Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa
File:                     67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa (raw, json)
Hash identifier:          Sy9BFwC5sIdoREhe599jq+n5mwESar6/uF089D6NKlY=
Subject key identifier:   A6:AD:FE:A1:19:04:D4:19:A8:AA:18:2F:DE:7C:4D:86:1A:5F:38:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F549D9DBC8BBB4115BDEF22C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.213.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:9d:bc:8b:bb:41:15:bd:ef:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=12482e3a-ff88-4991-b8c4-d580da54a9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:38:3e:8c:86:12:d6:1e:01:95:07:3f:66:
                    d8:cf:4f:36:ab:e1:61:a2:58:1e:e7:be:15:ad:a0:
                    5c:21:8d:c0:98:31:18:1a:01:b7:6d:16:13:a5:e1:
                    d7:d0:00:c0:ec:34:4b:41:8d:1c:54:b5:e5:1d:ec:
                    c3:d3:99:f6:4a:76:2d:50:8e:6b:fc:e8:ac:2a:b7:
                    fc:87:aa:5b:c6:4c:1b:67:ac:48:4c:63:b4:d5:c1:
                    68:b0:8a:66:ba:13:ac:e7:75:e3:c2:96:ee:75:3e:
                    eb:38:61:43:98:b3:e8:1b:12:84:37:32:3b:c9:15:
                    af:6c:b6:ec:3a:bf:9e:13:3a:15:c6:7b:25:85:3a:
                    d4:4e:f6:72:0d:68:38:bf:f0:54:46:8f:32:9c:24:
                    b0:26:ef:73:1f:c7:73:14:f4:ea:c1:c0:8a:f1:db:
                    3c:5a:db:00:7f:60:27:cb:d8:77:b0:50:d2:17:cd:
                    d9:2a:c3:6c:c0:0b:69:31:fd:45:33:58:c3:96:5d:
                    ae:2a:bb:96:2b:d3:a7:c3:82:17:bb:bb:39:ce:aa:
                    88:46:3a:b0:dc:d1:d7:b7:04:a3:ae:a0:72:25:69:
                    07:07:a7:61:f2:47:da:39:72:b0:5b:04:f5:72:34:
                    01:db:1c:3c:ba:d8:12:8e:31:72:79:64:69:29:22:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AD:FE:A1:19:04:D4:19:A8:AA:18:2F:DE:7C:4D:86:1A:5F:38:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e4:6b:3d:a8:c9:97:40:0b:d4:ee:7e:e2:6b:0d:9d:a8:13:
         78:d5:77:dd:c5:48:c9:17:12:90:b8:74:44:11:e4:30:77:e6:
         bf:dd:fa:b2:f4:72:fc:e7:07:4b:49:7a:c0:b6:18:14:2e:4d:
         11:2a:01:22:99:5b:6e:bf:f4:47:c5:78:7f:2e:ac:d7:8f:04:
         0d:43:03:b9:32:77:bd:d4:68:f4:c0:92:a7:33:9d:90:67:3d:
         fb:35:e1:25:ec:5b:de:f5:9a:c3:24:4a:91:c9:77:ed:66:63:
         92:00:69:5a:09:0a:9f:ad:1c:e5:95:c9:bf:a9:eb:0e:97:88:
         3c:93:de:22:3f:7b:47:cd:66:c9:47:8c:2c:a7:ab:61:28:6e:
         f4:ab:ed:7c:20:09:e4:39:0b:67:50:06:cc:de:9a:3f:c8:0b:
         67:47:6c:95:b9:2d:88:06:e9:e3:21:35:55:d5:3a:b6:5a:8b:
         a3:29:39:db:fc:17:8a:ea:83:96:1f:d8:74:31:81:c1:e4:c5:
         96:49:18:b3:22:f0:b7:66:5a:e1:57:f1:4c:37:26:89:fb:42:
         3d:2f:26:12:95:17:13:66:3c:d4:8e:11:64:87:0e:b9:0a:d9:
         e5:06:50:b0:2b:0d:2a:e7:b5:1e:92:c1:e9:fd:89:42:bb:b4:
         b6:4b:b2:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZ28i7tBFb3vIsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MTI0ODJlM2EtZmY4OC00OTkxLWI4YzQtZDU4MGRhNTRhOWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspo4PoyGEtYeAZUHP2bYz082q+Fholge574V
raBcIY3AmDEYGgG3bRYTpeHX0ADA7DRLQY0cVLXlHezD05n2SnYtUI5r/OisKrf8
h6pbxkwbZ6xITGO01cFosIpmuhOs53XjwpbudT7rOGFDmLPoGxKENzI7yRWvbLbs
Or+eEzoVxnslhTrUTvZyDWg4v/BURo8ynCSwJu9zH8dzFPTqwcCK8ds8WtsAf2An
y9h3sFDSF83ZKsNswAtpMf1FM1jDll2uKruWK9Onw4IXu7s5zqqIRjqw3NHXtwSj
rqByJWkHB6dh8kfaOXKwWwT1cjQB2xw8utgSjjFyeWRpKSLktwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKat/qEZBNQZqKoYL958TYYaXzjPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjcyMzFmMWEtZWI4Yy0z
MDc5LWExNGUtZDg1YjBjYmQ5NmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdX8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDkaz2oyZdAC9TufuJrDZ2oE3jVd93FSMkXEpC4dEQR5DB35r/d+rL0
cvznB0tJesC2GBQuTREqASKZW26/9EfFeH8urNePBA1DA7kyd73UaPTAkqcznZBn
Pfs14SXsW971msMkSpHJd+1mY5IAaVoJCp+tHOWVyb+p6w6XiDyT3iI/e0fNZslH
jCynq2EobvSr7XwgCeQ5C2dQBszemj/IC2dHbJW5LYgG6eMhNVXVOrZai6MpOdv8
F4rqg5Yf2HQxgcHkxZZJGLMi8LdmWuFX8Uw3Jon7Qj0vJhKVFxNmPNSOEWSHDrkK
2eUGULArDSrntR6Swen9iUK7tLZLsp8=
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:54:29 2026 by rpki-client