Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1525ac41-5190-33fb-890f-cd7a82382851.roa
File:                     1525ac41-5190-33fb-890f-cd7a82382851.roa (raw, json)
Hash identifier:          zVNbe04Vq2zfvOF8KL+AxqY8h3xUUrNzX+y0tkZd6E8=
Subject key identifier:   18:CC:93:43:B8:01:17:B4:3B:6C:8C:0B:EC:5B:61:9E:CA:8A:B8:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6AAA9AB97A6D059F243C1148
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1525ac41-5190-33fb-890f-cd7a82382851.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        97.216.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9a:b9:7a:6d:05:9f:24:3c:11:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=86753416-86b2-479f-a665-0e81ae6e1e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:09:5a:22:27:3c:8a:ed:34:91:97:40:7a:60:
                    c0:65:c4:a6:f1:ce:f3:f2:82:3f:a9:60:d7:8e:ea:
                    21:67:1e:b8:43:e3:20:9c:56:b7:2f:19:f7:ee:d3:
                    23:d8:ab:0e:74:60:6f:5b:11:3c:ca:e7:65:04:b0:
                    35:07:69:cb:ad:d3:bd:08:85:cf:17:fb:d7:2c:84:
                    5e:e5:d9:0b:52:e4:c4:75:0b:43:9a:97:e1:89:fc:
                    d4:80:21:85:12:c4:c5:e4:20:f2:85:97:6b:70:6f:
                    62:f2:8c:ad:26:7a:0f:a7:e2:82:5e:da:9a:c9:c6:
                    dc:e4:dd:d6:d7:db:31:23:f3:f7:7c:c8:12:d3:08:
                    67:0c:68:c9:f2:40:e5:9f:85:8b:e5:9b:5c:2a:fe:
                    d8:4d:22:e7:4c:11:81:c2:05:80:84:cd:e1:4e:c1:
                    eb:0e:25:39:9b:7f:2c:9e:ad:7c:20:5d:a2:0a:90:
                    e5:78:9a:14:f1:27:ad:9a:cc:09:b2:54:a8:98:d1:
                    6a:6e:9a:da:97:73:10:66:f5:f0:50:66:1b:3c:bc:
                    59:f3:75:fa:74:4d:4d:56:69:9c:80:bc:e9:04:de:
                    4d:80:30:53:1e:f7:0e:73:17:23:f4:7d:35:79:3a:
                    a8:5e:2b:72:b9:03:62:99:d3:45:ab:8a:04:05:2c:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CC:93:43:B8:01:17:B4:3B:6C:8C:0B:EC:5B:61:9E:CA:8A:B8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1525ac41-5190-33fb-890f-cd7a82382851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.216.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:08:fe:55:fa:7a:51:d3:15:1c:77:b1:48:5d:fa:5b:9a:
         c0:4c:4e:43:ab:45:da:20:02:b8:43:24:7d:2f:16:8e:87:ee:
         75:4b:80:a7:84:5d:ca:da:bd:f6:63:e1:ee:a5:a1:35:8f:47:
         38:4e:19:17:17:d5:02:36:c4:38:c0:82:16:b6:f4:f3:74:16:
         48:f0:3c:a8:08:f8:91:f8:2b:61:9d:33:bc:4f:d9:07:3d:af:
         08:57:8e:2a:5a:8f:f3:92:0e:01:5e:44:36:1e:e7:da:8a:8e:
         69:48:6a:b3:6f:59:99:54:2d:1d:9d:74:ee:28:a4:f4:8b:e4:
         ee:bf:d9:d5:50:ba:8a:8a:2f:92:18:e9:e5:c0:83:ed:06:95:
         a4:93:92:16:0b:96:9f:57:b7:cc:6b:67:fb:4b:ba:b6:c4:01:
         e3:6a:75:09:7c:52:f2:94:2e:f5:2f:0d:ed:dc:e7:82:b8:d3:
         a3:2e:64:b6:3c:47:3d:87:24:a5:c1:17:d8:45:64:f1:66:f0:
         9d:b1:dd:8b:41:23:a3:ff:5b:60:94:6e:0b:c7:12:2a:c5:54:
         63:62:67:ab:0b:89:cd:49:f9:c3:0a:8c:da:48:56:37:a4:9a:
         08:45:c5:40:b1:76:db:5b:df:d0:76:e5:bb:45:82:1f:da:e0:
         22:3c:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:20:28 2026 by rpki-client