Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a557b9c-7412-384f-a294-5eb1aafd896a.roa
File:                     3a557b9c-7412-384f-a294-5eb1aafd896a.roa (raw, json)
Hash identifier:          hWdECFND/FGM9uhDPa5DwbMgJUz2qFC2C9tN7DN8zbQ=
Subject key identifier:   B6:09:5C:EA:A4:38:12:45:A6:AB:32:3B:AE:60:3D:A7:15:06:30:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A14F7FF4BBF5C8DADF700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a557b9c-7412-384f-a294-5eb1aafd896a.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        97.237.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:14:f7:ff:4b:bf:5c:8d:ad:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=0e968368-0933-4ad7-9d94-b5d6deba697a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:5d:dd:1f:57:26:bc:75:ee:c2:c4:23:59:
                    70:71:d6:f1:84:ad:c5:5a:b0:8d:03:ae:f6:e9:c0:
                    dc:0d:b2:15:03:5e:c7:44:09:2a:f5:df:22:e2:17:
                    9a:0d:2d:f4:c4:19:df:93:c8:07:3c:7a:a5:5d:c8:
                    d2:5c:cd:48:a3:1b:a9:3c:ab:e6:e0:16:28:38:22:
                    9a:2c:ff:27:26:34:ca:a1:63:46:84:6a:12:12:a6:
                    31:05:75:f0:b8:8c:a2:f8:1f:95:84:ad:ea:5a:c8:
                    c2:d7:13:d8:2d:40:a3:a9:90:54:7c:3e:db:2e:19:
                    00:db:cd:54:be:04:53:18:1e:b2:bc:97:54:86:72:
                    40:35:b6:fd:d4:98:e0:2d:77:f1:e9:48:ee:da:09:
                    2c:f7:16:04:60:3b:09:0f:4e:d2:a5:d9:80:5a:25:
                    63:0d:04:a3:77:6b:f2:b7:bb:c7:db:18:ad:1d:24:
                    11:86:1c:65:39:28:02:f9:9c:e9:ee:85:1b:df:23:
                    2a:d9:77:0e:ae:03:a4:64:08:cf:e6:69:f2:17:dc:
                    e3:cb:ac:35:a3:e7:ab:d5:64:5d:14:0b:43:c3:2d:
                    60:2c:7e:fa:09:89:c8:b6:bf:e3:7c:0d:ec:0c:cf:
                    e0:0e:ac:d4:98:0b:46:ad:3c:d9:be:5f:15:40:fe:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:5C:EA:A4:38:12:45:A6:AB:32:3B:AE:60:3D:A7:15:06:30:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a557b9c-7412-384f-a294-5eb1aafd896a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.237.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:34:c8:f1:5f:86:de:9b:71:5a:b4:bb:f4:7d:ff:3a:cd:3b:
         d0:79:e6:af:20:7d:44:f3:cd:51:52:6d:0a:0e:ba:45:3e:a6:
         fd:bc:6a:60:fe:9a:b4:e9:e8:d1:17:3f:8e:ff:42:46:4f:bb:
         e8:63:13:18:24:ed:c2:1a:aa:b9:d2:5d:53:d1:f4:36:4e:ba:
         c3:22:29:37:8b:89:79:45:37:9e:c0:12:bb:62:b1:77:d6:0e:
         18:8c:46:0b:36:79:0a:e4:16:9b:ec:69:f8:41:63:71:34:0a:
         bd:02:17:68:4a:cf:69:eb:a9:6b:25:a7:a8:ed:f0:a4:ae:2b:
         47:05:fb:a8:fc:c3:8a:24:de:e7:1d:1b:b9:23:e3:23:f1:a5:
         5a:b3:4d:fc:78:f0:fb:4c:94:8f:da:59:c4:b2:c4:c7:27:6a:
         08:50:65:fb:c1:80:e3:ab:5b:5d:05:5e:03:87:c4:42:57:dc:
         1b:60:47:8c:49:4e:5b:6b:22:39:3b:6e:8a:ab:29:c5:03:a5:
         da:70:8b:c3:e3:5d:66:77:99:89:a3:9f:92:86:6c:28:c5:dc:
         6a:f2:b1:df:da:e1:b4:17:e8:fa:90:fc:b7:1c:1d:fa:14:f0:
         15:67:d7:48:ee:b0:8b:6f:f3:d5:8c:4a:25:a4:38:77:d0:00:
         24:88:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:33 2026 by rpki-client