Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/407d8d35-1770-314b-b41f-aa95506e6ffa.roa
File:                     407d8d35-1770-314b-b41f-aa95506e6ffa.roa (raw, json)
Hash identifier:          Z2WlQN+puvLgIvWoS+UNEP+ENl2eyshdrRi7ZketkAM=
Subject key identifier:   B9:2C:FF:41:5E:52:C5:68:23:21:72:04:E5:33:0E:74:88:14:DA:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6AAA9AC56704E10B9E3673AA
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/407d8d35-1770-314b-b41f-aa95506e6ffa.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        97.216.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9a:c5:67:04:e1:0b:9e:36:73:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=f5f33a3c-2eb8-4820-903f-34cef4bb733b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:a5:7c:e7:db:c3:e8:ea:93:1b:e6:99:a3:
                    f8:0a:f3:b0:5e:66:3d:a3:97:57:c2:c7:64:9c:07:
                    9d:81:33:10:ae:22:60:ac:fb:38:ca:1b:ae:07:73:
                    72:7d:0f:d9:ae:d6:0e:fc:45:9b:f1:cd:36:ae:fe:
                    47:28:84:a7:82:5d:d6:41:a8:31:ab:9b:97:d0:d0:
                    dc:79:b4:b4:45:98:41:ed:64:8f:af:07:fa:b3:5c:
                    5e:5c:8c:94:91:32:c3:bb:7a:c6:fc:10:bf:a0:2b:
                    3c:1e:08:7e:71:82:4f:24:b9:4e:05:38:10:bb:2f:
                    ba:32:1f:0c:e2:93:de:ee:80:ef:eb:67:01:ea:14:
                    c4:7f:6d:53:6d:d4:ec:cb:47:c2:79:ec:99:cc:38:
                    7e:1b:06:d7:94:b5:3e:47:73:ca:63:46:84:fb:1c:
                    d4:54:b2:ce:bc:ab:e2:2a:43:2b:3a:44:33:52:ed:
                    9a:e9:02:51:42:89:a9:d2:43:49:eb:b5:c2:61:83:
                    cb:de:ce:0c:25:9e:6c:6d:b8:a4:70:1a:7b:4f:04:
                    15:96:db:2d:64:a6:74:81:45:14:c3:0c:c6:39:38:
                    bc:e0:6d:5f:38:4a:55:2a:38:89:9b:df:dc:c6:42:
                    c7:ef:0a:76:47:07:f7:1d:45:c0:02:aa:78:b3:fc:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2C:FF:41:5E:52:C5:68:23:21:72:04:E5:33:0E:74:88:14:DA:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/407d8d35-1770-314b-b41f-aa95506e6ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.216.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:cc:63:40:c2:ff:4a:de:2c:a3:e9:1a:60:da:b0:a0:41:
         01:16:d2:08:d7:94:7f:c1:ae:76:47:02:85:0d:e3:4c:70:b9:
         2e:be:c7:7c:5a:30:b1:9e:04:bc:03:58:0f:c2:4c:3a:1c:0f:
         cc:c9:89:de:36:b5:95:62:9c:78:89:16:93:1d:02:85:e0:9f:
         8d:cd:01:1b:ec:5a:3d:76:ee:e1:fd:a9:2b:eb:c7:b4:62:de:
         af:1a:a2:f9:67:0f:e0:33:0c:2e:6e:b3:f3:98:6d:07:a1:9e:
         0e:ea:1a:6e:dd:06:72:0e:50:0a:ec:97:dc:2f:ad:7e:bf:9a:
         ef:b5:f8:2c:48:fc:8e:60:10:29:1e:5b:53:d6:05:0a:7a:de:
         9f:a7:88:05:96:fa:c5:a7:51:c9:f2:7a:37:96:0e:02:04:8b:
         be:8e:e6:3a:c9:45:88:ea:c1:52:7f:ab:23:10:f9:4c:a4:c8:
         42:f2:91:1c:ab:18:39:b3:53:f3:d6:5a:e2:a9:2c:49:84:ce:
         b6:1b:4a:cf:52:ca:8e:10:f0:76:12:08:81:40:ad:ca:1e:a7:
         f0:12:92:3e:fa:ff:fe:37:03:38:3e:16:ce:27:92:2d:d9:ad:
         f5:37:e2:c7:66:fe:c3:3f:44:64:29:15:c8:27:2b:c8:7e:a0:
         0a:bf:cf:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqprFZwThC542c6owDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
ZjVmMzNhM2MtMmViOC00ODIwLTkwM2YtMzRjZWY0YmI3MzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKGlfOfbw+jqkxvmmaP4CvOwXmY9o5dXwsdk
nAedgTMQriJgrPs4yhuuB3NyfQ/ZrtYO/EWb8c02rv5HKISngl3WQagxq5uX0NDc
ebS0RZhB7WSPrwf6s1xeXIyUkTLDu3rG/BC/oCs8Hgh+cYJPJLlOBTgQuy+6Mh8M
4pPe7oDv62cB6hTEf21TbdTsy0fCeeyZzDh+GwbXlLU+R3PKY0aE+xzUVLLOvKvi
KkMrOkQzUu2a6QJRQomp0kNJ67XCYYPL3s4MJZ5sbbikcBp7TwQVltstZKZ0gUUU
wwzGOTi84G1fOEpVKjiJm9/cxkLH7wp2Rwf3HUXAAqp4s/yNHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLks/0FeUsVoIyFyBOUzDnSIFNrNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDA3ZDhkMzUtMTc3MC0z
MTRiLWI0MWYtYWE5NTUwNmU2ZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdgsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsYzGNAwv9K3iyj6Rpg2rCgQQEW0gjXlH/BrnZHAoUN40xwuS6+x3xa
MLGeBLwDWA/CTDocD8zJid42tZVinHiJFpMdAoXgn43NARvsWj127uH9qSvrx7Ri
3q8aovlnD+AzDC5us/OYbQehng7qGm7dBnIOUArsl9wvrX6/mu+1+CxI/I5gECke
W1PWBQp63p+niAWW+sWnUcnyejeWDgIEi76O5jrJRYjqwVJ/qyMQ+UykyELykRyr
GDmzU/PWWuKpLEmEzrYbSs9Syo4Q8HYSCIFArcoep/ASkj76//43Azg+Fs4nki3Z
rfU34sdm/sM/RGQpFcgnK8h+oAq/z7o=
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:18:04 2026 by rpki-client