Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a80ad9f-7d1f-393b-8c6c-048df9bd5b92.roa
File:                     9a80ad9f-7d1f-393b-8c6c-048df9bd5b92.roa (raw, json)
Hash identifier:          t5Jxe/5lRvMCuKvk7MJdPhRfRrlVxlgcAAz+anOwbLo=
Subject key identifier:   C3:0C:A0:60:B9:1B:92:2B:21:19:16:34:F4:04:4B:EC:4D:A9:18:EA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06726B47B8021BE825943000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a80ad9f-7d1f-393b-8c6c-048df9bd5b92.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        97.128.0.0/9 maxlen: 9
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:6b:47:b8:02:1b:e8:25:94:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=36e720e7-2e5f-4dac-8176-705596c88516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7e:84:f2:21:80:83:c3:2e:4e:31:ea:f4:dc:
                    db:ce:d7:1a:b5:b9:db:f8:b7:bf:4c:e0:17:40:a0:
                    30:c2:66:74:89:30:b1:82:42:cc:d3:a8:11:34:37:
                    9d:35:07:c3:1c:0b:ae:ec:0b:13:82:8a:1b:2a:04:
                    96:c4:57:bd:a3:98:70:6e:32:99:74:1d:48:b5:be:
                    75:0b:f3:4e:ed:5e:a5:d6:e5:11:fd:b2:40:5e:3a:
                    2f:49:00:3e:fb:af:de:4f:0f:4f:57:47:bc:d6:00:
                    32:44:f2:91:fc:a2:e1:fb:22:d6:74:f9:cc:a6:41:
                    93:fa:9f:ee:0b:1e:9b:93:ab:a2:06:91:25:40:db:
                    c3:b2:7f:1d:86:32:03:94:33:00:6c:91:1c:0d:00:
                    5e:aa:ec:b2:ea:e0:02:dc:73:01:90:2d:12:7d:d0:
                    25:fe:4d:87:ae:50:65:54:34:27:68:b8:67:99:bc:
                    e9:ec:1d:79:ba:e6:0c:3a:24:98:1a:b6:5c:7c:71:
                    01:33:a2:92:e3:70:a5:43:cf:6f:c1:2e:f5:b7:7b:
                    0f:1f:ca:f9:d7:8e:c6:07:a0:fd:bd:e7:fb:ce:5b:
                    02:bf:bf:86:f1:4f:2a:d4:a0:a6:dc:6a:52:36:c3:
                    35:bb:58:df:b5:fc:11:c5:10:c8:0b:c7:85:2c:aa:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0C:A0:60:B9:1B:92:2B:21:19:16:34:F4:04:4B:EC:4D:A9:18:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9a80ad9f-7d1f-393b-8c6c-048df9bd5b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.128.0.0/9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:09:45:66:23:d8:38:e4:ff:f8:57:78:31:0a:b7:52:9c:b3:
         c8:07:24:25:48:6f:21:75:81:c1:95:1b:14:d6:1f:ef:44:d3:
         1d:bd:2a:a3:bb:98:d4:70:12:9f:22:13:ef:9f:c0:8d:43:52:
         25:ab:a8:f1:bb:0f:41:2b:e0:b3:9c:d8:26:b8:06:81:93:d4:
         4d:39:94:96:f4:5d:fe:8f:0b:7f:a6:9c:c2:30:c1:9e:f3:97:
         f5:80:cb:bc:57:34:e5:d6:ba:1c:70:fd:e9:ad:15:5e:74:f5:
         94:f9:1c:14:56:5b:92:5d:2c:d7:2e:75:cc:bb:c8:c4:ae:55:
         65:5d:1d:5e:8a:30:ae:52:86:dd:fe:ee:d1:32:e2:b7:99:b8:
         49:1a:76:9f:da:e7:3b:90:31:fb:24:40:3a:2b:41:89:55:8a:
         dc:1f:15:e4:c9:ba:bf:22:53:35:6a:e8:b1:47:2c:18:ce:05:
         56:6b:64:c2:43:a1:7c:aa:4b:a9:d1:24:6b:6d:3f:d0:db:e8:
         e5:0b:51:73:a9:9b:dc:42:bd:2c:a7:eb:43:d4:15:ec:b0:c8:
         f2:df:94:45:ba:72:b5:20:12:1f:0f:21:72:da:cf:bc:cc:09:
         0d:af:f5:0a:11:13:c7:59:bd:d1:1f:5e:23:1f:31:45:ba:30:
         06:91:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:14:09 2026 by rpki-client