Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f45a9ee-6204-3231-bce5-44e354aab03f.roa
File:                     1f45a9ee-6204-3231-bce5-44e354aab03f.roa (raw, json)
Hash identifier:          esdLhVIFkW2Pg3wbdcQa32ypKvTNMgEz6SFIl+u/nvE=
Subject key identifier:   CB:BF:8A:02:84:A0:4E:E3:0E:75:55:6D:D7:F3:B7:6E:21:DB:B0:C5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9A7FEA6055F1EBE0EDA505C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f45a9ee-6204-3231-bce5-44e354aab03f.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        97.236.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ea:60:55:f1:eb:e0:ed:a5:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=494e0f15-f792-4370-889e-bc581c428ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:11:73:13:01:87:e7:b8:cf:5f:7a:e4:f0:12:
                    94:ec:3a:6a:ba:f1:0f:b9:cf:a0:48:e7:66:df:65:
                    ae:06:63:b5:14:1d:18:b5:65:d8:92:94:3c:d2:c8:
                    52:a3:54:39:b4:c7:a6:fa:8f:98:9d:98:80:63:5c:
                    58:c0:6f:c5:b7:e7:aa:e4:4c:80:34:6e:72:01:f5:
                    d9:fa:de:8a:62:a1:ca:27:c4:a3:45:f5:4e:a4:71:
                    10:b7:23:06:6f:a8:9e:94:38:de:3c:d8:d3:d2:c4:
                    c4:a8:27:ef:9e:5e:64:17:7d:af:4f:80:28:d0:44:
                    13:bf:bf:38:4c:fc:a2:f2:96:e3:d7:0f:a4:74:bf:
                    6d:22:ee:05:a4:4a:12:1b:a6:2b:a0:57:19:36:cc:
                    dc:3c:6d:25:8b:ac:c9:7f:32:73:27:09:76:5a:94:
                    59:9b:09:e9:c9:8b:ea:e8:76:e8:1b:d0:ff:ff:ed:
                    bc:47:d7:54:69:57:77:cc:18:5e:68:80:75:39:dc:
                    59:c2:03:28:30:b1:45:e7:ad:51:3c:bd:fe:df:e1:
                    a7:d8:a3:6e:a1:d2:b3:1c:f4:ad:1a:b4:1e:89:b5:
                    b8:96:cb:60:c2:a2:1d:e1:e5:06:3c:e4:76:cb:2c:
                    d6:4a:ef:9b:66:ff:81:fe:78:71:ec:3e:44:41:2c:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BF:8A:02:84:A0:4E:E3:0E:75:55:6D:D7:F3:B7:6E:21:DB:B0:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f45a9ee-6204-3231-bce5-44e354aab03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.236.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:cd:23:34:76:ed:f0:3b:40:2c:47:35:b4:5c:6b:fc:7d:
         6a:ab:52:6a:ac:4f:42:35:30:48:51:f6:e5:23:86:7c:24:b2:
         ce:7f:7c:98:45:2c:b2:83:0e:fa:19:82:74:a6:12:14:af:ab:
         25:06:60:17:f5:82:2b:5e:89:39:7c:d4:4f:61:98:d2:25:6d:
         c0:30:db:4a:c0:02:9d:fa:41:9a:f8:c6:67:40:49:8e:65:e3:
         d7:e1:18:d6:a2:79:f5:f4:f1:52:8c:ce:78:79:57:9d:1a:0f:
         cf:90:ca:48:6d:45:73:9a:fc:7f:ee:9e:67:4c:12:38:4a:eb:
         eb:cf:8c:fa:b7:fd:8f:d1:8a:59:17:93:2a:34:15:7e:76:d8:
         35:c7:b8:68:ba:6d:b6:fc:65:4c:df:88:23:dc:fa:06:96:f7:
         d1:63:5e:50:00:a5:a0:63:65:5b:85:e0:b6:39:11:34:6d:44:
         04:ff:02:4d:6f:23:c8:43:8b:7e:3d:17:3c:9c:f7:21:b8:81:
         67:bd:bc:92:4f:2e:c4:88:34:e8:ad:bc:cb:4f:cf:38:8f:ee:
         cb:c8:7a:d1:2d:9d:72:7a:01:94:db:60:11:69:fd:63:e1:d9:
         fb:79:7b:85:79:6d:50:0c:ee:03:49:02:de:d4:61:f6:db:ac:
         81:12:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:07 2026 by rpki-client