Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71f34f7b-9bf6-3488-83c5-23ba2bf41256.roa
File:                     71f34f7b-9bf6-3488-83c5-23ba2bf41256.roa (raw, json)
Hash identifier:          GPhxqEI7NmHoU3sZvbLa1pBA1toqdAT4HhPQXXgHE44=
Subject key identifier:   3C:A6:5F:4C:A9:12:B7:9B:7E:83:2C:4A:0D:47:A4:B0:40:76:AF:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3A2F73BD99EAD42D9DD92100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71f34f7b-9bf6-3488-83c5-23ba2bf41256.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        97.239.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:73:bd:99:ea:d4:2d:9d:d9:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=cf03f16b-5734-438e-b2ff-2ff57b49c31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:2b:c0:9b:7f:a0:77:c9:66:65:72:1e:59:
                    a9:8d:11:b2:b2:ff:db:f1:15:6e:1a:1d:b5:69:a8:
                    4e:99:4c:9c:08:0c:79:9c:e2:fe:0d:f6:9b:d4:2c:
                    8e:c6:e3:08:05:3b:e8:17:97:53:a3:c1:05:3b:5e:
                    17:11:45:bd:be:63:e6:9b:20:a2:17:98:fb:de:1a:
                    48:fa:35:c4:2d:f1:de:2e:df:6f:68:9c:95:5b:90:
                    f1:a4:0e:09:3e:be:b0:ac:00:b4:a6:3c:86:2d:10:
                    cc:84:d1:e6:66:c2:47:e4:39:9a:d1:84:d9:14:2f:
                    25:12:a7:8e:41:ed:45:47:d8:98:02:82:e0:21:54:
                    c2:70:69:7d:a1:1c:c9:de:e6:71:84:21:81:23:1f:
                    5c:8e:ad:e1:07:99:2c:34:60:e9:d4:5f:9d:50:b2:
                    bc:00:b8:e3:22:e2:64:9c:13:b4:90:55:b6:d8:90:
                    40:f3:72:98:37:3f:fb:87:66:21:ba:2f:3a:df:9a:
                    9c:66:59:47:27:d9:1b:85:8e:47:9c:2b:fd:9d:01:
                    d3:48:60:cd:61:07:0e:4d:03:ec:4b:43:a5:86:7a:
                    e5:51:9b:81:94:da:fb:9b:4e:1b:10:db:71:1a:93:
                    b2:3e:9a:dc:a8:18:06:11:cf:8a:57:51:93:1a:d6:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A6:5F:4C:A9:12:B7:9B:7E:83:2C:4A:0D:47:A4:B0:40:76:AF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71f34f7b-9bf6-3488-83c5-23ba2bf41256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.239.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b7:d6:fe:0e:66:1b:80:e2:ba:34:e9:00:1e:13:7c:92:4c:
         94:06:64:cd:96:5e:13:28:10:e9:20:2b:b8:57:9e:68:ec:58:
         d0:1e:8b:5b:16:fb:c7:bd:ae:eb:38:ff:c3:06:c3:12:03:03:
         6e:a3:f8:c1:18:a0:84:fc:45:2a:7f:4d:94:1e:51:3b:ed:92:
         b2:bd:e8:ad:08:c0:8f:c5:0a:f8:bc:be:52:40:06:5b:de:03:
         ee:61:d7:57:45:28:72:69:99:a1:57:24:8b:2c:89:dd:c9:97:
         e5:bc:dd:e5:52:59:66:96:b0:b7:81:b8:e3:d6:70:ac:99:ba:
         b5:63:3f:ce:eb:fd:f5:fd:19:77:16:fa:d0:b1:14:30:a3:ec:
         59:11:7a:32:8a:6f:1d:26:96:99:3a:80:97:ae:0a:3b:80:77:
         94:2c:d1:11:89:ae:8a:c2:bc:f7:5d:2c:66:20:6c:aa:12:03:
         d2:d1:3a:e9:85:1f:30:77:b2:74:6d:24:75:f1:db:f9:70:01:
         4a:d9:0c:46:ba:98:32:60:8f:97:e4:1b:ad:88:aa:cb:19:3f:
         a2:87:ac:bd:e5:9c:79:9f:eb:ad:f1:63:24:4d:b6:46:ca:66:
         b5:dd:73:7f:ce:93:49:19:a5:6f:d3:80:38:87:0e:df:f7:68:
         1b:dc:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:43:12 2026 by rpki-client