Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b5d6daf-2afe-3baf-bc66-46b648705958.roa
File:                     8b5d6daf-2afe-3baf-bc66-46b648705958.roa (raw, json)
Hash identifier:          rwvFy9SeEKwC2cquieF1GtdSipyiYKRCJm041ENl8eg=
Subject key identifier:   26:83:AF:B7:47:41:FE:56:9D:10:66:0E:CD:DA:07:B5:BF:35:91:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D2644AB388BBA2D37A28E1780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b5d6daf-2afe-3baf-bc66-46b648705958.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     6167
IP address blocks:        97.213.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:ab:38:8b:ba:2d:37:a2:8e:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=4a7c73a8-d283-461c-8cf1-edfdf937913d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:5c:f1:37:24:b6:49:40:67:c0:d6:e5:0e:
                    9a:a7:be:78:a3:81:2e:e3:93:30:1d:28:c5:0c:f3:
                    f7:ca:55:4e:17:18:db:11:bf:67:77:09:17:f2:6c:
                    9f:df:02:1d:a1:b2:d0:ed:d7:d6:67:ba:0e:45:e2:
                    7f:84:04:b9:5a:d6:34:41:66:d5:7c:48:5f:4f:88:
                    27:37:ee:df:69:70:47:6d:11:19:6a:f3:a4:68:84:
                    67:9d:60:af:01:80:be:fa:9a:2a:eb:4c:e7:8c:41:
                    6c:b0:07:86:fe:e7:a4:46:41:48:e2:ae:4c:23:fe:
                    73:9d:d7:e6:16:11:93:d6:b1:ea:7c:43:1d:cc:54:
                    13:81:c5:f9:74:99:0b:18:ba:f4:5b:ba:43:6c:9f:
                    86:65:06:3f:bb:36:01:17:ef:62:bb:ee:b8:8b:c0:
                    b2:f3:f8:15:5c:a6:e7:8e:59:3a:8a:44:9c:48:5f:
                    c2:7f:99:0a:9c:64:af:90:d9:6f:f3:68:b7:ac:80:
                    17:d6:85:96:d6:55:ce:ab:98:71:79:17:0e:86:2a:
                    a9:44:20:bd:60:10:6b:47:c6:0b:8b:5c:8e:76:6a:
                    ca:1d:ce:7a:50:3a:d5:57:48:d6:37:53:e0:fa:bc:
                    dc:cf:35:dd:69:48:0e:de:d9:f8:9e:62:68:0b:c8:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:83:AF:B7:47:41:FE:56:9D:10:66:0E:CD:DA:07:B5:BF:35:91:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b5d6daf-2afe-3baf-bc66-46b648705958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:15:ef:86:4a:e8:a2:82:db:34:11:46:a9:05:3e:b0:78:b3:
         4c:cf:0b:1d:a0:22:57:41:89:02:e5:ec:13:4e:67:3b:22:25:
         c3:34:3d:3f:2c:3d:ff:6d:6c:9d:55:27:b6:b6:0b:38:b2:c3:
         47:da:84:ea:f7:e1:17:37:b7:8c:ec:f1:fe:90:5a:13:4d:5f:
         3e:96:93:c7:7e:9b:5e:68:0e:96:56:a7:3b:16:f5:9e:78:c7:
         8e:08:31:b7:ab:ba:53:b3:f8:39:b9:71:73:47:2d:fa:a4:c4:
         7d:4b:91:a0:48:d5:21:50:ce:7a:5a:d9:76:7c:31:59:b0:68:
         5e:d0:16:64:ee:fc:a6:57:bd:c0:2b:e5:2f:c4:3a:5f:4d:4b:
         de:32:d2:a5:08:39:80:c8:0f:be:17:f6:9a:ef:6d:91:82:8c:
         e0:74:2e:db:ad:2c:ff:d2:00:ed:b6:b6:25:ef:8b:e3:70:ab:
         2a:f8:74:b4:52:15:42:40:a9:ab:f5:90:0b:ec:a4:18:04:6d:
         a4:75:e7:6f:93:9c:ff:4b:09:1e:3d:22:2c:a4:40:60:60:46:
         3c:1a:40:e2:7d:56:63:a5:58:90:c4:ed:15:49:02:55:ae:25:
         73:3c:8d:a6:82:ff:11:b8:74:9d:e3:a2:46:69:95:ed:25:fe:
         ad:a0:1d:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRKs4i7otN6KOF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
NGE3YzczYTgtZDI4My00NjFjLThjZjEtZWRmZGY5Mzc5MTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowBc8TcktklAZ8DW5Q6ap754o4Eu45MwHSjF
DPP3ylVOFxjbEb9ndwkX8myf3wIdobLQ7dfWZ7oOReJ/hAS5WtY0QWbVfEhfT4gn
N+7faXBHbREZavOkaIRnnWCvAYC++poq60znjEFssAeG/uekRkFI4q5MI/5zndfm
FhGT1rHqfEMdzFQTgcX5dJkLGLr0W7pDbJ+GZQY/uzYBF+9iu+64i8Cy8/gVXKbn
jlk6ikScSF/Cf5kKnGSvkNlv82i3rIAX1oWW1lXOq5hxeRcOhiqpRCC9YBBrR8YL
i1yOdmrKHc56UDrVV0jWN1Pg+rzczzXdaUgO3tn4nmJoC8i6nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaDr7dHQf5WnRBmDs3aB7W/NZEmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGI1ZDZkYWYtMmFmZS0z
YmFmLWJjNjYtNDZiNjQ4NzA1OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdXMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgV74ZK6KKC2zQRRqkFPrB4s0zPCx2gIldBiQLl7BNOZzsiJcM0PT8s
Pf9tbJ1VJ7a2Cziyw0fahOr34Rc3t4zs8f6QWhNNXz6Wk8d+m15oDpZWpzsW9Z54
x44IMberulOz+Dm5cXNHLfqkxH1LkaBI1SFQznpa2XZ8MVmwaF7QFmTu/KZXvcAr
5S/EOl9NS94y0qUIOYDID74X9prvbZGCjOB0LtutLP/SAO22tiXvi+Nwqyr4dLRS
FUJAqav1kAvspBgEbaR152+TnP9LCR49IiykQGBgRjwaQOJ9VmOlWJDE7RVJAlWu
JXM8jaaC/xG4dJ3jokZple0l/q2gHao=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:04 2026 by rpki-client