Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c558b138-f790-3f1d-9b99-e3a32b2e3150.roa
File:                     c558b138-f790-3f1d-9b99-e3a32b2e3150.roa (raw, json)
Hash identifier:          9rFhQ4mUnJo7vcGucrMnLBvnFan0pk9Fik2KocT5S3g=
Subject key identifier:   8D:5E:7C:16:F9:13:78:FC:1E:C2:BF:94:9E:8B:39:E9:6E:FD:26:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F86C96BFB86A7ECFCFED0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c558b138-f790-3f1d-9b99-e3a32b2e3150.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        97.148.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:86:c9:6b:fb:86:a7:ec:fc:fe:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=2342dd92-7284-43f2-b6cc-ea09f038ac5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:85:17:52:58:69:84:59:d0:c1:e8:8e:56:
                    fb:da:8a:ad:c7:81:12:94:6b:97:d0:f2:96:dd:33:
                    7b:50:61:f0:23:dd:4e:30:b6:68:ba:fb:1e:a9:8e:
                    42:a7:89:a8:78:51:e0:71:a7:29:02:0e:d8:79:25:
                    15:ae:34:6b:cc:62:2a:b7:f9:0d:0d:ac:76:1e:67:
                    f6:64:4a:86:f2:2c:17:87:a7:e5:19:50:04:d9:5b:
                    ed:40:fa:60:71:19:87:6f:84:76:be:67:7f:93:12:
                    56:f2:a1:45:bd:52:13:a8:1c:46:32:ba:21:6a:de:
                    4f:02:2b:61:81:8f:dd:2a:5b:39:c6:2d:db:80:2e:
                    d4:47:3d:6a:bc:51:7c:d5:ac:80:41:49:b4:09:63:
                    60:7c:04:47:40:ed:bf:00:59:8b:4e:ed:90:d9:8c:
                    5c:cf:2a:6f:22:bb:f3:d3:ea:01:e1:2c:30:e7:85:
                    b5:ba:e5:35:29:52:be:df:55:84:88:ff:11:d0:ba:
                    51:1c:c1:be:4c:c9:26:f7:72:94:98:43:9f:98:e4:
                    42:be:fe:ce:fb:0e:6a:a3:12:1c:cd:dd:1f:ca:59:
                    52:64:08:fc:fd:64:bd:8b:00:eb:50:66:21:a0:10:
                    aa:3f:10:6c:17:39:e6:22:9e:b7:03:a8:56:ad:07:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5E:7C:16:F9:13:78:FC:1E:C2:BF:94:9E:8B:39:E9:6E:FD:26:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c558b138-f790-3f1d-9b99-e3a32b2e3150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:46:37:b1:f9:a5:7f:f0:d9:1e:01:0d:56:88:4c:61:79:81:
         6e:15:6b:cf:46:a4:27:71:5b:ed:0e:ff:d1:f2:e1:41:be:20:
         08:a8:11:cc:0b:0d:d2:2d:7e:3f:95:be:04:b7:8b:31:60:1b:
         a9:05:bd:53:ae:5b:67:65:88:1c:da:d5:02:6a:fb:1f:2d:32:
         1e:e0:2c:0b:d7:59:12:67:8d:2d:9e:8e:83:a6:a3:7a:fc:e5:
         97:36:eb:b2:a7:45:22:02:1c:b0:f5:0c:4f:13:b5:28:ad:59:
         68:1a:7f:d2:44:61:52:f0:6e:13:13:f8:9c:da:08:5a:d4:dc:
         4b:73:cc:f1:7d:81:3d:d6:f3:3f:90:8e:bf:51:8b:48:b1:a4:
         64:58:0d:0b:b8:68:b8:c2:bc:8b:d2:d4:b4:80:8f:9c:6e:50:
         02:72:56:39:31:77:cd:40:06:7a:54:f0:c3:d5:05:7f:98:1a:
         11:2d:2c:8e:c9:cc:25:a1:d7:a5:9f:36:12:27:00:6b:7b:a0:
         ce:47:e3:56:3e:0f:a2:a4:9f:e8:61:64:45:3d:87:be:1e:ce:
         44:db:72:3d:3a:f5:4a:d2:c9:ba:f9:0e:ed:29:68:2d:fd:60:
         7c:2a:81:23:64:6e:4b:fb:b8:41:b8:89:c5:c9:68:71:db:c2:
         ec:94:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:37:43 2026 by rpki-client