Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f070d98c-d5d0-39ac-a288-7dbd58ffa9b9.roa
File:                     f070d98c-d5d0-39ac-a288-7dbd58ffa9b9.roa (raw, json)
Hash identifier:          AlmffEVqfr+UsNzABFENYcSOjPoJnb9brZzfZn7nvVk=
Subject key identifier:   85:1F:D9:74:9A:15:08:50:BB:07:2F:C0:88:87:5D:79:6A:5E:41:63
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBA3B106CE637180C95AF3440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f070d98c-d5d0-39ac-a288-7dbd58ffa9b9.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        97.239.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:10:6c:e6:37:18:0c:95:af:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=2363cfb6-c6ad-4d0d-9f68-d982901ce68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:19:e7:7c:3b:bf:7a:f5:90:db:16:16:01:
                    a1:b8:21:11:22:5b:fa:6d:df:39:e8:56:c7:7c:39:
                    29:d7:bc:29:12:bb:a5:14:8e:b1:14:bd:e9:27:4e:
                    3c:9b:bd:4b:fe:c7:c0:cb:b1:cb:4d:8f:11:05:d0:
                    15:f6:d9:0f:a1:cd:21:86:39:99:7f:7f:bf:8d:2d:
                    d9:33:7e:bb:32:8b:51:c3:58:74:cc:c1:0d:b6:7f:
                    5e:94:15:a7:4a:77:95:fc:2b:81:3a:4c:e4:2a:3a:
                    93:97:1c:92:03:4f:04:7c:3e:a4:08:38:83:c4:b2:
                    85:23:95:a7:43:53:bd:23:30:3c:c3:46:74:d2:0a:
                    c6:3e:23:7b:0d:e0:ac:df:a0:04:ee:c1:49:b5:aa:
                    8b:37:fb:b6:8e:5e:72:bd:d1:ff:41:bc:4b:b0:ca:
                    32:76:33:a4:fd:61:c9:b2:7e:db:6d:ab:e1:f9:4c:
                    c7:f8:9f:6b:6f:a8:bc:98:e2:3f:e7:54:f9:87:1f:
                    c5:da:1f:02:a7:43:c8:92:93:af:2b:06:49:d9:0c:
                    39:b0:d0:69:82:36:52:8c:4d:47:ef:eb:ab:f4:ce:
                    c4:61:63:71:81:41:13:2f:e9:49:c6:63:92:97:90:
                    b7:8f:3a:72:61:97:e3:5b:38:d6:97:a6:a5:b1:43:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1F:D9:74:9A:15:08:50:BB:07:2F:C0:88:87:5D:79:6A:5E:41:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f070d98c-d5d0-39ac-a288-7dbd58ffa9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.239.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:4e:df:22:91:16:f2:ba:b6:77:3d:e8:c6:f8:59:2a:49:af:
         9c:0c:35:f8:ca:2a:88:b3:0d:d4:62:98:bc:12:98:4b:3b:e6:
         21:cf:d0:ab:f4:b3:b4:7a:b4:49:df:24:41:09:5b:06:d0:88:
         6f:53:9f:ac:e3:e6:75:fa:45:4a:09:9c:e2:b9:ad:4a:72:73:
         c0:1b:90:b4:23:7e:53:fa:fb:3c:b2:09:ea:22:81:05:55:0f:
         84:88:d8:bb:34:d2:be:fb:bf:23:c6:57:b7:28:11:a5:43:05:
         e6:60:cf:6e:dd:f7:b8:b2:d9:a5:6c:08:44:c0:98:03:da:af:
         38:48:fc:5e:d8:37:13:f5:70:b2:ea:b5:e4:66:7a:38:9b:34:
         54:6f:de:d6:85:ed:61:3f:f7:c6:d1:d0:6e:e9:cc:8f:9b:52:
         c6:16:db:fe:61:60:52:dc:48:1c:73:f4:ac:85:8d:de:82:28:
         d3:7d:21:b2:36:16:76:85:7c:fd:b8:0c:ff:b4:68:56:df:5b:
         7e:88:af:88:6b:56:9c:4d:a5:68:5f:a6:d9:ee:f2:6f:7a:2b:
         41:cc:e7:be:ec:70:a2:b3:2e:c2:c8:76:de:d3:3f:58:31:29:
         a7:a7:66:f7:78:be:da:bd:81:ea:bc:5f:ab:d7:a8:82:55:43:
         41:6a:ee:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:17 2026 by rpki-client