Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdeb9947-f3c2-3f73-995e-54cac4cbcb61.roa
File:                     fdeb9947-f3c2-3f73-995e-54cac4cbcb61.roa (raw, json)
Hash identifier:          y2HWGYG2FazWXVV60XhFyexUOqBSyZFGa6XKxO4R4I0=
Subject key identifier:   01:8E:7E:57:68:8F:FC:99:66:3B:17:EE:1D:82:18:19:4A:73:90:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F0672553E9A208E08B0B04700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdeb9947-f3c2-3f73-995e-54cac4cbcb61.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.134.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:55:3e:9a:20:8e:08:b0:b0:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=5e0f9560-5c76-4903-86aa-2bcf8f125645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:38:42:c9:b4:ba:6c:8b:e3:c0:be:60:17:
                    ae:34:22:20:b7:39:a0:99:9d:44:6a:23:4f:36:de:
                    25:17:a6:46:b4:83:30:05:5c:f6:d2:d5:d3:ab:53:
                    c8:14:89:a9:03:45:ac:34:64:1f:ae:11:a1:52:da:
                    0b:b6:c8:c6:13:dc:59:22:c4:66:ea:89:f1:6a:71:
                    38:74:db:8f:21:75:81:16:96:56:12:3a:d2:22:5e:
                    0b:ff:aa:e8:0b:6d:78:7d:e7:80:a2:a2:10:d9:f8:
                    00:7d:20:4f:c4:4c:49:b9:0b:d5:8d:f8:17:87:e2:
                    06:8f:cf:a1:7c:1a:2f:38:ec:26:be:ed:75:e7:99:
                    59:c5:45:f4:8e:ca:1c:6b:a3:34:62:84:1d:c3:48:
                    79:72:70:72:ee:5d:4a:8c:b8:2d:99:c7:ea:67:63:
                    66:c6:4c:d6:57:1f:fb:39:3a:1a:88:fc:2d:31:b8:
                    20:17:a0:83:34:79:18:1d:7e:94:03:e3:50:05:72:
                    0f:b6:b7:70:87:29:c9:39:89:f8:d6:2f:32:d0:a3:
                    d4:11:41:1f:59:0d:ba:ea:ac:9d:a1:be:44:2d:d7:
                    fa:e9:3b:b1:c1:25:5e:11:d9:1b:60:d9:b4:00:3f:
                    27:46:6f:16:89:a3:fd:45:3b:41:c3:d0:b8:58:79:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:7E:57:68:8F:FC:99:66:3B:17:EE:1D:82:18:19:4A:73:90:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdeb9947-f3c2-3f73-995e-54cac4cbcb61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.134.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1b:da:bc:e2:91:46:1a:43:ed:98:30:28:db:c4:b3:4d:96:
         e7:1b:e2:2c:e8:5f:ae:01:3b:9b:d8:b2:d3:70:79:69:27:f4:
         e9:c9:b1:8d:6e:c3:2d:5c:16:7a:ba:86:26:c7:9c:12:e8:4f:
         ad:69:cb:03:83:92:a9:dd:c3:73:dd:6a:33:18:c3:4d:5b:79:
         88:88:d3:0a:3a:29:98:e4:c6:2e:6d:a7:b4:ac:a7:11:17:7f:
         54:55:3b:ee:d0:64:26:ed:74:7c:8d:bd:ea:23:78:f4:35:c4:
         b5:2f:3a:66:97:dc:27:80:e8:00:43:82:59:3b:bf:0e:7f:a4:
         d6:63:66:bb:0c:b8:df:ca:63:45:6c:7a:4b:7e:8f:c8:4e:e5:
         80:ca:8c:28:67:bb:9b:54:c0:8f:9b:ab:fa:e5:7b:4a:ef:9c:
         8d:02:40:74:73:85:44:a3:38:06:f6:dc:f0:a5:53:88:92:fa:
         27:20:48:24:de:57:98:ea:3f:63:c9:4b:d4:22:4f:be:bc:07:
         3f:bb:f8:d1:6c:79:08:b9:14:4f:44:4e:3a:0d:f9:2a:3a:7e:
         f9:af:71:1d:61:38:0c:15:6e:ea:44:74:7f:f9:fc:fd:ae:4d:
         3e:6a:c2:15:36:b7:9a:10:45:61:dc:69:8e:76:0d:85:f0:70:
         ae:21:d3:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GclU+miCOCLCwRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NWUwZjk1NjAtNWM3Ni00OTAzLTg2YWEtMmJjZjhmMTI1NjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqw4Qsm0umyL48C+YBeuNCIgtzmgmZ1EaiNP
Nt4lF6ZGtIMwBVz20tXTq1PIFImpA0WsNGQfrhGhUtoLtsjGE9xZIsRm6onxanE4
dNuPIXWBFpZWEjrSIl4L/6roC214feeAoqIQ2fgAfSBPxExJuQvVjfgXh+IGj8+h
fBovOOwmvu1155lZxUX0jsoca6M0YoQdw0h5cnBy7l1KjLgtmcfqZ2NmxkzWVx/7
OToaiPwtMbggF6CDNHkYHX6UA+NQBXIPtrdwhynJOYn41i8y0KPUEUEfWQ266qyd
ob5ELdf66TuxwSVeEdkbYNm0AD8nRm8WiaP9RTtBw9C4WHl1NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGOfldoj/yZZjsX7h2CGBlKc5AHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmRlYjk5NDctZjNjMi0z
ZjczLTk5NWUtNTRjYWM0Y2JjYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYYZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIb2rzikUYaQ+2YMCjbxLNNlucb4izoX64BO5vYstNweWkn9OnJsY1u
wy1cFnq6hibHnBLoT61pywODkqndw3PdajMYw01beYiI0wo6KZjkxi5tp7SspxEX
f1RVO+7QZCbtdHyNveojePQ1xLUvOmaX3CeA6ABDglk7vw5/pNZjZrsMuN/KY0Vs
ekt+j8hO5YDKjChnu5tUwI+bq/rle0rvnI0CQHRzhUSjOAb23PClU4iS+icgSCTe
V5jqP2PJS9QiT768Bz+7+NFseQi5FE9ETjoN+So6fvmvcR1hOAwVbupEdH/5/P2u
TT5qwhU2t5oQRWHcaY52DYXwcK4h0wc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:15:50 2026 by rpki-client