Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43005aa-8e40-3f0b-b26d-95cb53a14a22.roa
File:                     d43005aa-8e40-3f0b-b26d-95cb53a14a22.roa (raw, json)
Hash identifier:          UsWRrf15NPJRscrjWsDw4/3PUAl7j3xXeow/yc+swMw=
Subject key identifier:   C8:57:14:61:8D:2B:8C:7D:30:2B:2C:83:78:72:99:D6:89:2F:D7:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49864B21D4987CF135350200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43005aa-8e40-3f0b-b26d-95cb53a14a22.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.200.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:4b:21:d4:98:7c:f1:35:35:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e66bfe9e-bec9-4d1e-8085-9d4879cbf375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e7:36:ae:42:b4:99:7b:34:de:51:89:3c:b9:
                    ed:fb:72:0f:c3:35:7a:00:e8:62:2a:5e:4a:1c:55:
                    97:b8:c6:90:ba:bc:38:9a:85:9f:ae:dd:ce:03:6c:
                    60:54:73:9c:53:db:ac:33:39:76:4f:2f:c2:5b:39:
                    85:44:1c:a1:5a:54:f0:f5:6b:ea:38:9d:6a:9e:75:
                    46:07:68:21:73:5e:23:87:2f:f0:8b:e3:8b:5c:c3:
                    55:fa:a5:6e:07:72:16:a7:97:b0:11:df:39:12:7b:
                    eb:e6:22:b0:a3:05:c6:95:1e:96:26:ca:a8:c0:77:
                    9e:d4:33:5a:9d:db:9d:1c:c2:55:48:f4:ac:f7:51:
                    9a:a1:4f:8b:36:bc:f2:3c:a1:ad:8f:3a:a9:f7:66:
                    00:f8:f2:01:2f:3d:c2:ce:1a:b6:c1:8b:b7:70:6d:
                    01:97:01:de:ad:0b:20:84:26:ee:2a:e4:80:c1:a9:
                    66:9c:e8:fb:52:97:62:fa:40:52:cc:c8:c6:34:87:
                    e9:34:d8:d8:87:7e:98:e5:8a:c9:1c:84:2c:45:69:
                    6e:44:d5:e0:f1:46:f8:16:20:95:29:c7:b2:62:68:
                    ea:cc:9d:1a:d0:90:4a:a9:01:2b:ac:74:67:83:19:
                    89:b6:fb:8e:37:ee:56:4d:a7:2c:61:7c:a0:eb:f3:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:57:14:61:8D:2B:8C:7D:30:2B:2C:83:78:72:99:D6:89:2F:D7:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d43005aa-8e40-3f0b-b26d-95cb53a14a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.200.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:62:d5:bb:b7:1d:19:44:1a:81:8e:9f:d4:bb:bf:ad:cb:f2:
         83:18:17:fa:0f:c1:75:a0:1e:b6:7a:92:61:07:10:68:54:9d:
         5d:d9:33:25:93:55:50:02:22:3b:fe:f2:ee:6b:41:e2:57:3a:
         4f:a7:f5:c6:4f:ca:34:a8:06:86:01:fe:6b:9f:9a:c8:ee:b3:
         db:1a:98:5e:ad:e2:c5:e6:aa:ca:1b:03:5f:65:a8:be:55:ac:
         20:6a:06:99:70:05:b1:19:4a:4a:a4:56:e6:f2:14:56:0a:40:
         7a:95:12:a1:3b:fe:29:8b:95:71:7b:b9:03:f7:89:ad:ee:c1:
         3a:ff:e9:34:69:ca:c0:e7:ce:28:b2:51:32:66:72:2f:03:4f:
         96:5f:c4:72:be:75:18:9a:9a:b4:05:de:35:87:65:ee:98:79:
         af:f1:57:79:fa:cb:a8:ef:b2:09:69:bd:ae:de:39:e5:c8:43:
         bd:43:1e:b1:7e:1e:ad:35:51:ce:dc:96:bf:ba:9c:d1:bb:e1:
         98:a3:95:a0:0d:5e:01:74:2b:9c:98:3d:68:36:16:e9:b5:81:
         38:f7:e6:8d:d6:25:e4:7c:cd:86:0e:8b:da:cb:ce:97:c5:1b:
         78:76:eb:13:6f:2f:1f:1a:64:37:47:be:c6:2b:4e:fb:37:54:
         13:5c:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:22:16 2026 by rpki-client