Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/230e4ed9-1f71-3c63-83b9-c85a08699253.roa
File:                     230e4ed9-1f71-3c63-83b9-c85a08699253.roa (raw, json)
Hash identifier:          hYrJv+FSqVSHPTAZ9HqI7wTBju9DY902fZYytTGVszo=
Subject key identifier:   4C:EE:85:F7:45:3C:44:B2:A4:B8:18:34:30:AB:AA:F8:13:EB:2E:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F940DB8329301CEF7BA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/230e4ed9-1f71-3c63-83b9-c85a08699253.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        97.186.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:94:0d:b8:32:93:01:ce:f7:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ff6958c5-152f-4903-84ef-e484993fe62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:19:e3:e3:10:66:39:1b:31:55:c6:17:4a:
                    34:18:19:97:b6:ed:34:28:64:1d:15:3c:f7:32:59:
                    44:5c:cb:96:9c:e8:ef:9b:39:a5:79:04:1a:10:c8:
                    af:f9:67:a8:f6:10:46:47:c9:86:85:9e:ed:cd:c7:
                    13:07:bf:85:e2:07:17:e7:53:db:49:ca:04:a2:ee:
                    15:73:54:04:78:96:36:55:ce:c6:f2:78:c2:7a:e7:
                    c6:08:05:87:5b:09:57:9e:d3:68:02:5c:06:ba:78:
                    e8:9c:1d:e8:b5:9b:0d:5d:b7:ac:37:82:9c:a7:36:
                    14:90:cc:2f:04:e3:e7:35:37:5f:be:2a:7b:4b:a6:
                    f6:ec:1e:92:4e:26:95:d2:b6:bf:9e:b5:86:41:c9:
                    19:ca:1f:ec:7b:f5:12:76:cf:87:1b:7b:28:14:cc:
                    45:2e:6f:f1:06:14:6f:8d:ad:59:20:ca:56:bc:da:
                    85:8c:f0:fb:e6:f0:24:f0:73:e7:a1:8a:b4:87:92:
                    f2:f9:aa:f0:a9:50:2a:0e:d6:a3:50:0a:eb:c9:1f:
                    02:16:4d:dd:7d:8c:4c:8b:3d:62:dd:cb:8b:dd:2b:
                    aa:16:d8:5b:64:4e:d0:ff:9f:df:65:23:a0:44:5b:
                    04:39:53:b5:2e:ab:fd:f4:38:3f:f8:b5:71:08:99:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EE:85:F7:45:3C:44:B2:A4:B8:18:34:30:AB:AA:F8:13:EB:2E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/230e4ed9-1f71-3c63-83b9-c85a08699253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.186.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:e2:d1:53:64:2b:3e:31:67:b3:94:fc:a0:7b:e3:bc:52:
         3e:57:ca:74:88:ab:34:13:33:32:7a:49:bd:20:50:23:21:27:
         a6:2f:51:9b:e7:66:53:a8:9c:dd:b1:58:fd:ef:da:ec:51:65:
         ee:1c:a5:50:04:77:98:6b:2a:cf:e8:1a:ef:db:7b:02:74:4a:
         3c:0a:84:7e:c9:65:eb:10:69:31:db:2b:c9:2a:27:a9:9f:61:
         92:cf:e1:51:6e:df:bc:49:c2:0e:37:42:51:c5:44:f1:a0:44:
         3b:95:0c:23:a4:78:65:ba:33:f2:2a:e2:82:ed:d1:40:be:47:
         5c:39:15:f8:dd:7e:ca:1b:37:04:4b:9d:42:20:d5:ef:04:1d:
         d3:e7:dc:ff:a7:ca:e2:4f:0a:32:c1:5f:d2:9c:03:75:10:df:
         a3:c5:8a:5b:4d:18:60:bd:79:04:fc:92:2e:e7:d4:46:be:3e:
         c6:8e:fc:84:d8:38:61:6f:9f:e4:dc:11:2a:ff:e8:22:9f:67:
         87:50:30:ac:a4:d4:64:39:f6:d2:fc:c6:f5:86:af:1d:c2:33:
         76:12:1d:2b:ed:c4:68:cc:95:5e:5d:e2:c6:7a:51:cc:22:f2:
         0f:69:c3:93:ad:0a:73:c1:bf:fb:48:88:d2:ec:48:45:97:83:
         ad:e8:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:15 2026 by rpki-client