Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3571c2d1-aaf6-3036-876f-0f8f5d5dc14a.roa
File:                     3571c2d1-aaf6-3036-876f-0f8f5d5dc14a.roa (raw, json)
Hash identifier:          Von7Dl+hOFDoAdlzWjMLrOP7/NLlrkuh9xA9iese2Uc=
Subject key identifier:   D1:90:15:C7:53:27:9C:BB:A0:82:73:A8:0F:2E:42:8A:72:FB:23:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87C9D43F5531A95712F580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3571c2d1-aaf6-3036-876f-0f8f5d5dc14a.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.212.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c9:d4:3f:55:31:a9:57:12:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=4682b6cf-13e5-411f-8ab1-4ca1e019d72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:92:bc:7b:b3:eb:6a:49:e1:87:0f:bb:d7:
                    6f:b4:05:8d:ff:fe:37:36:85:4d:f5:84:a4:f2:0a:
                    be:65:85:52:f2:ea:ec:37:26:c0:a4:86:b1:36:36:
                    fe:61:29:95:c5:32:b7:d4:1b:9f:0d:68:3e:7b:ea:
                    98:22:b0:a6:95:72:1c:6f:b7:d9:49:7f:ce:03:98:
                    15:9b:00:29:06:28:56:17:44:b1:f7:9c:e1:2d:f3:
                    4b:1d:ee:42:9a:1f:77:76:05:7e:f0:d6:65:e1:e9:
                    3e:9a:11:f1:17:8c:f4:fc:fb:14:1a:36:a6:92:99:
                    b2:83:47:78:67:88:60:85:cf:6e:e1:eb:3a:a8:cf:
                    28:f0:f7:de:33:cb:f4:98:63:5f:2b:47:16:33:30:
                    1a:cc:78:4f:60:18:9a:47:fb:4e:f5:58:72:6e:04:
                    25:78:3b:68:55:f0:12:cd:1a:9e:ad:29:5f:d5:26:
                    47:14:42:97:12:c4:d7:07:43:c0:c3:a5:44:30:64:
                    2d:69:bc:86:20:a3:f9:68:c5:7e:cd:0e:e5:ae:10:
                    46:fc:a5:9a:00:db:ca:4c:0d:3b:5b:a6:3a:ed:b8:
                    48:87:48:0a:e1:96:1b:67:39:85:35:2b:8a:48:fc:
                    f4:b4:da:97:6c:8c:e4:ea:ec:c6:76:6a:39:d0:71:
                    de:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:15:C7:53:27:9C:BB:A0:82:73:A8:0F:2E:42:8A:72:FB:23:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3571c2d1-aaf6-3036-876f-0f8f5d5dc14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.212.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c7:25:37:59:b6:31:94:18:b3:d5:ac:56:99:bb:bb:04:64:
         6a:4e:a1:95:0c:61:67:48:d3:2c:d7:a6:c3:2d:2b:fc:cf:6b:
         da:cb:83:5c:bf:37:1a:e4:06:82:c9:ec:8a:ac:f4:8e:f0:6a:
         d1:1a:83:e3:7b:a6:49:43:04:bd:ac:8f:e2:71:26:5f:04:44:
         0d:fd:ed:9a:0d:73:98:f5:76:c1:60:c4:60:f7:22:cc:34:dc:
         32:c7:f7:a0:d9:04:d0:eb:7c:ea:71:0b:02:e5:ad:1b:4f:3e:
         4b:ea:79:fc:bf:b6:ac:78:59:6a:62:98:49:29:2b:ab:cb:c3:
         c9:27:79:0f:78:d5:b5:08:2d:ce:c3:11:c9:ba:7f:23:61:3f:
         c7:e5:84:5d:ce:9c:74:48:41:4d:01:76:ab:54:31:ac:25:4c:
         74:df:cd:cf:81:b9:45:ce:94:8d:03:3b:40:a9:43:f7:8e:b8:
         5c:8e:de:67:15:ae:95:a3:ba:7b:c7:5b:8e:f0:70:c8:21:a4:
         82:d3:0b:5a:85:ec:be:21:dd:98:1d:d3:a8:ba:32:63:c4:30:
         54:d1:66:76:24:e4:dd:9f:90:66:31:e0:1c:9a:08:55:25:6b:
         ef:02:37:77:64:9d:ee:13:67:2a:be:4e:71:99:f6:e6:04:8b:
         6c:ed:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:16:24 2026 by rpki-client