Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23c6f7c8-dde9-3b42-9ae4-3cf8eaea7ad2.roa
File:                     23c6f7c8-dde9-3b42-9ae4-3cf8eaea7ad2.roa (raw, json)
Hash identifier:          CIzbMFBQZxi++rK4Gq9KAb+8fM2m6/fmrRRnLmTABw4=
Subject key identifier:   3D:04:13:1C:30:7F:30:B7:6B:32:37:82:88:23:CF:B9:35:5C:34:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE039572E30421716970D88
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23c6f7c8-dde9-3b42-9ae4-3cf8eaea7ad2.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        97.210.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:39:57:2e:30:42:17:16:97:0d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=516187b9-610c-4ef5-b02a-01b63c1c2041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:9f:c4:09:28:ed:ac:50:65:a1:e6:fc:72:
                    0e:07:c3:f0:c7:8a:9b:ba:8f:27:a7:83:30:c6:16:
                    e4:2a:2f:5e:ac:83:51:1c:38:d4:af:7e:92:24:fc:
                    84:d9:3c:aa:af:79:5f:cf:87:9e:c9:24:21:0b:01:
                    60:40:57:f3:40:f5:7a:00:e9:37:5a:4d:e4:7a:1a:
                    18:c7:e3:d7:f7:8b:29:e4:d1:f3:10:f4:ec:1c:7d:
                    56:d3:39:33:ec:f3:35:0f:52:27:48:e2:fc:6b:ba:
                    bb:e5:c0:07:84:84:89:35:6e:fb:a0:92:65:b5:aa:
                    f6:5f:cd:26:06:2e:23:99:ef:de:0d:d3:86:fb:ff:
                    f3:5d:15:8d:d3:cc:ed:73:80:05:ea:2b:96:14:f6:
                    26:4f:19:92:b0:63:cf:c7:af:71:a2:6b:61:de:d7:
                    5c:95:1d:b5:37:62:05:6f:7e:df:2c:6b:dd:14:34:
                    92:34:04:f9:9e:72:82:df:8c:92:6e:9a:a9:41:38:
                    85:2b:82:0a:6b:9d:5c:57:a5:0c:2c:0e:2a:86:6a:
                    a1:dc:7e:f2:99:52:c6:f5:7c:b0:e3:31:31:88:64:
                    94:d6:63:81:7f:1a:0b:e5:db:2f:ed:93:09:28:cd:
                    71:85:f2:7a:74:78:de:9b:3c:9a:62:c9:b5:35:63:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:04:13:1C:30:7F:30:B7:6B:32:37:82:88:23:CF:B9:35:5C:34:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23c6f7c8-dde9-3b42-9ae4-3cf8eaea7ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.210.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:8e:85:4a:33:27:af:71:22:d2:9a:35:8e:1c:8d:e3:ed:1c:
         74:c5:be:26:73:2a:a8:82:6c:8a:c1:9e:23:60:6b:08:70:9c:
         59:6c:4e:9e:c4:d6:7b:aa:ae:b2:de:4b:ad:de:21:b2:39:7e:
         09:8c:fc:c4:1a:bf:8d:7c:95:a2:53:88:14:c5:00:86:4a:bc:
         a2:d9:c4:a3:76:8c:22:fb:ba:cf:a1:2e:99:c0:c8:c0:70:06:
         f1:c4:b5:eb:d3:21:fe:88:97:ad:53:4f:34:7b:8e:c7:94:5a:
         3e:db:5a:cb:37:a6:76:8c:77:4c:ee:71:cf:ff:cd:fd:7f:38:
         d3:56:6a:73:19:d3:ee:07:41:d7:e3:43:3c:81:a0:96:a2:c5:
         54:a7:9f:ff:d1:a7:da:95:27:7a:54:45:33:ed:fa:aa:08:f2:
         ec:cc:79:d4:c7:1c:0c:c5:23:e1:31:07:38:e5:45:86:66:1e:
         47:1d:98:e8:32:3e:e3:ee:fd:0c:35:69:40:15:38:31:ff:95:
         48:83:79:11:72:d3:59:73:db:35:63:7e:f1:f5:88:41:02:df:
         cc:7f:d3:96:24:d2:0f:1a:34:66:98:e9:47:d9:6d:f7:86:2c:
         59:f3:92:78:38:01:26:59:a6:37:eb:b0:29:a2:c4:b0:d6:d2:
         8c:e1:4e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:00 2026 by rpki-client