Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/723ca190-c48f-3ae5-9058-d0cab1933e47.roa
File:                     723ca190-c48f-3ae5-9058-d0cab1933e47.roa (raw, json)
Hash identifier:          2hLTL4sQ2LUZ3HFu4HpaQCLKDp1UPC7QDKXhWZ6r8jo=
Subject key identifier:   C7:D2:D4:CF:DF:BB:7A:3A:7E:8B:80:5D:64:27:0E:3D:6F:5F:0C:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F867D8EF9258D7E3A6580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/723ca190-c48f-3ae5-9058-d0cab1933e47.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        97.145.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:86:7d:8e:f9:25:8d:7e:3a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=0e7dd9f1-a0f3-409c-b10e-51a97486563d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:1f:ca:f4:29:d4:a0:d0:e2:f8:bb:9c:71:
                    32:b7:76:13:db:c6:c0:69:b3:b6:d4:4e:9e:ed:46:
                    21:27:3f:cc:de:c5:90:d1:f3:47:ea:8b:93:91:75:
                    bc:60:73:11:d7:fe:48:42:ec:f1:4a:f1:cc:5b:c7:
                    03:5b:8d:d5:3e:5c:a3:7e:60:55:f9:9d:18:57:22:
                    29:97:fe:65:f7:27:70:15:67:3c:b1:44:04:d5:27:
                    70:55:80:58:13:fe:64:dd:1a:64:6d:7b:64:7d:2e:
                    9b:06:6e:83:bc:81:ea:58:29:28:70:56:06:a7:bb:
                    1c:da:b9:1c:5d:aa:ed:30:f0:6a:6b:45:e3:a1:b4:
                    ab:7f:6c:bf:0e:63:25:fd:ef:e2:2f:e6:d2:01:b4:
                    02:47:8e:36:e9:6b:a7:3a:00:48:78:72:ce:f5:c5:
                    bf:0d:62:f2:06:47:ff:47:d8:5f:a6:80:6c:33:e6:
                    d9:5d:bf:bb:df:0e:5f:80:00:05:33:19:55:93:d3:
                    ef:09:9e:f9:8d:79:02:3d:fd:51:66:ad:48:ee:8d:
                    dd:2b:cb:4b:de:97:14:15:5d:77:a3:0e:67:46:02:
                    98:b7:50:11:5f:f4:e7:49:58:c4:1f:46:ee:86:65:
                    62:59:f9:71:88:a4:dc:45:ac:e2:b3:17:2c:cf:65:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:D4:CF:DF:BB:7A:3A:7E:8B:80:5D:64:27:0E:3D:6F:5F:0C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/723ca190-c48f-3ae5-9058-d0cab1933e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.145.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:e5:44:2d:71:b5:b0:70:12:95:29:73:3c:51:b5:30:27:
         a2:86:77:7d:ee:37:3e:6e:07:20:06:d7:1c:90:5f:43:02:f0:
         af:e2:75:ed:2a:d4:88:33:59:02:db:d7:64:8b:bd:7d:74:6c:
         a5:e7:2c:35:0e:3a:d0:2a:04:4b:1b:8e:84:0d:dd:2d:e5:87:
         75:03:2e:5a:75:a2:84:13:45:cb:38:06:c0:d4:16:82:cc:03:
         fd:1e:cc:72:9c:eb:ca:0e:32:96:31:a0:71:8f:4e:f8:ca:ff:
         8c:21:7c:2c:3b:39:4a:8b:c0:74:0a:35:37:d1:7f:b9:f6:0c:
         17:60:a0:ec:70:f1:22:99:ea:20:5a:0d:9a:c5:ec:b8:34:79:
         9b:16:64:e9:78:50:01:ca:28:5b:d9:c6:8b:ec:52:31:47:6d:
         92:34:69:34:26:35:4d:50:09:1a:33:67:5a:21:1a:16:7a:de:
         bd:cb:8e:70:f1:80:c5:21:31:13:27:de:e4:02:35:6a:ad:d1:
         d1:f0:6a:06:8f:94:e5:f8:c5:5b:a2:b4:6a:67:ae:f7:12:56:
         c6:a5:8d:db:d8:12:20:95:e0:96:49:4d:5f:5c:40:ee:3a:6a:
         75:f7:40:a0:b3:ea:b1:f0:16:4d:c6:34:b7:58:bf:e4:b9:01:
         30:62:a5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:40:54 2026 by rpki-client