Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/954127b0-1141-35d9-aee1-9e92f975d5bb.roa
File:                     954127b0-1141-35d9-aee1-9e92f975d5bb.roa (raw, json)
Hash identifier:          5npoq2eaNidVqhB4dirast1zTJ0AQpIbHshaKiAtTyE=
Subject key identifier:   89:72:90:43:07:57:68:62:49:5A:F5:20:97:37:41:1B:30:B8:DC:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6AAA9A671CFFB775E4413C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/954127b0-1141-35d9-aee1-9e92f975d5bb.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        97.207.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9a:67:1c:ff:b7:75:e4:41:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=8259fcbb-c36f-4c6f-8b3e-ef49e19067a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fd:fc:6a:d9:4a:16:02:6a:2c:d3:9a:48:cc:
                    8c:a0:2d:45:08:d0:d9:6c:fa:97:f2:fa:87:f6:31:
                    91:52:f3:dc:d1:f8:2e:18:c6:ea:1e:4c:dc:d8:18:
                    62:88:4b:f0:5b:59:c5:ea:fc:2f:83:c7:aa:90:a6:
                    37:53:7a:e9:a6:c4:99:6c:de:26:ad:6f:d6:86:d8:
                    1e:0f:fd:9f:04:cb:30:e6:02:83:97:3b:7b:96:dd:
                    36:ee:ea:22:21:1e:53:30:ea:80:9c:a3:7d:bd:b2:
                    cb:96:8b:28:32:6f:62:38:54:70:e7:31:5e:33:a6:
                    eb:2a:ff:df:de:05:8d:0f:c6:a3:fd:08:92:65:3f:
                    ef:db:49:fc:87:79:ab:8f:93:4c:cf:7d:b9:24:94:
                    d9:e3:d0:a1:15:5b:dd:b2:5e:09:52:fd:5c:3d:1d:
                    86:2c:f3:56:bb:2a:e5:c9:7a:20:cb:f8:2f:f8:52:
                    69:ff:89:66:d8:29:18:7d:2f:61:94:f3:d9:30:97:
                    36:db:a6:82:a8:ed:b5:be:1e:0a:ab:a4:ff:93:0d:
                    1f:0b:8f:94:20:28:b9:df:66:69:3d:74:12:c7:cb:
                    a0:a5:92:6d:c8:84:44:a0:05:a3:e4:4e:d1:3a:b1:
                    f6:6d:15:db:ea:b9:e3:eb:c8:55:ad:4e:a2:1b:d2:
                    d6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:72:90:43:07:57:68:62:49:5A:F5:20:97:37:41:1B:30:B8:DC:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/954127b0-1141-35d9-aee1-9e92f975d5bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.207.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0b:04:28:3e:8f:32:42:31:50:13:b8:a9:8a:35:7a:04:a3:
         dc:9f:78:52:02:3f:c8:65:94:f4:c3:58:d8:b2:e1:6e:f1:4d:
         7d:be:d5:34:e2:90:27:de:1f:a0:a0:86:b1:93:ac:8d:d7:40:
         c6:c1:e1:c8:1d:95:e1:32:9d:b6:78:18:34:a2:3d:bd:4f:f9:
         de:e6:3d:01:8e:28:9c:b6:cc:27:ed:c6:20:eb:02:65:cb:a0:
         a2:20:36:98:03:55:89:dd:a5:d5:ce:ab:60:72:12:80:24:10:
         4c:9d:c0:70:d9:8d:bf:0c:ed:49:be:f1:83:b7:5c:fa:b3:21:
         c5:0d:53:d5:14:e3:f5:bf:0c:04:a4:46:a4:cd:b4:24:c2:fe:
         c0:c6:93:94:61:15:b3:28:73:92:4e:32:d6:0e:4f:24:7e:65:
         e5:af:a8:95:40:6a:a3:fb:e6:67:62:3e:92:09:3a:c8:8c:bc:
         75:4c:15:5f:c9:1a:7f:85:a1:7a:49:94:05:7a:1d:d4:2d:b1:
         91:9e:26:c5:b8:b0:85:cd:28:2f:8a:67:1b:1b:5a:29:66:6f:
         ab:21:9d:15:97:c6:8f:bf:37:0b:dd:4a:b8:6e:cd:11:87:b3:
         ce:b4:1f:94:4a:f4:43:af:ce:9a:91:87:09:6b:f2:f9:7f:ae:
         4f:00:0f:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqppnHP+3deRBPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
ODI1OWZjYmItYzM2Zi00YzZmLThiM2UtZWY0OWUxOTA2N2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7P38atlKFgJqLNOaSMyMoC1FCNDZbPqX8vqH
9jGRUvPc0fguGMbqHkzc2BhiiEvwW1nF6vwvg8eqkKY3U3rppsSZbN4mrW/Whtge
D/2fBMsw5gKDlzt7lt027uoiIR5TMOqAnKN9vbLLlosoMm9iOFRw5zFeM6brKv/f
3gWND8aj/QiSZT/v20n8h3mrj5NMz325JJTZ49ChFVvdsl4JUv1cPR2GLPNWuyrl
yXogy/gv+FJp/4lm2CkYfS9hlPPZMJc226aCqO21vh4Kq6T/kw0fC4+UICi532Zp
PXQSx8ugpZJtyIREoAWj5E7ROrH2bRXb6rnj68hVrU6iG9LW3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIlykEMHV2hiSVr1IJc3QRswuNw4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTU0MTI3YjAtMTE0MS0z
NWQ5LWFlZTEtOWU5MmY5NzVkNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYc+cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4LBCg+jzJCMVATuKmKNXoEo9yfeFICP8hllPTDWNiy4W7xTX2+1TTi
kCfeH6CghrGTrI3XQMbB4cgdleEynbZ4GDSiPb1P+d7mPQGOKJy2zCftxiDrAmXL
oKIgNpgDVYndpdXOq2ByEoAkEEydwHDZjb8M7Um+8YO3XPqzIcUNU9UU4/W/DASk
RqTNtCTC/sDGk5RhFbMoc5JOMtYOTyR+ZeWvqJVAaqP75mdiPpIJOsiMvHVMFV/J
Gn+FoXpJlAV6HdQtsZGeJsW4sIXNKC+KZxsbWilmb6shnRWXxo+/NwvdSrhuzRGH
s860H5RK9EOvzpqRhwlr8vl/rk8AD0Q=
-----END CERTIFICATE-----
Generated at Mon Apr 13 18:24:56 2026 by rpki-client