Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa
File:                     67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa (raw, json)
Hash identifier:          ++EeflPpdQk97cjDL5FKT2kdZiP2rWd6aTx3iRq24Rw=
Subject key identifier:   BD:64:8D:38:64:52:50:E2:72:C3:4A:68:54:03:28:22:62:C0:2B:09
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB2B1F1425D5B33254E880080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     6167
IP address blocks:        97.213.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:f1:42:5d:5b:33:25:4e:88:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=a7eaaebf-cd87-4315-9502-665d44cabdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:71:fe:bd:5e:60:e6:dd:4c:a7:09:0c:1f:
                    aa:c7:ea:9e:11:4e:99:de:54:83:7f:19:92:99:50:
                    cb:bd:a2:44:6d:52:2c:99:b6:64:6e:fe:ae:aa:38:
                    fb:b1:82:ad:0b:b8:0d:0a:d7:e9:e5:8b:1c:04:36:
                    b2:7e:55:51:06:d2:9c:f8:ad:7a:6a:d7:84:e5:6d:
                    68:70:fd:14:39:a9:08:18:0c:4b:37:82:9d:3a:ed:
                    10:58:e4:eb:cd:4a:b3:e4:55:dc:ff:64:3b:e8:ff:
                    8d:a6:7a:71:7c:6c:72:1b:86:68:86:6f:ad:07:7e:
                    69:c7:d7:f0:18:85:65:19:19:d9:d6:81:88:a0:71:
                    ef:83:53:e1:f7:29:14:82:d3:03:36:d4:a3:f4:34:
                    41:a7:08:87:47:53:57:fd:2e:3b:a9:50:2f:e4:d8:
                    b3:9d:3e:f7:c2:61:b6:da:4b:6f:42:75:6c:1d:95:
                    28:b0:a8:48:38:9b:b7:6d:69:dc:28:cf:86:55:ed:
                    b9:b7:aa:e5:cb:39:bb:78:15:78:c1:0e:99:53:d1:
                    29:30:37:b0:72:88:3b:80:07:fc:b0:99:d6:24:cc:
                    65:8f:22:2d:28:94:c2:24:c3:fb:a7:42:6a:f9:31:
                    16:07:b5:16:ac:47:02:37:6d:be:a9:01:2f:09:2d:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:64:8D:38:64:52:50:E2:72:C3:4A:68:54:03:28:22:62:C0:2B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:01:e7:86:bd:f9:71:93:00:a6:07:93:ce:8b:e2:aa:9a:57:
         e8:b3:2b:ef:a1:29:67:86:b6:b1:df:d8:7a:a6:65:1e:06:fa:
         cd:b5:59:db:ee:52:9c:da:80:c4:ff:42:8b:b6:da:eb:42:34:
         57:df:66:81:de:19:40:bb:0a:e7:af:9b:d9:41:b9:37:f5:9b:
         c4:7d:ca:13:9a:af:15:21:68:c6:76:72:3e:a2:f7:eb:46:01:
         29:d4:40:28:15:68:07:1f:9d:ea:70:7e:8d:7f:a0:b0:16:67:
         76:fd:17:b9:4e:a1:9d:83:0b:a5:83:a3:20:ba:b6:95:63:df:
         5d:01:f8:c4:ad:c2:ed:44:48:c3:48:83:9f:11:8a:3e:f5:ad:
         48:53:23:4f:9f:c2:8a:6d:e5:a8:ba:b5:78:76:14:eb:da:50:
         11:8c:68:0e:b4:94:7b:da:48:d9:c1:ae:5a:8c:71:14:fc:1d:
         c6:be:54:2f:87:23:fb:24:cc:2a:4f:37:0c:86:98:cb:d8:25:
         da:8d:04:8f:83:d4:75:3d:4b:b1:d8:95:e0:5d:2e:f2:3d:59:
         4e:10:68:63:16:d6:b1:41:1a:a0:c9:e0:76:91:28:cc:14:6d:
         e3:9a:d0:74:cf:b3:8d:f9:0a:2d:ff:d0:c4:da:de:3c:67:33:
         0f:a5:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:50:23 2026 by rpki-client