Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db8c6e8a-270a-31fb-a5e7-688d5e868696.roa
File:                     db8c6e8a-270a-31fb-a5e7-688d5e868696.roa (raw, json)
Hash identifier:          yMFcLu0MnPRyRSmN9FepCcYlbhmH0GZ09EZ4cbSnNZk=
Subject key identifier:   87:58:06:8A:6C:8F:DB:A4:CF:6A:68:17:FF:CE:5F:50:4F:81:51:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E8B24FAE0374F2491AC73C840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db8c6e8a-270a-31fb-a5e7-688d5e868696.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        97.210.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:fa:e0:37:4f:24:91:ac:73:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=d050ab28-0c82-418c-a64c-bce963d63ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:7b:5e:1a:24:89:4c:9b:e5:76:04:47:df:
                    b3:53:e7:ac:5a:02:0a:53:96:d4:2a:44:2f:03:cb:
                    8a:fc:f7:a0:40:3c:15:df:a5:39:62:ed:6e:8d:4f:
                    f6:2a:f5:76:9a:2f:45:0e:af:ab:24:b7:7b:ea:e4:
                    96:11:73:72:93:11:c8:17:61:da:f1:fb:ec:f4:b3:
                    1c:0c:37:62:7c:c6:83:29:77:06:ce:45:3c:90:07:
                    b3:8b:2d:a7:bd:33:64:05:00:c4:ea:5f:77:6a:89:
                    83:b9:b1:16:41:de:e9:83:52:94:8d:a9:dc:0f:f0:
                    67:c2:e2:32:22:9e:45:07:90:1c:c0:e3:75:b3:be:
                    91:0f:9f:40:0e:e0:b1:06:da:0b:9e:ee:dd:1b:6d:
                    15:31:70:4d:51:00:3c:c5:7c:63:ff:a0:ad:1a:cc:
                    51:2e:ed:08:84:3b:ec:bd:6c:c3:ae:d4:2d:6f:76:
                    6e:30:66:6e:19:ac:2c:8d:da:ca:25:aa:a1:ec:f2:
                    c4:f7:44:36:9b:19:e8:1f:42:05:3a:48:9e:f0:b5:
                    47:ec:d2:56:8f:31:9e:b4:52:6c:5b:89:57:48:c8:
                    25:70:5e:5d:d3:07:01:d6:ff:71:91:59:c5:38:77:
                    ac:07:df:f0:32:89:84:93:d0:11:78:94:3f:89:c6:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:58:06:8A:6C:8F:DB:A4:CF:6A:68:17:FF:CE:5F:50:4F:81:51:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db8c6e8a-270a-31fb-a5e7-688d5e868696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.210.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ae:c9:04:cb:6c:ea:17:6b:a2:d0:7b:30:95:18:ee:e9:b8:
         74:24:14:ac:8c:ce:56:aa:02:de:5f:9b:04:6d:bb:5e:c5:82:
         5c:cb:cd:cb:95:5a:44:f2:29:2a:e5:be:37:19:df:eb:75:15:
         94:ba:0e:c9:13:b9:b2:83:9d:db:89:45:0f:98:4b:ea:52:d7:
         61:4b:5a:89:b5:b8:e2:c0:2f:e6:26:e2:fc:b8:01:b0:7f:ec:
         92:5f:42:51:a0:af:60:18:4a:fd:a6:3b:a5:9d:50:93:52:97:
         7c:48:4f:ef:79:cd:61:47:48:73:a8:de:d7:88:b9:3b:b8:8f:
         b7:7c:44:67:eb:23:80:8f:d2:36:80:43:46:d4:c9:9d:2f:f0:
         6b:cf:c0:0a:76:20:8a:2d:f3:32:7f:1c:03:94:08:b2:13:da:
         f7:0b:ae:b9:09:00:ba:fd:1d:04:12:c4:5c:54:74:65:b5:5c:
         9d:d4:3a:e5:8a:fa:b8:15:d6:c5:6e:10:ec:61:ac:57:55:7b:
         75:57:fb:6b:00:7c:03:ea:a9:90:fd:10:a2:28:e1:d2:45:ff:
         15:89:43:91:d5:b7:17:02:59:f5:70:65:eb:80:c8:2c:79:c2:
         2e:d1:32:25:3d:1c:2e:4c:ad:c8:4d:77:a9:04:dc:9e:1d:41:
         8f:54:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:23 2026 by rpki-client