Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24e7f77e-710d-3396-8567-f21c076e8434.roa
File:                     24e7f77e-710d-3396-8567-f21c076e8434.roa (raw, json)
Hash identifier:          KVyTpF4j782nEhPIFmF18+BosctaaoLsZewKsPMCFTs=
Subject key identifier:   3E:B1:DB:E6:DE:C8:41:50:E6:B7:9A:C5:EA:B6:AF:97:3B:F1:3A:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A3337FAD580024E794C2B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24e7f77e-710d-3396-8567-f21c076e8434.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.222.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:37:fa:d5:80:02:4e:79:4c:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=d2b4e1b8-5ea1-492d-8a97-c05f63cf2063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:37:d7:1a:59:da:5e:a3:20:48:75:e5:c2:
                    39:28:2d:13:ee:de:ed:65:32:d0:28:10:5f:01:c6:
                    66:d3:22:db:aa:cf:47:02:6f:38:6e:cb:1a:97:c2:
                    03:64:80:0b:2d:2e:38:bf:8e:03:e8:6c:9c:4d:b3:
                    83:b4:1f:09:43:22:97:ff:62:cf:86:ab:a2:34:2b:
                    b5:ee:e1:aa:2d:a3:73:be:af:71:78:3b:93:65:25:
                    47:84:df:71:9d:3d:18:45:79:11:7f:41:fa:fa:2b:
                    87:30:32:83:a2:28:93:6b:9b:38:d3:3a:35:25:f6:
                    af:0f:90:25:6a:70:8f:d3:dc:aa:58:7c:1b:65:77:
                    b5:1e:ba:7f:f4:2a:81:10:a1:32:a2:4b:b0:55:2e:
                    bd:82:6c:7e:4c:13:71:dc:c4:e5:dc:19:e9:d8:65:
                    59:b7:b6:c6:44:1c:dc:35:bb:b1:5b:f7:f6:ef:50:
                    4a:46:12:4c:ad:ed:24:de:c0:0c:4e:eb:62:c6:ff:
                    ac:c4:bf:29:1c:99:9c:32:31:80:fd:e6:35:c8:2b:
                    1c:72:52:93:52:c5:e1:e1:be:13:f8:50:66:cf:5b:
                    09:48:4f:03:dc:e1:a2:c3:e5:89:1f:4f:3e:83:b1:
                    62:49:dc:1f:79:f1:b5:3a:19:0e:64:10:1c:66:b8:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B1:DB:E6:DE:C8:41:50:E6:B7:9A:C5:EA:B6:AF:97:3B:F1:3A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24e7f77e-710d-3396-8567-f21c076e8434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.222.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:4e:d5:0a:73:bf:7d:24:0b:50:7a:50:4d:e0:5b:78:5a:51:
         44:d8:6b:de:63:ef:47:e8:b9:2d:a3:7c:ad:39:0e:7d:d5:4b:
         41:d8:d2:88:9a:44:63:b5:9b:fe:ba:9f:0b:7d:5c:9a:d2:13:
         80:e7:ac:4f:8b:30:be:25:85:22:19:7a:15:f2:f7:df:e6:84:
         9e:6f:92:56:9e:cc:b0:12:41:80:97:ca:98:60:4c:f3:0e:be:
         7f:e9:40:b6:ba:1b:92:11:51:c1:fc:22:73:17:cf:f1:86:5e:
         d3:e7:7f:2f:eb:37:bd:db:a5:cb:87:73:ab:5e:22:82:ec:cc:
         df:72:0f:f1:25:91:46:de:ac:b6:12:85:75:d2:36:30:43:9d:
         ce:c1:bc:ed:1d:f9:f9:e6:b2:9c:8f:54:1b:3c:c9:3d:02:4f:
         dd:e3:94:a9:d5:0f:63:b3:02:c5:34:09:2c:06:db:2e:32:8d:
         cc:82:17:fd:ca:83:84:69:57:5c:c0:fb:53:71:09:93:7f:c3:
         97:30:69:dc:a3:96:66:f1:f2:a8:02:25:2c:29:bc:fc:82:d8:
         ee:e0:e8:e3:90:9b:7a:ca:36:ca:af:e4:9f:ca:2f:7e:29:03:
         cb:02:e3:e1:a4:27:2d:bf:88:7a:1a:70:cd:3f:4a:16:cd:06:
         5e:7a:f7:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMzf61YACTnlMKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDJiNGUxYjgtNWVhMS00OTJkLThhOTctYzA1ZjYzY2YyMDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dc31xpZ2l6jIEh15cI5KC0T7t7tZTLQKBBf
AcZm0yLbqs9HAm84bssal8IDZIALLS44v44D6GycTbODtB8JQyKX/2LPhquiNCu1
7uGqLaNzvq9xeDuTZSVHhN9xnT0YRXkRf0H6+iuHMDKDoiiTa5s40zo1JfavD5Al
anCP09yqWHwbZXe1Hrp/9CqBEKEyokuwVS69gmx+TBNx3MTl3Bnp2GVZt7bGRBzc
NbuxW/f271BKRhJMre0k3sAMTutixv+sxL8pHJmcMjGA/eY1yCscclKTUsXh4b4T
+FBmz1sJSE8D3OGiw+WJH08+g7FiSdwfefG1OhkOZBAcZrjVjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6x2+beyEFQ5reaxeq2r5c78TryMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjRlN2Y3N2UtNzEwZC0z
Mzk2LTg1NjctZjIxYzA3NmU4NDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYd4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9O1Qpzv30kC1B6UE3gW3haUUTYa95j70fouS2jfK05Dn3VS0HY0oia
RGO1m/66nwt9XJrSE4DnrE+LML4lhSIZehXy99/mhJ5vklaezLASQYCXyphgTPMO
vn/pQLa6G5IRUcH8InMXz/GGXtPnfy/rN73bpcuHc6teIoLszN9yD/ElkUberLYS
hXXSNjBDnc7BvO0d+fnmspyPVBs8yT0CT93jlKnVD2OzAsU0CSwG2y4yjcyCF/3K
g4RpV1zA+1NxCZN/w5cwadyjlmbx8qgCJSwpvPyC2O7g6OOQm3rKNsqv5J/KL34p
A8sC4+GkJy2/iHoacM0/ShbNBl56978=
-----END CERTIFICATE-----
Generated at Tue Oct 13 10:05:52 2026 by rpki-client