Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b535acaf-b969-396c-9876-287fb9ceef92.roa
File:                     b535acaf-b969-396c-9876-287fb9ceef92.roa (raw, json)
Hash identifier:          3q/U4Ny2CnokpH4f74umd7F56IKTPIT23zCqlcl0BJU=
Subject key identifier:   17:24:A6:83:63:29:FF:8B:66:5F:57:FF:32:C1:1A:8B:B5:A6:5C:39
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4C3D58750AAE2DA9DC3CCD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b535acaf-b969-396c-9876-287fb9ceef92.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     6167
IP address blocks:        97.213.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:58:75:0a:ae:2d:a9:dc:3c:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=150cff12-d1fd-45d1-9fd3-4a8bb62e7957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:39:6a:15:13:4d:99:a1:14:1d:98:1c:d2:
                    c5:23:78:75:84:59:ac:fe:36:42:f9:dd:17:42:3f:
                    1d:6c:e2:18:68:4b:af:fb:59:80:cb:70:51:12:fe:
                    a6:9c:b0:44:99:77:9a:43:6c:33:3a:77:c3:6a:02:
                    81:48:7d:9e:95:fb:23:90:1c:3d:cb:47:1e:ba:64:
                    d0:7f:e9:30:3c:a1:2f:48:5c:bf:31:b1:a8:ef:5e:
                    f6:b9:eb:06:74:2b:53:b2:3c:57:9d:2a:c2:4e:aa:
                    fc:78:e0:88:68:7f:75:1d:a3:e1:4c:99:17:34:6e:
                    07:ce:08:15:93:a5:53:f4:c2:91:52:15:1a:e0:bb:
                    66:96:59:9c:91:d4:0c:23:80:a8:f6:be:92:7f:65:
                    23:41:91:f6:c5:17:26:6b:4a:51:ea:4b:65:af:11:
                    fb:82:f5:11:19:66:a7:09:b1:ca:4d:35:c7:88:0a:
                    06:46:da:00:2e:96:ce:20:e2:a5:2e:c9:83:9e:46:
                    ce:b6:fe:75:32:70:cb:c3:5f:58:ba:d1:5f:c2:ae:
                    88:d2:e7:34:69:fa:fd:51:63:ab:40:96:b4:a3:fc:
                    59:d3:a3:89:78:93:0e:ac:4a:e3:6e:44:6c:81:11:
                    66:b2:0c:88:4b:d9:72:81:c5:ed:2b:cd:f9:90:62:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:24:A6:83:63:29:FF:8B:66:5F:57:FF:32:C1:1A:8B:B5:A6:5C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b535acaf-b969-396c-9876-287fb9ceef92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:cd:5a:8e:60:bf:25:69:f0:6b:dc:8b:16:01:cb:d7:98:
         fd:60:5a:ce:7c:ac:52:ef:40:44:22:d3:e8:15:1d:47:76:36:
         07:d5:a6:6c:fd:ec:55:3b:8c:3c:0f:d0:ab:75:8b:13:e6:91:
         f2:67:4a:70:05:3b:2b:a8:e8:dc:ad:20:3a:56:86:61:98:c4:
         34:37:70:21:07:28:53:2e:31:c6:08:d5:9f:c2:7b:34:67:e0:
         d7:49:fe:2e:b5:3b:53:4b:25:23:5f:77:75:95:0c:15:82:cb:
         82:1e:5d:6b:ba:49:9a:b4:bb:2b:6b:b8:ee:b6:b7:3b:2b:c1:
         2c:b0:a4:61:fb:13:dd:75:e9:4e:73:ab:19:3e:f8:78:28:71:
         30:01:49:2f:cb:90:63:0e:93:6f:c1:45:bc:b5:26:0b:05:7d:
         78:0c:44:95:50:68:d6:6a:cb:b4:29:a3:d6:cc:31:60:22:63:
         ec:ed:c3:c6:a3:87:70:6f:94:21:90:0d:2a:d7:99:fd:1e:54:
         c4:7f:86:44:62:f4:31:c7:44:30:6e:30:5e:fd:e3:2d:07:af:
         6e:66:d2:be:38:ff:37:61:92:70:1d:00:c5:64:48:d4:9e:15:
         01:e3:cf:9c:d6:59:a2:b8:9b:e8:b8:20:17:ec:19:10:6a:f6:
         9d:3e:2e:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVh1Cq4tqdw8zYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
MTUwY2ZmMTItZDFmZC00NWQxLTlmZDMtNGE4YmI2MmU3OTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7I5ahUTTZmhFB2YHNLFI3h1hFms/jZC+d0X
Qj8dbOIYaEuv+1mAy3BREv6mnLBEmXeaQ2wzOnfDagKBSH2elfsjkBw9y0ceumTQ
f+kwPKEvSFy/MbGo7172uesGdCtTsjxXnSrCTqr8eOCIaH91HaPhTJkXNG4HzggV
k6VT9MKRUhUa4LtmllmckdQMI4Co9r6Sf2UjQZH2xRcma0pR6ktlrxH7gvURGWan
CbHKTTXHiAoGRtoALpbOIOKlLsmDnkbOtv51MnDLw19YutFfwq6I0uc0afr9UWOr
QJa0o/xZ06OJeJMOrErjbkRsgRFmsgyIS9lygcXtK835kGLmzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBckpoNjKf+LZl9X/zLBGou1plw5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjUzNWFjYWYtYjk2OS0z
OTZjLTk4NzYtMjg3ZmI5Y2VlZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdXIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVVzVqOYL8lafBr3IsWAcvXmP1gWs58rFLvQEQi0+gVHUd2NgfVpmz9
7FU7jDwP0Kt1ixPmkfJnSnAFOyuo6NytIDpWhmGYxDQ3cCEHKFMuMcYI1Z/CezRn
4NdJ/i61O1NLJSNfd3WVDBWCy4IeXWu6SZq0uytruO62tzsrwSywpGH7E9116U5z
qxk++HgocTABSS/LkGMOk2/BRby1JgsFfXgMRJVQaNZqy7Qpo9bMMWAiY+ztw8aj
h3BvlCGQDSrXmf0eVMR/hkRi9DHHRDBuMF794y0Hr25m0r44/zdhknAdAMVkSNSe
FQHjz5zWWaK4m+i4IBfsGRBq9p0+Liw=
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:16:45 2026 by rpki-client