/ZMydjADqC70Hxem6DMkOz4mdZw=
Subject key identifier:   CE:C7:E8:7B:7D:B1:FF:5B:E8:53:B8:5B:E0:07:F9:17:3D:F9:32:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1172954367A1280C9BFF6E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0b484f3b-ccb8-3bcf-8d65-78f7e89181e1.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        97.230.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:95:43:67:a1:28:0c:9b:ff:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=052ec584-6367-4342-a49e-cdba16ef08bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:e5:cc:7c:b0:d7:17:9e:40:1c:a6:a2:a0:
                    c2:0b:4b:da:5d:ca:78:5f:6c:c3:b3:73:71:ae:de:
                    da:10:32:74:96:3b:33:94:f4:1f:44:ff:7f:9e:a3:
                    84:9d:87:e8:8c:28:3b:a5:95:10:19:11:27:55:a1:
                    47:52:75:99:64:3f:51:27:c4:cd:64:27:76:6f:f2:
                    86:28:8c:5e:62:3c:d4:e6:bd:a6:03:24:1d:ce:ae:
                    46:8a:90:35:26:f7:df:16:db:57:c0:4b:69:93:d1:
                    b1:2a:52:5b:ea:79:54:e6:6d:4e:bf:c0:11:bf:b2:
                    03:65:9f:56:fb:02:94:f3:26:48:8e:6c:db:61:67:
                    15:e6:83:0e:7c:9e:39:89:b4:80:b7:13:99:26:b1:
                    6c:77:8c:9e:25:32:51:83:4d:51:d2:68:7d:5d:e6:
                    70:ed:ed:72:a8:d1:7c:f9:44:ef:74:f7:ce:79:9d:
                    26:6c:94:a9:65:84:42:56:fb:f5:da:fa:93:5e:0e:
                    54:fe:5b:55:f6:7c:aa:38:72:61:6f:1f:93:61:b6:
                    20:57:1d:5b:fe:d3:66:9c:6f:50:41:54:e5:cb:98:
                    5b:d3:08:9b:e4:5c:22:f7:dc:17:ac:63:b5:d6:d6:
                    2b:94:35:51:8b:77:06:63:e3:01:d1:88:9a:9e:ba:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C7:E8:7B:7D:B1:FF:5B:E8:53:B8:5B:E0:07:F9:17:3D:F9:32:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0b484f3b-ccb8-3bcf-8d65-78f7e89181e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:78:98:64:6a:11:3f:9f:c2:15:20:ed:9c:4e:e2:3e:c9:ca:
         d8:9c:09:9d:e5:fc:3b:ae:37:13:48:c5:2c:ee:bb:23:50:87:
         01:39:0a:b0:fb:83:0e:52:0b:7d:71:77:df:9a:6f:98:f2:19:
         c1:95:b5:12:c8:fe:b1:b3:9a:89:ee:25:13:2d:13:30:32:75:
         2f:0d:73:de:d7:b8:af:c9:4f:12:42:79:ce:0b:31:51:91:a4:
         8a:bd:49:cf:c7:66:f5:ff:87:92:05:0e:b7:48:4e:69:8a:47:
         52:30:c7:73:3e:35:4b:6e:1d:4b:64:27:7d:14:1a:61:83:77:
         f6:85:df:53:c7:98:61:29:5c:2b:c0:e3:dc:53:3c:fc:da:87:
         91:f4:48:3d:ee:bc:54:2e:d9:82:02:e1:ea:70:24:bb:2c:5e:
         e3:61:05:19:08:a4:56:61:00:da:9e:68:ef:dd:b3:7e:c5:d1:
         a1:76:0c:ac:c5:b8:e9:a1:95:3c:d1:30:7a:ae:4c:f2:ae:1a:
         b6:35:c0:67:9e:b8:9a:1b:95:cf:63:5e:ec:78:87:ad:6e:79:
         e0:50:2a:18:ca:5d:77:dd:af:72:c0:a6:34:94:c0:dd:9e:bd:
         e7:2f:1e:c8:33:49:f1:b6:2c:c4:1b:52:2e:d6:43:4c:c9:70:
         45:15:7b:8e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0RcpVDZ6EoDJv/boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
MDUyZWM1ODQtNjM2Ny00MzQyLWE0OWUtY2RiYTE2ZWYwOGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsblzHyw1xeeQBymoqDCC0vaXcp4X2zDs3Nx
rt7aEDJ0ljszlPQfRP9/nqOEnYfojCg7pZUQGREnVaFHUnWZZD9RJ8TNZCd2b/KG
KIxeYjzU5r2mAyQdzq5GipA1JvffFttXwEtpk9GxKlJb6nlU5m1Ov8ARv7IDZZ9W
+wKU8yZIjmzbYWcV5oMOfJ45ibSAtxOZJrFsd4yeJTJRg01R0mh9XeZw7e1yqNF8
+UTvdPfOeZ0mbJSpZYRCVvv12vqTXg5U/ltV9nyqOHJhbx+TYbYgVx1b/tNmnG9Q
QVTly5hb0wib5Fwi99wXrGO11tYrlDVRi3cGY+MB0YianrrwdwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM7H6Ht9sf9b6FO4W+AH+Rc9+TJmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGI0ODRmM2ItY2NiOC0z
YmNmLThkNjUtNzhmN2U4OTE4MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYeYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZniYZGoRP5/CFSDtnE7iPsnK2JwJneX8O643E0jFLO67I1CHATkKsPuD
DlILfXF335pvmPIZwZW1Esj+sbOaie4lEy0TMDJ1Lw1z3te4r8lPEkJ5zgsxUZGk
ir1Jz8dm9f+HkgUOt0hOaYpHUjDHcz41S24dS2QnfRQaYYN39oXfU8eYYSlcK8Dj
3FM8/NqHkfRIPe68VC7ZggLh6nAkuyxe42EFGQikVmEA2p5o792zfsXRoXYMrMW4
6aGVPNEweq5M8q4atjXAZ564mhuVz2Ne7HiHrW554FAqGMpdd92vcsCmNJTA3Z69
5y8eyDNJ8bYsxBtSLtZDTMlwRRV7jg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:08 2026 by rpki-client