Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7f530eb-81da-36f2-a6c2-365e0e827314.roa
File:                     d7f530eb-81da-36f2-a6c2-365e0e827314.roa (raw, json)
Hash identifier:          oYLzIPxVSOfkGbwSog01DGy7jC7gIHuEoTT2jvCfD/w=
Subject key identifier:   B8:38:F3:0A:37:73:01:DC:5C:FB:3E:0A:CC:B2:93:6C:7D:75:07:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E94EA84C13C96569421982780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7f530eb-81da-36f2-a6c2-365e0e827314.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        97.199.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:84:c1:3c:96:56:94:21:98:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=36f4b589-c447-4c78-b2bf-467d1392163e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:aa:ef:eb:77:13:74:43:bc:b6:34:67:08:
                    95:c5:30:27:c7:57:bb:40:20:f8:c9:4f:d2:b3:28:
                    1e:ca:92:29:f3:98:aa:0f:93:4d:05:e2:28:13:73:
                    12:b6:61:a9:98:5d:61:bd:0f:ce:06:2f:ef:30:03:
                    35:01:b1:41:0d:2c:a6:86:bb:db:1e:87:e2:8c:df:
                    5b:bb:ec:d7:6a:3d:04:14:1f:ba:4f:29:3d:09:1c:
                    39:f7:2d:73:66:c8:5b:2b:58:e4:b0:fd:8f:44:5e:
                    15:7a:db:29:52:ae:7c:b2:23:12:53:04:ae:a4:19:
                    f2:3b:04:00:24:3d:a8:9e:ca:07:e5:ad:c6:98:bf:
                    ca:96:1a:7d:c7:aa:5a:e7:5c:0a:ca:f1:89:e5:d3:
                    68:8c:2f:59:90:53:7c:2c:13:58:06:e5:23:68:f0:
                    b7:e4:c5:39:f4:9e:aa:ab:72:de:f4:23:5f:85:46:
                    ba:3d:5b:f8:73:74:95:32:85:17:45:ea:82:57:0a:
                    73:ca:0e:de:f3:84:e1:6b:de:61:56:b1:1d:aa:2f:
                    d1:b1:fc:8f:6b:9f:b9:e1:dd:b5:8d:5c:d3:1f:20:
                    e0:0b:bf:da:3f:aa:11:e1:a7:91:06:0e:f5:5a:5b:
                    a8:e7:fd:b6:44:64:08:01:35:22:80:ec:84:9e:95:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:38:F3:0A:37:73:01:DC:5C:FB:3E:0A:CC:B2:93:6C:7D:75:07:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7f530eb-81da-36f2-a6c2-365e0e827314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.199.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b4:fc:35:8c:96:f7:6e:2c:dd:a1:68:ea:9f:78:92:cd:1e:
         76:e1:e4:4f:8f:d7:2b:a8:c4:a0:a6:5b:d0:a5:99:1d:83:67:
         3c:f6:50:0f:80:3b:3c:d6:fb:36:63:ac:e0:6f:c4:72:1a:18:
         bc:48:05:52:fe:9c:74:a6:3f:ff:96:11:00:c1:18:35:54:6c:
         8e:2d:d8:d0:e3:c4:43:9e:a4:19:27:33:13:6b:e8:b3:5c:30:
         a2:aa:e9:0d:1d:da:96:a4:b9:e8:db:98:d2:9a:02:40:4d:d7:
         be:22:73:45:e1:3c:32:be:3d:17:2d:fb:cb:84:99:16:8f:f2:
         cf:26:17:62:d5:26:a7:b2:1d:71:e8:ae:bc:36:48:f1:4e:27:
         f3:ef:6b:54:6b:41:4d:c0:fa:2e:80:ec:11:3f:d1:3c:5f:1c:
         2a:7c:a2:6d:f6:76:2c:60:eb:20:97:92:6d:d3:f6:ff:8d:db:
         ab:85:9d:75:9f:29:90:a7:97:6e:eb:58:fd:1b:4b:8a:61:e2:
         c5:26:63:90:cc:44:11:46:af:6b:37:28:99:77:28:f7:1f:92:
         ae:c0:5a:b9:1c:b7:be:33:bf:ae:d5:13:59:25:b2:0d:5e:47:
         60:7a:cd:11:c6:61:06:e7:ae:1f:c6:0d:ef:ab:92:64:cb:0c:
         f9:b1:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:10 2026 by rpki-client