Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8c2b2cc-5af4-3778-bf58-88b2e092a2eb.roa
File:                     d8c2b2cc-5af4-3778-bf58-88b2e092a2eb.roa (raw, json)
Hash identifier:          b473ZdgvEd9Ogn6YEYpoIRo6zrT3faN66sJ7MAyXl0k=
Subject key identifier:   04:47:8B:60:90:0E:4F:F1:F9:7F:BC:CA:2D:67:F3:D1:BE:93:47:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E74CF6DCC6CC4B54E254C7D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8c2b2cc-5af4-3778-bf58-88b2e092a2eb.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        97.251.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:6d:cc:6c:c4:b5:4e:25:4c:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=19bae5f2-3a0f-4191-a1ec-985c3d70c2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:fe:74:e5:63:14:c2:dc:14:78:ef:ff:95:
                    25:b6:aa:2c:3a:72:16:ef:89:37:b3:5a:53:9a:5c:
                    29:23:9f:3d:81:44:43:41:22:60:2b:26:4d:c8:b2:
                    b1:5c:4d:ff:61:3c:60:7e:a2:37:93:68:c6:af:10:
                    b2:8a:83:5a:8f:53:33:99:92:d2:99:72:24:a7:e2:
                    ec:26:64:f1:ef:d1:00:15:ee:6d:c1:de:28:32:1e:
                    a7:48:60:24:52:e3:0c:2d:eb:c2:6c:d5:53:4f:81:
                    88:51:48:1b:fd:8c:6d:52:c2:fe:55:19:8f:22:db:
                    17:9c:7d:9b:93:fc:3a:10:3a:5b:22:3c:1c:7e:0e:
                    04:3f:b5:48:af:c4:0e:c1:69:b0:03:62:e9:e1:5b:
                    17:f8:aa:91:3e:bc:94:b9:e2:f2:42:58:0f:a9:87:
                    87:d6:22:26:9f:32:3f:f4:03:79:c1:a1:55:0d:13:
                    7e:db:12:ec:1e:5c:44:ae:ab:db:a3:48:0c:29:26:
                    6c:ac:c2:ac:61:d3:af:b5:02:80:c4:a8:7b:81:47:
                    05:bb:0e:d1:23:98:93:de:c3:e0:5f:10:e9:de:2c:
                    35:15:5e:7d:32:cc:1f:61:cc:ae:d2:fd:7c:bc:63:
                    60:e5:c8:46:67:17:b7:29:08:cb:8d:5f:50:df:5e:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:47:8B:60:90:0E:4F:F1:F9:7F:BC:CA:2D:67:F3:D1:BE:93:47:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8c2b2cc-5af4-3778-bf58-88b2e092a2eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.251.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:84:c1:66:08:79:cd:d5:66:6e:0a:25:25:b8:c3:bd:bd:40:
         28:26:49:3a:d0:a3:c5:5e:a9:95:2f:d5:f6:06:b5:82:a7:e4:
         5e:1a:b9:f3:06:4c:86:be:48:23:99:af:6d:08:27:0e:e9:8f:
         fc:4e:d0:af:1c:73:8b:21:a4:75:c1:30:5f:6f:61:0d:56:32:
         0e:e9:38:6b:fc:4c:6a:c1:37:07:ce:dd:df:6f:4c:ba:04:4d:
         2d:29:fd:47:9e:fb:4a:39:2e:f6:01:53:89:20:6e:39:f8:9d:
         4b:fa:40:48:dc:73:a4:f6:82:dd:07:d3:e5:f0:fe:90:db:e2:
         00:3a:76:2a:7f:97:c8:eb:f2:3d:e6:b0:1c:ac:0c:bd:d1:da:
         64:78:ec:7a:75:b4:33:8e:b1:a0:90:59:bc:c3:67:83:5d:bd:
         f9:6f:16:96:fb:cd:e7:51:da:27:b0:08:31:e3:17:c3:b9:31:
         89:b2:c8:5b:ce:0c:f1:aa:5f:7d:a7:62:05:1f:7a:54:17:f2:
         3b:37:f6:f0:c0:4a:e6:fb:ed:bf:18:7c:65:aa:c6:d6:af:62:
         60:d5:ec:4b:14:33:04:85:af:a9:9b:98:c6:8c:9f:05:aa:28:
         ed:8a:37:9a:fe:4d:d3:27:c6:d6:3a:34:b3:43:e3:de:f3:3c:
         58:d7:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:59 2026 by rpki-client