Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66822048-ca7a-324f-965b-8a42e8e96113.roa
File:                     66822048-ca7a-324f-965b-8a42e8e96113.roa (raw, json)
Hash identifier:          xt3aU+6fzpctFcqZR5mV++Um/UF1NDYwYh4+/HwLhJU=
Subject key identifier:   D2:24:36:1C:F1:F9:4C:EE:36:39:2F:25:64:C4:DA:66:3B:CB:FE:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0391B0A2DD62B2D97D080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66822048-ca7a-324f-965b-8a42e8e96113.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        97.210.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:39:1b:0a:2d:d6:2b:2d:97:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=4584988c-b603-49af-b3e8-3fffa2acd562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e3:8c:7a:3b:a9:cd:e6:5d:40:ff:33:f7:27:
                    77:d1:ca:02:f1:c8:7a:31:9a:aa:eb:75:bc:d7:15:
                    1f:44:c7:d4:24:3d:20:aa:df:0e:d2:34:68:02:50:
                    0e:1d:ba:60:1c:c9:82:56:18:0b:37:ce:9d:22:d1:
                    7d:45:b4:e0:b3:70:d0:dd:07:6a:d6:44:35:24:4b:
                    5b:2b:75:7f:70:a0:45:23:16:13:52:b9:30:9c:20:
                    da:5e:4c:7c:49:f8:f3:a9:11:c1:74:40:62:2b:35:
                    28:cf:6b:a2:b7:e7:b1:9f:ce:c4:70:97:0d:1e:f9:
                    4f:0b:ff:6f:c4:9b:27:32:e3:cf:bd:d4:f2:09:03:
                    34:64:9e:96:f4:80:6a:da:04:3d:94:28:c7:b0:65:
                    f7:6e:34:13:b9:ba:10:f3:65:38:28:7a:9a:6a:8a:
                    31:fa:1f:05:bb:2d:4a:b6:4a:d1:c7:7b:50:ba:5b:
                    7e:60:32:20:e6:7a:2e:3a:ad:84:c3:b3:1d:92:17:
                    3b:7a:65:fc:5e:0f:c4:61:02:92:8e:85:a2:5e:f1:
                    f4:97:c4:56:ab:9d:39:fd:14:ba:55:f9:19:44:96:
                    1a:19:e2:c0:0e:03:a4:0c:e6:04:95:ea:a4:b0:7f:
                    07:5b:93:65:33:a6:0e:61:7a:b7:1a:aa:95:15:f3:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:24:36:1C:F1:F9:4C:EE:36:39:2F:25:64:C4:DA:66:3B:CB:FE:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66822048-ca7a-324f-965b-8a42e8e96113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.210.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:e1:5e:4a:db:db:55:14:bd:3e:2c:b5:47:5b:5c:be:1e:
         88:4e:2b:94:64:a8:f1:5e:b0:d2:9f:0c:c9:2a:6e:69:6b:7b:
         3f:9c:7a:f5:69:50:19:66:3a:83:7b:5c:a5:b0:6b:d5:4d:4f:
         9e:41:a5:a8:d5:d1:bb:92:fe:c1:d6:19:b3:5a:89:28:8b:e8:
         45:49:e8:5d:1d:03:b0:94:ea:c4:26:39:6a:27:51:a1:7b:72:
         0f:4f:c7:49:85:d4:76:fc:82:51:f2:a4:5d:40:65:d3:3b:02:
         32:8c:d9:b9:84:43:ab:10:59:db:bc:3e:76:08:b9:c1:cb:bc:
         7f:ef:96:84:49:9b:ca:20:92:a7:ad:5a:e8:a2:eb:75:b0:8d:
         10:2b:ad:6b:38:15:9a:7c:33:0e:a6:b4:f0:6b:56:91:41:8a:
         c7:a4:e1:d9:9d:06:b9:3c:f5:cb:68:5c:0a:b8:95:c1:b0:29:
         4a:5f:1d:b0:c1:10:e9:8b:81:53:90:81:a9:0d:4b:44:2e:88:
         e6:80:16:1a:aa:5e:d4:f5:db:e5:ce:71:ec:3f:46:e7:b6:de:
         24:11:2c:8f:4a:4f:02:63:76:81:87:fb:bf:04:e9:5a:a9:0d:
         e7:b8:f0:c1:6e:de:4d:01:bf:00:10:86:1d:c0:0e:31:81:c5:
         cb:7d:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:56 2026 by rpki-client