Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/acf36c24-3181-36c9-b78b-53ef2c40dd9c.roa
File:                     acf36c24-3181-36c9-b78b-53ef2c40dd9c.roa (raw, json)
Hash identifier:          a+JF0Wa0h+8T1PYHL5zz9h8XFrp8PfgP5uXm3YUXpa0=
Subject key identifier:   29:16:BB:3D:63:91:8F:A6:BA:3C:6D:E0:F3:6C:9E:27:D2:1C:E5:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EED522EBDAB1B03581F23B280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/acf36c24-3181-36c9-b78b-53ef2c40dd9c.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.213.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:2e:bd:ab:1b:03:58:1f:23:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=c34a54c1-107c-4121-b6b2-0f1a1048d113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:f2:79:ef:3b:48:60:0e:e7:3c:f3:69:a1:
                    22:72:42:0d:0a:a9:41:90:ea:57:9e:e4:60:c9:a0:
                    c5:d0:c0:83:f4:06:90:dc:7a:4f:49:a7:d4:99:34:
                    de:a0:61:f9:bb:a4:d0:37:28:4e:87:63:f4:e9:78:
                    2e:bf:dc:44:ab:04:b9:f8:9d:2c:c9:04:90:76:e3:
                    f5:09:d7:34:bd:73:f2:a8:03:1b:81:89:bc:b9:54:
                    b7:93:5e:5e:79:dd:e8:ec:43:7f:55:59:dc:82:76:
                    ed:f8:01:55:b3:b5:02:bf:6e:32:ed:82:38:c8:fd:
                    c8:75:65:ae:6c:28:c6:22:b4:03:c8:d8:7c:f2:18:
                    28:d5:57:f7:e2:6c:81:30:62:2e:af:fc:33:61:e6:
                    47:36:4a:f2:5a:9a:1c:89:80:88:a6:f5:6c:ae:f4:
                    38:0f:9e:c7:97:91:0f:0d:f7:37:57:d7:57:85:d3:
                    af:69:f1:3b:21:dd:d7:91:9b:13:36:31:94:78:12:
                    c7:a2:aa:a5:94:31:79:d0:9f:0e:4f:54:cf:f1:22:
                    8e:53:69:7d:4d:f2:92:f8:22:97:f7:1f:53:b0:34:
                    fb:e4:a7:7f:1d:cb:5a:06:4f:2d:3b:f8:62:07:e9:
                    66:52:49:63:c5:cb:16:8b:55:bd:53:ff:c3:80:0d:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:16:BB:3D:63:91:8F:A6:BA:3C:6D:E0:F3:6C:9E:27:D2:1C:E5:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/acf36c24-3181-36c9-b78b-53ef2c40dd9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:0c:80:59:c9:6a:ab:fb:6b:73:cd:4d:2c:2e:bd:3a:24:f5:
         bf:39:21:ce:b4:bf:f0:4d:78:a0:cf:72:14:e3:6b:21:ae:92:
         8c:01:0f:2a:2f:02:fe:89:03:e2:31:ba:42:84:be:16:68:b7:
         32:67:3e:b0:ac:94:74:e8:35:42:e5:30:74:43:8b:0e:81:3c:
         58:ac:66:71:58:d8:26:06:82:60:09:97:e3:60:fc:9c:35:1e:
         a0:7c:51:77:9c:08:1d:f4:5a:0a:fb:f6:12:a7:a6:ea:15:c6:
         ee:e4:2c:ac:e3:44:3d:8a:7d:1c:e1:a8:40:25:1d:e9:aa:62:
         a6:c9:0f:27:3d:53:d4:59:81:41:d3:6a:ad:af:e0:fd:09:dc:
         8c:24:9b:e8:dd:22:66:df:d0:14:b1:66:fc:0d:87:dc:4e:1d:
         3f:7c:57:26:22:b7:a8:f3:a3:e8:40:10:68:36:5e:8b:cf:23:
         7f:56:c3:5e:65:4a:61:0b:55:90:4b:35:50:27:5f:69:20:7f:
         9c:d7:de:6d:b0:79:55:ec:47:48:bf:fd:24:ce:d9:b2:bd:31:
         17:45:e7:43:27:7d:3d:87:50:f4:89:16:2c:03:ec:49:a4:b4:
         4b:90:f1:b2:f4:70:b3:e6:c1:d6:64:1b:51:d6:b7:df:9e:e3:
         1b:0d:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:50:11 2026 by rpki-client