Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/09384f35-4ec3-3a82-aaa9-cdd4591d04c1.roa
File:                     09384f35-4ec3-3a82-aaa9-cdd4591d04c1.roa (raw, json)
Hash identifier:          FzCfZLHJ0Kc4Fs2qj58yIsMXd4ttbPaAgVp5cqFHynM=
Subject key identifier:   06:62:87:D7:04:77:C5:97:AA:A5:16:A5:4E:95:EC:3D:C4:0D:83:CB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D290F522AFF5AEB212B7C2100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/09384f35-4ec3-3a82-aaa9-cdd4591d04c1.roa
Signing time:             Sat 14 Mar 2026 01:00:31 +0000
ROA not before:           Sat 14 Mar 2026 01:00:31 +0000
ROA not after:            Fri 12 Jun 2026 01:00:31 +0000
asID:                     22677
IP address blocks:        97.88.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:0f:52:2a:ff:5a:eb:21:2b:7c:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 14 01:00:31 2026 GMT
            Not After : Jun 12 01:00:31 2026 GMT
        Subject: CN=56c9e894-ebb0-4c1e-a731-9574164e137e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:81:2e:ba:fc:08:89:5c:12:03:aa:5c:ef:
                    87:c7:1c:ed:4a:35:21:66:a5:f2:0a:53:3d:4d:62:
                    5b:80:f7:76:64:a9:24:fc:66:b4:b3:83:17:2d:1a:
                    cf:0c:e3:59:24:b9:35:6b:2a:e9:59:fb:37:d6:fe:
                    3e:f8:b8:5c:b5:b0:32:c5:20:0c:d7:76:2b:4c:a2:
                    b0:2a:aa:9e:27:9d:c0:7a:09:15:86:6c:2d:4b:65:
                    7a:fe:4d:81:d5:b9:39:22:63:54:19:74:a7:60:c3:
                    9c:a0:48:27:d3:0c:7b:39:f5:06:98:0f:f8:a6:76:
                    46:45:05:4b:82:46:14:53:34:0b:76:a3:99:52:60:
                    56:66:2f:53:94:0c:38:9c:5a:12:89:d2:6b:26:a3:
                    db:fb:bc:5e:5f:1d:32:53:a0:32:c7:01:f8:cd:f3:
                    90:bd:c8:3b:db:ee:b8:1b:f0:83:41:50:19:87:d5:
                    26:46:1b:40:56:95:9d:97:d2:06:15:6f:8b:ef:69:
                    66:be:e4:4f:02:cb:99:f3:c8:2e:8e:e3:6d:18:6c:
                    e0:06:37:2c:f3:fa:fc:0a:4d:f8:3b:94:fe:5f:ad:
                    ff:0e:e4:91:09:3c:9f:b1:09:27:be:02:39:59:ac:
                    57:91:fa:6a:75:6e:3c:13:2c:6c:f9:a7:0e:fe:15:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:62:87:D7:04:77:C5:97:AA:A5:16:A5:4E:95:EC:3D:C4:0D:83:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/09384f35-4ec3-3a82-aaa9-cdd4591d04c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.88.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b6:68:a7:18:dd:69:05:0c:68:26:22:8d:ad:f6:aa:90:40:
         98:fa:3e:07:be:54:7f:b0:bc:49:fe:8f:3f:5a:80:a7:43:60:
         a6:6d:3c:dd:27:bd:98:32:2f:8b:df:f6:56:55:fb:b3:b1:bb:
         ab:bb:64:d0:88:43:b9:53:29:c9:6c:d5:c6:68:fc:94:53:51:
         e5:94:11:21:4c:8d:9e:40:c4:9b:44:20:7e:60:5d:a2:4a:b5:
         66:d8:05:ba:35:1c:75:88:ab:9d:2a:b9:e6:94:d2:91:96:a1:
         73:09:29:eb:c2:2f:fb:20:f4:5b:dc:5c:c0:e4:e7:2d:c3:0e:
         57:9c:e3:46:07:d0:79:e1:01:39:b5:cc:1d:93:b5:12:d2:69:
         b1:1b:ba:21:0b:2b:5c:ce:02:a2:74:78:d2:1a:c3:c6:12:b9:
         c1:a9:c6:ef:68:eb:02:9a:17:bc:da:4a:e9:39:6f:95:75:17:
         5c:0a:63:79:9d:57:15:bd:ac:bc:93:43:0f:37:6b:ea:6d:fb:
         26:b0:85:2d:ee:67:86:23:f0:db:c9:58:05:a9:b4:07:18:81:
         de:76:59:95:fb:f5:33:13:1c:99:99:b3:53:c5:54:3e:e7:77:
         07:3b:47:92:c2:e6:70:1c:cd:a8:a2:aa:18:ef:ce:1f:9a:cf:
         2b:0c:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:00 2026 by rpki-client