Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eab4b64-09c9-3060-abae-743e6441f6c3.roa
File:                     3eab4b64-09c9-3060-abae-743e6441f6c3.roa (raw, json)
Hash identifier:          NqBzCbcTRBLR9vA5xcsYKebKa0v/aDNJMBYiymqrb5g=
Subject key identifier:   63:DE:AE:C0:6B:AA:B9:4E:F5:58:0E:C2:2B:C2:43:BC:3D:2A:78:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4975082D9F68C66FC6567800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eab4b64-09c9-3060-abae-743e6441f6c3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.215.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:08:2d:9f:68:c6:6f:c6:56:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=52f9f4ed-4a7a-4fb3-be69-9ec3bc88d780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:95:a3:d9:5f:82:ad:78:45:32:83:06:7f:
                    96:61:57:8b:d0:c1:69:e1:eb:99:d3:00:06:2c:af:
                    ae:fd:35:f6:5c:8c:39:ee:60:a5:7e:1b:f0:2a:70:
                    7d:d0:0d:1e:84:83:de:7a:02:8d:05:75:a4:07:42:
                    89:71:de:4e:c5:f0:c3:56:50:6e:ba:4e:38:e0:8f:
                    e3:03:5e:00:48:6e:37:8a:28:35:1f:45:ff:b5:cc:
                    2f:3f:c8:35:a7:d2:27:83:bb:04:dd:12:e2:46:d9:
                    19:d5:be:a6:49:d2:a6:68:be:73:a0:73:89:43:6b:
                    14:3b:93:e8:10:17:f1:dc:9b:17:d3:2d:f1:a6:ff:
                    32:6f:5f:e5:88:7e:29:9f:22:a4:c4:20:6d:a3:10:
                    1c:9f:04:5d:0b:24:32:46:c2:2f:ca:14:bc:e3:7e:
                    47:ee:e8:11:b3:13:8b:a0:fc:65:c7:4c:55:bc:02:
                    a4:80:48:13:66:c0:4f:09:a7:cd:91:bf:46:22:f5:
                    d3:f5:96:99:eb:ea:a4:0e:ba:46:5e:1d:70:2a:bf:
                    32:1d:cd:b8:47:78:8f:9c:10:cf:f3:ce:5f:41:63:
                    a3:07:dd:2a:82:e3:6b:12:47:10:15:8e:29:a6:28:
                    07:96:0d:f8:2b:3f:95:8f:21:3f:03:4c:d0:56:cd:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DE:AE:C0:6B:AA:B9:4E:F5:58:0E:C2:2B:C2:43:BC:3D:2A:78:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eab4b64-09c9-3060-abae-743e6441f6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f7:ac:f4:4f:3b:60:33:f4:ee:9f:59:8a:93:4f:45:7d:4c:
         16:6e:c9:8e:de:4c:df:d9:8f:f8:57:15:0f:63:23:36:28:21:
         48:aa:55:17:4f:77:47:10:13:2a:67:c3:e3:14:3f:02:82:03:
         96:05:55:67:15:f4:bb:ad:9f:f3:87:86:3f:e1:af:7a:72:20:
         48:6e:d9:1d:69:ba:7c:56:95:ad:42:63:97:dd:c8:9c:56:2f:
         4a:96:c5:9d:77:f9:5a:3a:b4:c9:1f:73:a2:c4:d6:91:02:e6:
         89:e4:82:f4:31:17:84:13:c0:e7:09:36:dd:40:ea:f5:b6:42:
         9d:e9:9a:7e:ab:22:a7:8c:84:cc:67:44:fd:ba:09:9f:52:bb:
         cd:84:45:ab:53:a9:85:8a:89:90:a3:cb:4e:05:2a:e9:0f:a1:
         2c:86:e2:bb:3c:87:bc:e1:6d:b3:c5:b8:21:da:52:9c:e1:d3:
         26:e6:94:53:55:fc:51:ab:cd:1a:c8:35:14:91:49:12:9b:54:
         8e:32:3f:82:34:5b:49:d0:9f:cf:01:7d:da:52:44:a3:90:15:
         46:43:cb:db:b4:8b:eb:eb:b8:3c:48:8e:a3:3d:77:a6:79:49:
         63:9d:5b:58:24:9f:89:47:01:d2:bb:8d:ed:1d:af:83:b1:05:
         e0:41:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:34:37 2026 by rpki-client