Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8113768b-a644-3c05-81d3-39d2764a76e3.roa
File:                     8113768b-a644-3c05-81d3-39d2764a76e3.roa (raw, json)
Hash identifier:          4bONj8sHygxXtUw5UDNv1vTikPeMe/Bc43GBX2n13DA=
Subject key identifier:   EC:A7:FE:F4:0A:65:CF:60:1F:31:55:C5:43:AD:AF:B1:66:05:F3:72
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E6574B195F6DB0738E3F2C7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8113768b-a644-3c05-81d3-39d2764a76e3.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     6167
IP address blocks:        97.207.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:b1:95:f6:db:07:38:e3:f2:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=8a6e6428-53f1-4590-9805-5698879ed525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:32:36:77:84:4a:1b:98:0f:55:1b:da:ea:10:
                    07:d9:b8:d8:c8:cd:c7:10:24:fd:3a:0a:73:7a:dc:
                    0b:56:57:46:38:bd:b4:b0:5b:32:bb:85:40:76:34:
                    42:fd:b3:da:44:e2:2d:74:5c:ec:04:1e:da:db:84:
                    fe:2d:2a:aa:7c:f2:14:37:bb:ac:ec:3c:ac:17:d1:
                    16:9f:eb:b9:44:8c:cf:7e:3c:e7:c8:a8:b0:11:86:
                    27:d8:99:41:d8:1a:ed:00:16:ba:17:bd:37:62:07:
                    de:94:c0:07:b7:48:98:4c:ff:2c:50:35:1e:c2:84:
                    10:6b:0c:2c:f4:90:d4:0c:6f:f5:f3:96:12:8a:a3:
                    48:20:a3:0c:9b:20:7e:0e:28:b0:90:39:64:d1:f5:
                    75:24:ef:9d:c8:53:44:e4:b9:fd:37:20:a2:ef:22:
                    b7:0e:f8:a9:cc:89:5b:73:6c:96:0f:29:bb:cb:ee:
                    b0:72:2d:bc:24:fb:b8:59:19:b3:20:29:ba:31:0c:
                    2f:67:6d:31:f1:35:1c:49:2f:64:32:60:ea:73:7c:
                    02:67:2d:2d:13:66:aa:46:b4:37:50:4a:b4:ce:01:
                    5e:70:00:64:65:bb:37:fb:3e:60:55:60:55:3c:f8:
                    16:59:59:63:76:f5:d4:01:38:0b:e2:35:70:83:83:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A7:FE:F4:0A:65:CF:60:1F:31:55:C5:43:AD:AF:B1:66:05:F3:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8113768b-a644-3c05-81d3-39d2764a76e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.207.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:72:f6:64:f9:b5:82:31:d8:e7:31:42:fc:be:de:44:bd:9f:
         ca:03:ee:62:24:90:24:5b:3f:0a:9b:44:73:17:db:c9:58:84:
         ca:bd:98:26:24:72:7b:70:ea:c4:07:c4:f7:0b:69:1e:71:c3:
         9d:12:00:d0:6c:ee:75:9c:c4:a8:b8:6e:83:97:79:b0:37:9f:
         61:9f:cd:ad:ac:d5:bf:ef:13:08:9b:d9:8b:68:6b:2e:e3:d1:
         57:16:6c:19:a4:52:20:e7:37:93:af:0d:79:d4:b8:17:a6:60:
         dc:af:97:3a:ba:a3:42:7c:16:8a:5c:17:7e:03:78:04:34:c9:
         65:13:b9:35:01:5f:7e:48:2f:9a:a5:48:b8:3c:cf:17:9c:f1:
         1f:a5:80:7a:5c:ed:75:47:6f:2d:29:2b:ea:02:78:26:16:4e:
         1a:db:29:81:fc:d1:ec:da:89:d1:4f:87:80:fc:29:3f:c1:da:
         e5:26:76:fa:a4:ab:9e:0e:ee:96:4f:f5:53:d3:3f:09:e9:39:
         05:95:4f:ce:f3:d7:05:f2:70:4a:9c:47:51:e1:7f:6d:2c:66:
         83:6c:cb:3e:8e:41:25:da:ca:de:19:a1:f5:a8:a6:6a:79:f6:
         4e:84:06:d2:7d:9f:2f:8d:7a:da:de:96:d1:ee:39:d5:07:bf:
         dc:29:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:45:58 2026 by rpki-client