Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa
File:                     84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa (raw, json)
Hash identifier:          ZGJkHPH0/Xe9JKjMLl/FJ1k+u7Kj12Ey04tDUGyhk8E=
Subject key identifier:   67:7D:B9:4E:E5:59:DA:38:E2:E6:84:D4:B0:5E:F1:16:4E:B6:F3:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6AAA9A457C6A9AA66E716F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        97.207.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9a:45:7c:6a:9a:a6:6e:71:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=8e8583f0-2110-4c6b-b20c-dfd5337a4e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:13:e4:b0:72:31:58:bd:6d:66:6a:3d:f0:
                    11:89:f4:37:17:f0:82:c0:0b:8f:c6:14:67:f1:07:
                    1a:54:4f:37:1c:cc:b9:c0:21:73:a4:69:48:db:01:
                    6c:80:a9:02:1c:28:dc:e1:c3:db:a0:1c:eb:a5:61:
                    29:37:fb:9f:4a:76:57:e0:97:99:ff:34:e8:86:2c:
                    bb:ee:f4:db:70:a9:56:91:6b:37:1e:f3:0f:04:ea:
                    30:ab:f4:71:11:27:58:cb:0c:ad:94:10:94:9b:01:
                    e9:c6:fd:6c:d8:d2:46:80:c5:92:9b:67:dd:33:7c:
                    34:d3:8a:70:48:ad:20:06:48:b3:ec:02:6d:b2:1a:
                    23:b9:78:a1:4e:67:91:31:26:eb:1b:87:af:6d:b6:
                    d4:a0:7a:61:e3:84:b8:57:76:f2:2a:34:0d:97:79:
                    61:26:33:e9:f9:29:5a:2b:db:bf:18:31:84:82:2d:
                    e0:b8:a1:1d:cc:51:6a:7f:13:29:18:bf:bd:d7:4d:
                    3b:79:f0:93:51:d3:06:4d:ed:47:17:f4:ad:65:cf:
                    87:66:d7:32:bd:09:56:b0:5e:c2:dc:91:2b:b8:34:
                    93:56:89:8b:e0:e8:ae:8d:13:08:fe:b7:6f:f8:9d:
                    d2:ff:8a:71:22:e4:11:49:f7:75:bf:6e:2c:8e:6f:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7D:B9:4E:E5:59:DA:38:E2:E6:84:D4:B0:5E:F1:16:4E:B6:F3:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/84c687f9-2c8c-3d17-a6e5-fd097398e0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.207.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:58:eb:13:48:b1:af:cc:3c:b2:d2:cf:c2:22:bb:51:54:
         f9:f6:83:9e:27:68:ea:d8:eb:d7:6d:3b:78:7a:ab:a0:45:37:
         16:ff:f4:4b:4a:93:7a:d1:05:d9:1f:02:08:6b:1b:d5:c0:bf:
         e0:19:e9:31:56:5f:ea:ec:73:d7:cf:37:1f:e4:5a:55:5a:24:
         48:6d:b5:5b:62:7b:7a:23:f7:43:8d:04:1d:aa:e0:f9:e0:c4:
         2e:37:fe:35:a1:36:2d:06:06:ce:cb:ef:1f:ae:38:a0:9b:60:
         64:9e:fb:5f:f2:27:16:23:d8:f2:cd:37:b8:93:e5:c2:f0:e7:
         54:1e:bf:81:a9:e3:b8:3f:8b:2e:bf:fd:0d:91:26:6c:68:c2:
         59:ac:16:59:89:3b:00:d3:0d:0b:b8:71:cb:f9:3b:68:3f:a1:
         5f:0e:4e:b3:bd:78:13:72:bb:35:aa:5a:76:7d:b4:3b:10:a5:
         73:17:e4:2d:20:d4:e3:a8:e5:24:56:fa:ae:44:cf:1a:e1:9e:
         87:3c:68:04:48:40:07:c8:5e:38:24:b1:1f:ab:df:73:16:2f:
         bf:73:71:1b:a1:5d:d2:15:c5:7f:d7:7d:38:78:e6:e3:8b:02:
         0a:6f:70:82:87:34:19:6b:cf:bc:2f:af:38:dd:72:be:ad:df:
         aa:ed:5d:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqppFfGqapm5xbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
OGU4NTgzZjAtMjExMC00YzZiLWIyMGMtZGZkNTMzN2E0ZTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmMT5LByMVi9bWZqPfARifQ3F/CCwAuPxhRn
8QcaVE83HMy5wCFzpGlI2wFsgKkCHCjc4cPboBzrpWEpN/ufSnZX4JeZ/zTohiy7
7vTbcKlWkWs3HvMPBOowq/RxESdYywytlBCUmwHpxv1s2NJGgMWSm2fdM3w004pw
SK0gBkiz7AJtshojuXihTmeRMSbrG4evbbbUoHph44S4V3byKjQNl3lhJjPp+Sla
K9u/GDGEgi3guKEdzFFqfxMpGL+91007efCTUdMGTe1HF/StZc+HZtcyvQlWsF7C
3JEruDSTVomL4OiujRMI/rdv+J3S/4pxIuQRSfd1v24sjm+UhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGd9uU7lWdo44uaE1LBe8RZOtvMcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODRjNjg3ZjktMmM4Yy0z
ZDE3LWE2ZTUtZmQwOTczOThlMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYc+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK4/WOsTSLGvzDyy0s/CIrtRVPn2g54naOrY69dtO3h6q6BFNxb/9EtK
k3rRBdkfAghrG9XAv+AZ6TFWX+rsc9fPNx/kWlVaJEhttVtie3oj90ONBB2q4Png
xC43/jWhNi0GBs7L7x+uOKCbYGSe+1/yJxYj2PLNN7iT5cLw51Qev4Gp47g/iy6/
/Q2RJmxowlmsFlmJOwDTDQu4ccv5O2g/oV8OTrO9eBNyuzWqWnZ9tDsQpXMX5C0g
1OOo5SRW+q5Ezxrhnoc8aARIQAfIXjgksR+r33MWL79zcRuhXdIVxX/XfTh45uOL
AgpvcIKHNBlrz7wvrzjdcr6t36rtXfc=
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:36 2026 by rpki-client