Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/127f2590-aa16-3529-ac5f-be5897bf0b7e.roa
File:                     127f2590-aa16-3529-ac5f-be5897bf0b7e.roa (raw, json)
Hash identifier:          tPNNJYe7CFng4AmJsn00MC8OcK3TGhE9pXT3AXRWYOs=
Subject key identifier:   AF:30:42:9B:A8:C6:8A:47:12:4F:CA:D3:3B:B2:FA:EB:7C:78:1B:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F84E9AFAF12B406C33400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/127f2590-aa16-3529-ac5f-be5897bf0b7e.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        97.133.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:84:e9:af:af:12:b4:06:c3:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=4a0777c4-11c6-4407-94af-7a005df24b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:89:0a:c5:79:ec:3e:76:ae:3c:83:5d:7f:a2:
                    07:20:61:a9:1a:ee:c2:07:26:69:9d:e4:86:9d:32:
                    ad:42:d3:1f:a7:a9:b7:c0:14:cb:3b:f4:8f:53:ed:
                    ef:db:cd:10:8c:8f:cd:06:44:fa:8f:c9:52:f1:c8:
                    fd:85:27:d1:82:87:37:20:d0:10:9d:05:dc:51:41:
                    44:06:af:25:52:8b:75:2d:86:f0:f7:06:b9:21:b1:
                    fa:10:6a:30:1e:2b:35:7b:b7:9a:36:77:ca:32:ff:
                    0f:44:99:6c:75:24:eb:c4:74:43:70:79:3c:50:e1:
                    f4:72:7d:f7:4d:9c:fe:de:d7:cc:32:fa:c7:a4:fb:
                    70:39:c4:5f:59:a1:d9:2d:43:7b:3e:76:75:74:13:
                    58:57:57:4c:c7:3b:f3:9d:98:9e:56:c5:f4:39:d3:
                    ce:c6:1f:73:61:d5:7b:34:bb:4e:01:19:a2:a8:72:
                    37:18:69:05:4a:80:cd:54:aa:4f:40:49:04:5b:e0:
                    dd:5c:98:fb:23:09:67:87:d8:73:3e:bf:db:c3:e7:
                    0c:81:26:c3:38:9c:dc:13:cc:61:14:ab:4a:f2:26:
                    89:4b:28:bd:69:5b:d7:e2:2d:78:37:36:1b:7a:2c:
                    20:0e:b3:3d:2c:03:ef:c8:37:4d:51:d2:ca:a7:b9:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:30:42:9B:A8:C6:8A:47:12:4F:CA:D3:3B:B2:FA:EB:7C:78:1B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/127f2590-aa16-3529-ac5f-be5897bf0b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.133.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9d:13:9f:b7:b7:41:f3:33:7c:a8:be:60:1d:bf:f6:ee:92:
         e6:a2:f8:98:b0:6e:db:5d:ed:74:5b:96:c4:39:23:d4:ed:5d:
         0f:11:ee:0e:d9:7b:a6:0e:c1:af:98:9a:89:59:d0:3e:8b:8a:
         79:a8:27:2e:74:ea:a5:98:a9:43:51:19:e1:57:24:54:66:40:
         1f:e9:9d:2a:24:7c:16:86:90:21:14:27:55:b6:13:82:f3:c9:
         5d:8a:da:18:82:a2:7f:dd:00:38:2a:60:d1:03:5d:c4:4f:5d:
         68:03:d4:a1:7a:9a:3e:c8:45:76:f3:cd:0d:e3:b0:1e:79:a0:
         bc:10:92:62:02:64:a8:69:f6:c7:b3:b1:fe:18:1d:46:f4:3c:
         e8:f8:e9:3f:17:a3:b4:02:41:56:d9:33:6b:d1:2e:ef:c8:98:
         fe:83:1e:7f:54:35:65:75:92:c1:23:6d:d1:71:c2:7c:35:c5:
         db:6d:3c:fd:58:09:30:36:54:ea:84:c6:e4:3c:fb:95:eb:56:
         51:6a:e2:cd:7e:2d:63:c2:3e:c8:25:f4:3a:ab:68:29:ed:60:
         ac:d3:5e:2e:9f:b9:8b:32:c8:fe:b6:ab:4f:62:82:98:88:47:
         44:e1:db:de:2a:72:c3:f5:89:30:b5:06:d7:e8:08:6a:6f:53:
         8e:c2:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:44:42 2026 by rpki-client