Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8352118-900e-3d30-b137-38fb9ce4db62.roa
File:                     d8352118-900e-3d30-b137-38fb9ce4db62.roa (raw, json)
Hash identifier:          pobpwPscT5sbGs9U+UVb0AAQd9rOExG0TO5a0dqwAo8=
Subject key identifier:   CB:0B:A2:0E:7A:AF:F9:AC:1E:D4:F2:FD:2F:AF:75:56:98:9D:EE:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F46A7E199391F1B77D00CBCC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8352118-900e-3d30-b137-38fb9ce4db62.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.201.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e1:99:39:1f:1b:77:d0:0c:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=2fc5bdae-4113-495e-ba63-19888b2e59c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:84:e9:af:b4:e9:58:79:4f:e2:a2:86:31:
                    94:ab:de:9e:18:b3:54:d2:76:c9:f4:f2:26:7b:66:
                    78:1e:1c:7f:8c:76:50:0e:49:c3:b6:47:0d:f7:69:
                    c9:05:2b:c2:13:8e:46:28:f2:cc:47:be:ac:d5:bd:
                    72:fe:aa:e9:49:c6:84:3c:ef:e4:1b:58:1b:c9:4e:
                    80:13:99:33:3f:07:a9:92:71:64:f7:b8:cc:c3:35:
                    48:8b:53:ed:1a:65:9d:38:bd:f6:a7:cd:0f:b5:11:
                    e0:4e:da:95:d5:cc:ec:24:1b:10:c7:0c:8d:df:b0:
                    d9:8d:04:1f:a2:01:14:bd:55:7c:37:ff:65:09:b3:
                    cb:76:e4:cb:4f:1e:41:d3:06:32:57:7a:33:d8:bc:
                    95:56:63:e5:94:d3:2d:f4:57:92:d3:e6:d1:16:78:
                    b3:fc:56:c0:42:70:85:f8:02:65:f5:e8:e9:a0:32:
                    89:e9:cf:99:e9:55:10:29:3b:8e:51:4e:82:99:77:
                    bc:c2:ba:d3:4e:26:7b:42:04:3b:73:ff:33:29:4d:
                    1a:40:57:79:ac:d1:ed:1a:7f:90:80:29:33:62:b5:
                    b2:2b:f9:fe:1d:e7:28:d9:20:a0:b1:70:0f:3d:e4:
                    dd:07:7c:8b:e6:7b:bc:17:1e:f9:42:ba:0a:8d:1d:
                    42:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0B:A2:0E:7A:AF:F9:AC:1E:D4:F2:FD:2F:AF:75:56:98:9D:EE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8352118-900e-3d30-b137-38fb9ce4db62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.201.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:02:9c:c7:54:92:b4:c9:91:89:0a:96:87:80:da:09:0f:8a:
         10:0e:24:32:9c:93:81:25:92:0b:43:53:b3:e9:fe:33:b8:7b:
         07:c2:78:d5:78:4a:0b:53:b8:80:de:da:3c:82:35:65:27:82:
         4a:85:c1:ec:3d:8f:5d:d1:1e:13:95:e9:5a:d6:c1:5c:2d:74:
         85:2e:4b:8a:fd:4b:94:22:0c:d6:d0:e7:b0:29:77:46:bc:0c:
         19:9c:7e:ed:75:d2:2e:70:75:4f:6a:8c:2d:b3:77:0f:9f:6b:
         6c:bc:62:f1:f0:b3:48:8a:42:5a:73:ee:81:62:b2:75:c9:eb:
         9b:ee:cd:c1:2f:0a:fe:e2:9c:3f:12:c3:c0:52:ac:bf:4b:df:
         a3:24:2a:62:47:a6:17:0a:6f:5c:e8:0c:a3:0e:f9:c9:b1:99:
         f0:1a:ad:90:e0:1f:3b:35:c2:19:72:c8:c9:95:9a:dc:bc:97:
         e5:e6:60:3b:55:3b:37:60:21:ee:8e:25:fd:a3:1b:b9:dd:62:
         6f:c4:87:af:6e:3a:cf:34:68:59:98:cb:47:2e:e7:43:32:83:
         98:ee:d7:ca:a4:86:54:63:38:85:2d:d1:4a:d8:9d:f4:86:f4:
         cd:f4:7d:98:2b:a2:a5:b7:03:e8:64:9d:bd:85:12:ea:1c:f1:
         c6:1c:39:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+GZOR8bd9AMvMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
MmZjNWJkYWUtNDExMy00OTVlLWJhNjMtMTk4ODhiMmU1OWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu2E6a+06Vh5T+KihjGUq96eGLNU0nbJ9PIm
e2Z4Hhx/jHZQDknDtkcN92nJBSvCE45GKPLMR76s1b1y/qrpScaEPO/kG1gbyU6A
E5kzPwepknFk97jMwzVIi1PtGmWdOL32p80PtRHgTtqV1czsJBsQxwyN37DZjQQf
ogEUvVV8N/9lCbPLduTLTx5B0wYyV3oz2LyVVmPllNMt9FeS0+bRFniz/FbAQnCF
+AJl9ejpoDKJ6c+Z6VUQKTuOUU6CmXe8wrrTTiZ7QgQ7c/8zKU0aQFd5rNHtGn+Q
gCkzYrWyK/n+Heco2SCgsXAPPeTdB3yL5nu8Fx75QroKjR1C2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsLog56r/msHtTy/S+vdVaYne63MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDgzNTIxMTgtOTAwZS0z
ZDMwLWIxMzctMzhmYjljZTRkYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYclAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcCnMdUkrTJkYkKloeA2gkPihAOJDKck4ElkgtDU7Pp/jO4ewfCeNV4
SgtTuIDe2jyCNWUngkqFwew9j13RHhOV6VrWwVwtdIUuS4r9S5QiDNbQ57Apd0a8
DBmcfu110i5wdU9qjC2zdw+fa2y8YvHws0iKQlpz7oFisnXJ65vuzcEvCv7inD8S
w8BSrL9L36MkKmJHphcKb1zoDKMO+cmxmfAarZDgHzs1whlyyMmVmty8l+XmYDtV
OzdgIe6OJf2jG7ndYm/Eh69uOs80aFmYy0cu50Myg5ju18qkhlRjOIUt0UrYnfSG
9M30fZgroqW3A+hknb2FEuoc8cYcOdg=
-----END CERTIFICATE-----
Generated at Tue Oct 6 12:40:33 2026 by rpki-client