Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa72668b-9c30-37b7-9793-9e8bb144e750.roa
File:                     aa72668b-9c30-37b7-9793-9e8bb144e750.roa (raw, json)
Hash identifier:          jXR517Aw/ii1yMQe9wCyn7WVaGQ1DLu8ZvfdzUJYfd0=
Subject key identifier:   95:8E:EB:FA:B9:0B:0C:39:50:9C:C4:14:CE:E5:F9:7B:47:AF:1C:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E94EA558B1540E129E5E1EBC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa72668b-9c30-37b7-9793-9e8bb144e750.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        97.194.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:55:8b:15:40:e1:29:e5:e1:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=58a7eb59-d9bf-46c8-a3bc-cbd8a56653ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:b5:39:1c:16:d5:97:49:4d:9d:ab:d1:ef:
                    fc:a8:93:28:11:fa:0f:48:ca:e6:f0:4f:9a:aa:d5:
                    5e:08:be:fb:37:8b:37:00:7a:a4:89:9e:46:ff:fa:
                    fc:3c:ed:f7:90:17:d9:34:7a:e2:b8:2b:bf:49:63:
                    81:c6:4a:30:52:9a:18:0b:f5:63:7e:6f:11:2b:08:
                    73:d3:5a:5c:58:cf:ec:4c:1d:98:48:d0:f6:92:89:
                    61:6b:af:6b:aa:89:0d:19:93:16:d1:9b:67:b4:b7:
                    ec:09:2c:58:4d:a8:78:1e:c8:ca:3b:3a:a4:f1:6b:
                    54:3b:cf:af:40:59:0c:57:d8:61:ce:a8:7b:55:cd:
                    66:a8:cc:82:3b:a8:27:d4:7f:8f:d9:75:d7:90:05:
                    48:06:94:89:51:6d:7a:5b:06:c9:84:19:22:4a:f8:
                    aa:26:6b:99:3b:4b:4f:a1:1a:2a:b2:08:35:4a:27:
                    41:f6:69:c1:ed:a0:8f:e0:52:1c:f6:34:0c:f5:d7:
                    35:b2:27:bc:4a:0b:b7:58:ee:39:e0:da:8f:9a:7c:
                    97:e8:52:ef:cb:1b:a7:f3:77:51:cf:ae:7e:ba:f4:
                    d6:a1:ec:16:84:63:44:e6:d2:d9:9d:d5:12:57:92:
                    29:fb:cd:5c:17:5d:87:dc:b2:e7:3c:37:e0:84:b5:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8E:EB:FA:B9:0B:0C:39:50:9C:C4:14:CE:E5:F9:7B:47:AF:1C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa72668b-9c30-37b7-9793-9e8bb144e750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.194.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:0b:89:87:1a:81:06:f3:c7:a3:c7:f4:b2:bb:81:11:f6:
         f8:67:a2:41:58:2c:08:3b:d1:80:ed:55:c0:9c:43:4b:db:b9:
         f1:92:fd:7a:72:58:1d:6f:23:6f:c9:76:eb:2b:c0:38:ed:9d:
         03:a2:cb:88:2e:c1:fc:5e:8b:ec:0e:1d:18:7d:ee:a8:fc:3a:
         a2:0d:70:7e:09:21:ab:10:6b:c8:b6:00:1d:40:7e:c8:45:31:
         ae:b6:90:5b:ff:df:46:4b:5b:ca:a6:72:d0:b1:28:69:85:d9:
         a3:a6:47:6b:64:92:9d:2d:38:31:9b:df:9d:a4:eb:8e:f5:f5:
         20:84:45:3c:3e:d5:95:34:2b:e8:c3:0d:f8:ea:49:8b:38:27:
         ee:18:56:c0:4b:ed:0b:7b:9a:b9:4c:f0:fb:7b:c6:00:2e:fa:
         b3:f8:72:aa:14:e9:a7:f7:ab:b1:d9:0c:fe:79:60:35:a4:79:
         5d:eb:90:67:c8:9e:32:a8:3b:d4:2e:db:38:48:bb:c0:42:59:
         c4:e5:45:2a:e8:db:a2:4d:fd:a7:39:c9:9f:ba:16:09:f8:ae:
         8f:7f:15:55:b2:60:e0:78:fe:8b:b8:ae:4d:a2:ac:19:ec:62:
         4a:30:a4:07:45:bb:72:90:5b:c1:98:a4:b0:2f:4b:eb:f2:b1:
         3b:d4:44:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:13 2026 by rpki-client