Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6ddd074-3793-33a2-8007-1f5cdfaa5d4f.roa
File:                     b6ddd074-3793-33a2-8007-1f5cdfaa5d4f.roa (raw, json)
Hash identifier:          rBnoCA9izMcYH/l4hQTOD1aBbN76+8TpH3sHvzd7i64=
Subject key identifier:   E8:FB:67:CB:6A:46:52:E6:27:20:90:24:2B:70:99:C3:05:C9:04:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBBA03B2810791E7ED2E5EC20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6ddd074-3793-33a2-8007-1f5cdfaa5d4f.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        97.193.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:3b:28:10:79:1e:7e:d2:e5:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=ede09439-a037-4c36-a237-f34136ef474f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:5c:33:c5:b7:3c:e3:06:a3:8f:66:16:aa:
                    7b:60:4f:7a:1c:c8:76:90:e4:ad:d6:49:d2:ab:a4:
                    d3:64:29:91:1b:2b:a5:a8:46:79:1f:a6:49:e6:86:
                    43:02:6d:0a:d4:b5:3f:04:cc:7c:8d:c8:79:e9:82:
                    50:63:d4:94:d1:8c:4e:09:76:d0:ea:ee:43:c0:75:
                    ad:3c:8d:cc:7f:57:dd:a2:04:eb:8c:df:d5:84:d4:
                    a8:e0:94:f8:92:04:39:2b:84:66:58:b1:c0:4f:ac:
                    2d:ef:37:84:7e:4e:9e:0f:88:88:76:a7:28:50:74:
                    84:27:dd:93:36:3d:c3:6e:a4:a5:10:aa:a5:48:5e:
                    8b:ee:bd:0c:e2:04:21:44:ab:d3:5d:ec:05:33:e1:
                    d6:c1:91:ea:20:c2:24:19:78:b3:95:68:ff:38:db:
                    08:c6:e4:b5:39:fd:f9:2a:b9:74:12:4e:87:7e:c3:
                    90:b1:f9:d3:1e:0e:70:a3:b0:b6:5a:e0:06:af:75:
                    95:e0:15:6c:4a:37:a3:3b:7d:86:7f:87:7f:01:3d:
                    0f:76:0e:9e:57:16:fe:5c:e2:6a:98:8a:57:ae:6b:
                    30:89:95:97:4f:00:b4:45:85:e3:d8:f0:ae:73:c9:
                    f0:a2:cf:41:93:cc:06:ab:19:87:fb:55:5c:dd:87:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FB:67:CB:6A:46:52:E6:27:20:90:24:2B:70:99:C3:05:C9:04:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6ddd074-3793-33a2-8007-1f5cdfaa5d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.193.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:4d:26:f6:8c:0b:24:f2:1b:18:4d:17:25:65:c1:38:d6:
         bf:04:41:23:7c:53:53:da:a2:76:13:88:06:43:96:72:2d:9f:
         42:a9:9f:76:f7:d2:e6:3b:f0:ca:c6:a8:b2:44:82:0c:1b:09:
         1d:9a:ce:f3:54:f8:ac:e2:54:73:e8:ee:e8:40:1a:58:84:69:
         28:da:bd:1d:b1:36:b4:6b:9d:0a:0a:1c:a5:29:7c:fe:30:7a:
         84:0e:f9:d2:82:f0:68:4a:d9:fc:10:69:ff:2c:64:98:e4:10:
         95:d0:02:a6:ab:d1:58:4e:a4:b8:df:a0:81:f2:b0:5d:63:4e:
         53:f5:fb:0a:d9:95:a7:e4:49:0e:98:ad:93:f4:61:87:d4:23:
         1d:70:d5:b5:66:d5:41:6f:13:dd:e7:8f:37:93:32:22:ad:1e:
         a4:1d:fc:0e:b4:0b:42:1e:a8:4c:9b:5c:87:b7:f2:dd:fe:9b:
         b8:f1:9d:b3:34:fb:0a:3d:c4:1c:48:d1:91:12:ee:89:46:7b:
         34:83:a5:68:74:a5:99:56:93:b6:af:c5:29:19:0e:ba:11:5d:
         cb:e8:96:4f:0e:3d:a0:e5:ef:64:d2:92:40:a4:34:c0:4b:af:
         b1:a1:07:a6:50:f6:8b:1f:9c:a6:50:f6:05:63:ae:fd:0f:ec:
         a5:a1:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:03 2026 by rpki-client