Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e3ca2bb-d097-3556-a762-a2ea9184042b.roa
File:                     4e3ca2bb-d097-3556-a762-a2ea9184042b.roa (raw, json)
Hash identifier:          SQdgfcI9sURtgH9rBG6yOKmjjHdun4/YkgIy+tuqCbE=
Subject key identifier:   D0:46:98:3C:A1:47:FD:18:B7:E6:9B:09:81:F7:54:63:60:2E:5F:F1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117366C5CD5B889CE36EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e3ca2bb-d097-3556-a762-a2ea9184042b.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        97.211.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:73:66:c5:cd:5b:88:9c:e3:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=828230bb-82f5-4bdf-ba61-d93fd8d85532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:80:10:5c:93:a8:d8:a2:d6:3a:69:ee:c1:8f:
                    ee:be:26:b1:67:f1:fe:b6:54:42:af:e7:b2:b8:de:
                    bd:d5:7a:3e:a9:40:28:02:64:47:41:d4:9c:52:c3:
                    8d:c3:27:2a:3a:49:9c:be:b7:d9:48:d3:e2:e7:60:
                    ec:3d:29:a6:da:64:45:00:79:e3:58:76:da:48:c0:
                    fd:e5:f2:ca:59:95:cd:71:ef:8e:45:9a:61:50:fa:
                    3e:26:f9:88:74:7c:cc:af:88:b4:83:33:02:65:ff:
                    f4:5d:d9:74:5e:f1:cc:a4:7f:b7:9c:e2:0a:9d:31:
                    2e:c2:46:00:79:98:6c:ed:66:0a:87:ad:38:b2:7e:
                    b6:dc:06:22:45:ef:77:11:00:2c:09:dd:f4:bc:18:
                    ea:13:e3:4d:72:54:26:af:ea:e9:85:5c:f1:f0:37:
                    90:bf:12:f3:2c:a6:bc:c9:e6:de:e0:5c:e3:3e:c1:
                    05:51:ad:52:5a:c8:be:b4:a4:0d:8a:d4:9a:58:d4:
                    73:18:ed:c2:8f:56:ba:e7:fd:25:64:32:08:e4:c8:
                    1e:34:c3:9b:da:a4:73:4d:9e:02:9f:7f:57:b1:00:
                    d2:4c:35:77:cb:58:f9:78:08:4f:ae:24:ec:25:94:
                    ec:df:2b:62:89:57:94:86:f7:21:0b:db:cb:62:c4:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:46:98:3C:A1:47:FD:18:B7:E6:9B:09:81:F7:54:63:60:2E:5F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e3ca2bb-d097-3556-a762-a2ea9184042b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.211.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:52:d6:ca:79:85:44:e2:59:2d:8c:cd:5f:95:f9:83:b8:
         e8:bd:fc:ce:20:22:4f:cd:05:48:29:63:7d:1b:cd:c3:c5:85:
         e2:d9:2b:bd:8e:48:2c:84:92:ef:92:15:a1:36:21:e1:d2:5b:
         3e:52:b6:7e:30:42:05:73:f2:98:62:9c:b1:ce:9c:15:32:53:
         2e:15:e4:39:94:f4:bf:37:91:aa:30:c3:22:1a:aa:5d:78:f3:
         8b:2f:be:ff:77:88:bc:0a:87:49:8f:a5:a7:3b:9e:ca:35:74:
         e0:2a:64:bd:11:83:a9:29:c8:44:aa:e1:f5:6c:e1:69:a0:ff:
         e4:6a:02:76:21:20:81:c5:ca:09:23:ae:e4:f4:a4:dc:42:1b:
         12:91:24:95:8d:bf:ce:8f:7d:cc:da:5e:6d:31:3d:ac:b3:9e:
         c3:0e:2e:a2:23:3d:3d:c6:00:bd:e3:1c:ec:a3:e3:30:80:c7:
         77:5b:8e:de:20:17:99:db:e9:7f:d6:22:60:93:59:16:c6:41:
         ec:5f:4e:58:47:b5:c5:79:bf:66:7a:2b:4e:6e:6a:4c:c0:24:
         a3:03:21:11:d8:46:34:a8:d8:47:35:8f:1b:15:b3:07:82:a7:
         de:08:27:fb:f9:ac:f2:0d:a9:b3:85:ac:f2:6c:f3:a3:2c:f7:
         f0:8f:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:24 2025 by rpki-client