Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60d3d591-1600-3b37-9056-8df8070d6b01.roa
File:                     60d3d591-1600-3b37-9056-8df8070d6b01.roa (raw, json)
Hash identifier:          OCp2ndTqdD1ADQqs3aKeSSpOXiEsMdHB9j653Bk/FRM=
Subject key identifier:   D3:78:E7:F4:74:EB:CF:38:44:56:78:76:57:7F:94:85:D6:96:A7:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F067257281E313E81E4D64480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60d3d591-1600-3b37-9056-8df8070d6b01.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.150.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:57:28:1e:31:3e:81:e4:d6:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f73ba5be-26ef-4d4d-9b84-3da1695ad385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:81:45:8a:54:ac:29:96:ac:32:cc:5a:0c:
                    aa:62:6a:cf:7d:99:0a:5b:44:0c:a8:a5:ca:f2:b4:
                    72:13:e0:06:2e:cc:dd:06:14:88:2d:bc:05:47:59:
                    e1:fe:41:7d:5b:f4:70:cf:87:cf:8c:e0:d0:81:d5:
                    76:cb:43:33:6c:6b:e4:16:07:10:c6:7f:95:d9:0c:
                    99:59:14:21:d7:7f:43:d7:d3:3b:f8:75:d4:66:b6:
                    c8:d9:88:2b:f5:ab:af:c3:5a:25:cb:32:c8:ba:42:
                    a3:89:04:ac:9b:88:f5:9d:44:48:b6:c2:a4:a7:d3:
                    84:ed:56:93:b1:10:a5:d5:19:1a:90:9f:89:14:16:
                    6e:ee:4d:03:4f:ad:1a:05:c2:6c:93:0c:64:6e:2a:
                    49:ae:cd:d7:9b:83:c4:21:6c:e3:6d:a1:3d:47:d6:
                    d8:93:d6:e6:85:14:a2:4a:cd:a7:09:41:99:9d:d7:
                    8c:00:bc:44:40:80:95:7d:4e:c6:1e:41:4d:21:46:
                    64:87:5c:5d:4a:dd:e3:69:37:d9:45:ae:98:06:c6:
                    d5:2b:cf:44:c3:2f:ef:ea:87:d8:e2:2d:5d:9f:26:
                    c4:a3:d9:22:0b:89:ce:0a:d8:a5:6d:08:9f:00:19:
                    39:6c:e3:b1:50:9e:d4:54:06:a6:e0:88:c7:21:37:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:78:E7:F4:74:EB:CF:38:44:56:78:76:57:7F:94:85:D6:96:A7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60d3d591-1600-3b37-9056-8df8070d6b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.150.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b6:75:73:95:2d:46:10:0d:e4:3d:d2:dc:aa:82:4e:3d:53:
         c8:3a:de:05:8a:32:fe:07:44:04:6f:d4:84:61:b8:18:be:a5:
         3d:e5:42:67:8e:76:54:0e:48:47:6c:b7:10:07:0e:10:85:ed:
         29:0e:9f:e0:81:f3:b7:2e:90:dc:1d:ba:2f:60:3b:9d:87:4b:
         6f:de:d7:30:72:b5:a9:b0:55:e5:e2:a6:de:78:06:02:94:66:
         66:f7:2b:e5:94:f9:6b:b9:88:95:9c:30:9e:56:43:20:ac:a5:
         83:f2:c5:d6:4c:b6:a5:61:c6:6c:c5:a3:83:69:1b:df:b4:30:
         12:3a:6d:01:a4:ad:97:08:98:7f:dd:2a:c6:6d:66:b2:de:3d:
         a4:61:e7:b0:bf:3d:19:ef:d2:6c:8c:7a:69:77:26:33:b2:17:
         19:da:fa:70:36:f9:35:ac:ff:39:41:3d:f8:dc:b5:24:62:20:
         ed:3b:80:06:7e:e8:a5:2e:7b:f6:a7:d4:56:7c:74:aa:4d:91:
         f1:34:40:6d:be:9e:5f:7d:79:bd:b7:63:20:9b:09:8b:cc:30:
         28:9b:29:7a:8a:f6:76:ac:8f:5b:58:15:60:bf:55:f0:4f:af:
         dc:c8:ca:49:17:20:39:a3:d5:88:f4:45:7e:2a:b5:12:9d:55:
         ae:eb:9a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:31:39 2026 by rpki-client