Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77446fe8-9527-36e2-86f0-9751f29e0352.roa
File:                     77446fe8-9527-36e2-86f0-9751f29e0352.roa (raw, json)
Hash identifier:          S8glrpiAPZRmJvSdC28XtQa00OELNKLRkn/IufKKYLQ=
Subject key identifier:   8D:60:0B:25:0C:82:A5:FC:5F:14:52:5A:06:01:50:6A:64:1E:CF:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F83A6128ECC694FFEBD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77446fe8-9527-36e2-86f0-9751f29e0352.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        97.128.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:83:a6:12:8e:cc:69:4f:fe:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=c8ef3345-0e75-4a61-87c1-b214f53016ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:a8:2f:f5:54:bc:d9:1d:00:6a:de:ca:9f:
                    84:40:2d:a2:08:4e:c9:cc:c2:73:33:35:41:83:93:
                    ce:1f:cd:08:da:2d:e4:5b:86:a3:01:ff:77:1b:34:
                    eb:df:62:c8:63:9d:d7:0e:13:cf:d8:ad:c8:a1:2d:
                    3d:aa:e7:dd:8a:b1:bc:d7:55:bb:10:7e:58:fa:36:
                    74:5b:66:5e:0e:c4:03:33:99:8a:f8:38:fc:b1:8b:
                    f6:92:f7:1d:43:4b:fa:75:32:25:00:12:05:b7:66:
                    cc:84:59:a2:9d:84:58:4e:69:e4:e0:9a:2d:af:d3:
                    b7:b4:4a:c3:98:b4:06:64:5d:80:09:3c:f7:fb:4f:
                    ae:4c:ce:3d:71:0c:45:bd:ce:04:33:d9:07:c4:2d:
                    a7:15:55:5c:34:4e:ef:41:82:1d:14:a4:1b:6c:43:
                    87:53:4a:1e:a0:49:a5:10:32:69:07:5e:37:d1:66:
                    92:5e:6b:45:03:a2:e2:ed:b9:87:f9:f8:fe:84:e1:
                    cb:55:be:a8:ff:7d:f7:ee:ee:ac:02:34:1c:1e:78:
                    2d:67:3d:ce:4f:b5:40:83:e4:66:e4:83:a9:41:75:
                    0a:bb:86:48:6c:d1:bb:16:54:3b:73:27:b8:51:33:
                    87:dc:cc:6b:b8:26:dd:eb:d7:5b:64:a7:21:b9:2a:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:60:0B:25:0C:82:A5:FC:5F:14:52:5A:06:01:50:6A:64:1E:CF:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/77446fe8-9527-36e2-86f0-9751f29e0352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.128.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:69:96:f5:35:ee:5d:b8:7e:45:4e:78:c6:72:44:58:88:
         51:7e:dc:9d:6e:b7:8d:e3:cf:67:7c:27:73:5d:56:03:c5:1c:
         ab:2c:8f:a5:81:4a:e8:dd:c0:0a:de:15:6c:73:93:bb:94:93:
         14:e2:2c:d7:d8:65:1e:e1:19:db:17:b4:bb:48:c1:7b:7f:64:
         35:55:6d:09:d5:76:48:86:cb:ff:71:b0:58:7d:11:6c:4f:be:
         1a:c0:ac:49:36:ab:32:a5:ac:16:cc:0a:6e:c3:64:ef:7a:e5:
         1f:d9:2a:ba:0f:32:1b:12:ea:72:f3:36:74:07:8a:01:8c:1b:
         76:cc:d6:43:33:f3:77:0a:be:98:63:d7:08:95:6d:25:bd:7c:
         ba:e6:73:58:38:87:5e:22:87:1f:fa:2d:20:7c:0a:ed:bf:78:
         f1:e0:80:c3:6a:fd:70:bd:25:fa:01:08:d9:04:7f:6b:68:3e:
         7b:52:d3:a3:ac:23:4e:2f:5b:26:c1:a8:62:b9:81:64:e1:dd:
         7d:e7:5a:de:36:e4:57:d0:95:fc:1d:03:1b:8f:c3:3c:38:ae:
         d9:0b:1f:ca:b7:c8:ee:16:59:ca:11:26:66:6e:be:73:ea:d7:
         fa:87:84:1b:79:93:5f:fb:c0:f4:c6:30:71:2f:a3:d0:17:3e:
         54:f7:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:20 2026 by rpki-client