Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f39f114a-b32e-391c-a73f-3bdf431675b1.roa
File:                     f39f114a-b32e-391c-a73f-3bdf431675b1.roa (raw, json)
Hash identifier:          Go46gp6oSbiGEDPUrCvkWnnELHwjGxpYLqkxiFWKE6k=
Subject key identifier:   BF:4D:9E:C5:A9:94:5F:80:DE:F6:17:7F:09:F5:36:A6:BA:29:D4:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F067265109C6728F1BEE00A10
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f39f114a-b32e-391c-a73f-3bdf431675b1.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.187.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:65:10:9c:67:28:f1:be:e0:0a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=d4725b06-a62e-407e-bb14-448ceb2509bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:24:d9:7c:fd:8c:83:50:ff:9c:df:9c:df:
                    05:46:ec:74:a1:14:fc:a8:02:cc:1c:12:d0:9c:7b:
                    ae:d0:48:d4:02:44:de:5d:80:50:c0:94:20:fb:98:
                    69:80:41:22:4c:15:c5:8f:07:dd:33:bb:40:a7:d3:
                    d3:c6:98:7f:ea:f5:4e:35:9c:4d:14:3e:ec:24:70:
                    67:5a:f7:75:e5:bc:e3:89:3e:1f:dc:ef:5a:19:7b:
                    80:6e:7f:ea:3f:04:c6:a7:5b:1c:65:df:02:e0:ec:
                    4c:47:4e:bc:00:08:2b:ba:36:23:06:45:c5:52:84:
                    86:63:6a:3b:8b:fe:a4:6f:99:d8:c9:f0:77:d5:a0:
                    58:88:d6:ba:05:2f:44:df:ce:4f:37:15:b1:95:37:
                    9c:a5:84:b0:b0:50:4f:c0:c9:74:b8:36:4e:95:fd:
                    84:ed:58:4f:99:ac:bb:08:a0:77:a8:87:3d:2b:a0:
                    aa:d6:f9:01:24:c1:c1:1c:62:35:41:f7:36:92:8b:
                    e5:bd:b5:81:db:63:2a:ae:bb:be:50:19:54:85:1b:
                    eb:a2:a5:79:e6:53:67:8b:29:b8:fe:44:40:15:e7:
                    a6:84:f3:62:25:38:2a:d7:aa:41:b9:00:1e:0c:0a:
                    19:f7:4c:7c:42:b1:b5:de:5b:bb:40:dc:82:58:ef:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4D:9E:C5:A9:94:5F:80:DE:F6:17:7F:09:F5:36:A6:BA:29:D4:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f39f114a-b32e-391c-a73f-3bdf431675b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.187.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a7:80:c5:58:35:c4:66:7f:e6:b0:29:36:a1:22:71:f2:de:
         bf:2f:64:f9:fb:1d:a6:b0:7d:0e:b3:09:19:50:d2:68:19:72:
         e7:75:4e:f3:0a:81:8d:31:18:6d:85:df:09:79:96:77:26:2a:
         6f:4a:f9:9b:91:1c:45:35:63:87:3a:32:6d:52:39:ed:d9:5e:
         e7:83:7e:c5:26:71:6a:e7:e8:71:4e:14:ad:e9:c1:9d:5b:08:
         b7:55:c5:3b:ee:a8:21:9b:d3:2c:1a:8e:b4:6c:72:bc:83:30:
         22:52:77:3e:ee:42:10:28:43:b0:e2:e0:97:02:41:1d:6f:83:
         c4:c8:81:5d:dc:dc:cb:4c:0b:37:25:f8:d7:dd:1a:6b:8c:93:
         9f:58:8f:73:3a:ff:12:8b:06:66:e4:01:28:02:51:02:db:dc:
         33:94:2e:97:e2:ce:db:24:c2:73:65:4d:30:e7:6d:91:66:4c:
         e2:c6:3a:7d:2f:42:0b:87:35:fa:9f:39:85:b4:f5:2e:40:04:
         cb:ce:cd:e2:2c:52:5c:45:ed:9c:9c:22:81:70:84:34:50:24:
         af:28:97:60:77:c2:f6:0a:d2:e2:03:72:dc:39:e1:7a:d4:f6:
         f3:8d:0a:26:8e:56:92:b6:28:a6:c6:85:69:9a:79:d3:a4:e9:
         58:ba:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:59:50 2026 by rpki-client