Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96894f42-80c8-3378-95c1-27eed00479d7.roa
File:                     96894f42-80c8-3378-95c1-27eed00479d7.roa (raw, json)
Hash identifier:          xpC2B+6gZ3pgHV329hGehNEbsp9CWgMiAK7gnMFJ1M4=
Subject key identifier:   83:C1:39:DB:59:B4:21:59:2F:4A:35:77:75:7F:64:D5:99:85:8C:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F03A846DF1B132C8D7B43F180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96894f42-80c8-3378-95c1-27eed00479d7.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.250.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:46:df:1b:13:2c:8d:7b:43:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=eda3b53e-b719-4911-96a0-406ba5505897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:01:08:9d:1e:5e:e7:43:f6:0d:59:46:32:00:
                    9f:79:fd:ba:62:5f:38:58:db:94:e8:fb:95:fe:5a:
                    ec:7c:2c:0e:68:2a:91:67:62:f9:c8:d6:99:60:d1:
                    75:5f:ca:67:38:7e:8c:40:f7:b0:f8:53:d6:30:28:
                    01:7b:d3:b4:6d:04:05:f4:13:76:b6:33:61:72:e9:
                    ae:18:c4:95:91:46:f3:35:3c:8f:b9:81:2e:79:cb:
                    f4:74:9b:aa:14:92:26:91:2a:2b:d0:09:34:03:d5:
                    9c:ce:ae:d9:e6:db:5e:cb:32:9b:a1:00:30:d9:3e:
                    67:03:ee:f9:7a:ef:97:86:d9:16:f0:d0:00:58:3b:
                    25:19:69:48:2b:cb:4a:4b:a5:24:bf:f7:a7:e5:d0:
                    51:c3:9b:af:05:33:a9:ab:a0:8c:37:48:1c:1d:5b:
                    a0:61:f4:ce:1c:86:49:2c:6f:7c:e7:19:04:de:d9:
                    85:d4:fe:ed:36:23:79:5b:25:6f:b6:6f:6d:9f:2e:
                    63:55:6b:97:5c:35:b8:34:84:35:0e:2e:ce:f8:ef:
                    e8:7c:07:57:89:0b:dc:33:7f:28:25:ca:e9:49:35:
                    26:db:43:a7:b7:e1:ee:0e:a0:2f:1c:a5:5d:df:b6:
                    67:83:d2:59:cc:dd:3e:72:ba:b9:ac:36:96:15:b7:
                    a8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C1:39:DB:59:B4:21:59:2F:4A:35:77:75:7F:64:D5:99:85:8C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96894f42-80c8-3378-95c1-27eed00479d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.250.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:76:98:ec:35:bb:77:9f:7c:75:42:c6:2e:67:c5:2f:e3:60:
         1b:ed:42:17:51:7f:92:e3:b5:b4:1e:12:fa:82:2b:c0:60:c5:
         11:8c:72:b3:8a:2e:fa:01:ab:2a:5b:78:f7:d8:c5:46:fe:03:
         ce:42:4b:ac:d7:2c:e7:cf:29:0d:7e:f1:c3:c3:0e:0e:d3:7f:
         56:eb:0c:70:38:dc:d9:7d:7d:3c:cb:31:9f:39:f5:18:39:b0:
         89:3b:b1:c3:c7:f6:13:49:6b:9a:ac:22:32:eb:80:f7:a8:13:
         53:8f:ef:85:fd:9f:9b:78:ba:80:06:16:73:02:54:da:4d:e8:
         39:1a:3c:6d:f1:8c:e2:8d:60:9f:ff:65:d2:df:f9:d8:00:54:
         a8:7d:b3:38:b3:a7:d9:6d:a7:e9:06:cc:7e:7f:bc:37:c4:89:
         07:87:07:70:ea:e6:78:2f:b7:72:c2:1c:e4:d0:42:3d:45:6d:
         10:b7:4a:c5:6a:ec:c7:e3:f0:31:47:3a:8c:5a:49:24:4a:f3:
         cd:2f:ed:18:72:11:f8:46:e4:1a:fa:fa:04:b1:d6:45:e1:df:
         35:7a:e0:71:eb:25:f4:bf:38:3b:eb:38:0c:fd:a5:a4:94:8e:
         85:d4:72:a4:f1:d2:a9:50:4d:de:a7:ae:ce:4f:7f:96:82:23:
         02:25:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:16:51 2026 by rpki-client