Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/959a8e52-5833-38d4-b9f1-224d733632e4.roa
File:                     959a8e52-5833-38d4-b9f1-224d733632e4.roa (raw, json)
Hash identifier:          DXlQJl7I6gMrF1zRFp9zF/5bmtjeBVCH+MSZl7L+Zw8=
Subject key identifier:   BD:86:65:FC:D2:91:85:2F:CF:BD:95:1C:70:1E:47:E4:15:02:CE:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F0672557A3F99DCDC53B47300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/959a8e52-5833-38d4-b9f1-224d733632e4.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.134.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:55:7a:3f:99:dc:dc:53:b4:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=5a4f5d35-163e-4e84-b0fa-f3cad0aa9d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:b0:48:50:61:41:e1:56:2c:96:41:e3:f1:
                    37:b1:50:8c:4f:7b:e4:f1:6d:92:5c:8c:5f:28:6e:
                    1c:7e:b6:d4:97:82:23:f0:59:2e:72:39:d7:fc:63:
                    bb:e9:89:59:7b:ed:86:1b:58:41:68:cd:92:c1:c3:
                    de:ca:0e:4f:eb:f0:25:56:da:69:8a:da:ac:1f:5d:
                    68:d2:c7:3d:34:82:05:30:27:a4:6b:3c:5b:72:85:
                    fc:95:c6:07:70:f4:2f:a6:b2:01:8f:e2:02:cf:c6:
                    de:63:40:5b:d3:68:30:29:5a:89:ed:ca:dc:89:f3:
                    fe:45:00:20:59:8c:e9:89:61:58:d6:f0:b2:51:46:
                    8a:eb:15:c7:fd:20:0f:ea:fd:94:ea:0e:06:da:cd:
                    90:f0:c1:04:d0:cf:34:fb:c5:be:a8:86:62:c7:3c:
                    2b:3b:c7:20:a6:75:6e:2d:3f:5b:61:3f:ba:b6:1b:
                    6c:a2:79:0a:ad:76:85:f3:b2:83:3c:f7:7d:9b:39:
                    04:99:d4:c9:dc:6a:a8:4f:13:1d:a0:6b:1b:df:de:
                    ef:64:ab:ef:38:8b:0a:c2:31:90:1c:cc:28:6b:82:
                    25:ae:86:be:73:c4:ce:4c:cb:d4:47:1a:fd:e6:1e:
                    3b:dc:93:4e:5f:14:e1:c4:7c:e6:65:62:4a:49:b0:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:86:65:FC:D2:91:85:2F:CF:BD:95:1C:70:1E:47:E4:15:02:CE:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/959a8e52-5833-38d4-b9f1-224d733632e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.134.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:48:db:1c:3b:e3:1a:a1:29:df:50:e6:b0:28:ec:29:fd:
         a4:fb:6f:1e:fe:2c:46:d2:88:8c:98:8b:9c:5f:84:9c:b5:9b:
         f7:c3:7c:6c:56:14:1b:29:9d:73:b4:5e:1d:95:a9:00:01:4a:
         43:45:5f:54:26:b3:4b:97:c1:3d:02:81:e8:d6:40:64:6e:7a:
         ed:4c:1e:bd:5f:e2:b8:1b:02:9e:0f:a4:e0:15:5c:c1:4b:c2:
         dc:6a:fe:8c:82:56:19:5b:68:2c:a1:40:90:36:48:5b:d5:98:
         79:9d:17:cf:da:7e:86:05:b3:39:19:78:76:36:32:19:cc:b0:
         54:26:99:73:3a:4f:f6:dd:01:cd:12:b7:84:64:ee:07:10:a4:
         99:77:71:1c:ad:20:cf:01:5f:df:db:66:c7:7b:1a:e8:c6:09:
         cc:87:5d:f6:a8:2e:f3:13:d2:f9:a0:e8:ef:0c:5a:ad:be:63:
         b0:09:6c:55:0d:12:21:4c:fa:c3:d3:4f:8d:6f:73:70:53:42:
         60:48:62:c2:06:31:d1:8f:d9:a5:fd:1e:f8:e1:41:d5:4c:e2:
         85:52:f1:40:eb:dd:c6:da:61:f7:79:6d:9b:df:30:e0:8f:42:
         de:35:7a:13:c7:2d:f1:b3:38:4d:c7:ad:6d:c3:3d:6c:34:91:
         d6:e1:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:56:50 2026 by rpki-client