Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb09bb3b-e7a4-3fe7-96af-35457c8341a9.roa
File:                     cb09bb3b-e7a4-3fe7-96af-35457c8341a9.roa (raw, json)
Hash identifier:          vuOVHT5kgXP0QLpdWH1fIp2XqNv8oCS8fNsf+wKPe+0=
Subject key identifier:   33:96:A0:0D:92:8D:C2:17:6F:CF:36:D0:E1:73:78:03:36:CA:84:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32D03CCA45D6BC90A9E080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb09bb3b-e7a4-3fe7-96af-35457c8341a9.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.242.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:d0:3c:ca:45:d6:bc:90:a9:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=c862ae09-50ff-4616-9ffd-82da15cb2151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:4c:60:6e:d3:08:ab:e3:51:22:d2:67:75:
                    b1:43:a8:e0:09:22:48:f9:7e:a0:3b:c0:ee:26:a7:
                    dc:bb:c6:0e:a1:9e:15:38:9e:bc:06:2b:75:cd:81:
                    ee:3a:e3:28:97:c4:49:48:c5:f6:eb:c1:fb:a6:28:
                    4c:a2:e2:1e:38:18:56:07:3f:a2:6e:8d:98:4e:56:
                    15:51:eb:e2:9b:a1:4c:8b:e2:aa:e3:71:e7:1f:4f:
                    24:d7:f4:a8:55:9d:13:c5:d5:75:af:68:f4:55:a6:
                    97:4c:61:7d:98:8e:dc:01:73:96:3d:5e:cb:9b:d0:
                    ea:2e:6d:92:3f:04:3d:15:18:0d:dc:6a:27:39:ff:
                    93:70:97:87:57:58:23:f1:38:9f:56:f6:dd:9b:e8:
                    d4:da:74:d3:ba:ce:3a:4a:2c:19:b9:2d:74:5a:8e:
                    5e:ba:ef:15:fe:2d:3f:7d:97:d9:7c:70:d7:1d:d0:
                    3c:61:de:37:fd:cf:2a:72:36:da:a4:9a:26:89:29:
                    e4:71:97:33:71:a0:3b:4b:84:58:31:b4:ac:97:71:
                    24:e2:99:2f:39:50:2e:1b:ea:7a:06:fa:dc:0a:f6:
                    93:c4:00:d2:1f:4a:97:d0:b1:40:85:64:a5:bf:e2:
                    a8:e6:9d:4e:eb:96:c6:95:0a:b3:99:59:7b:0c:16:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:A0:0D:92:8D:C2:17:6F:CF:36:D0:E1:73:78:03:36:CA:84:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb09bb3b-e7a4-3fe7-96af-35457c8341a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.242.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:66:6b:6f:cd:19:94:3b:9a:fc:da:ae:8c:87:67:0c:63:9b:
         b0:2b:3b:31:34:bb:44:1c:4e:26:a8:e9:59:a2:f8:df:43:5b:
         f4:c0:c7:da:40:08:4d:ae:fe:2b:ed:dd:e4:60:16:d6:b5:da:
         06:6b:18:da:3d:41:d2:bf:ce:82:37:2b:83:b2:1b:01:db:31:
         a0:47:63:af:4b:bd:8d:7c:9d:15:d7:92:58:c6:88:cf:8f:98:
         c2:35:1f:ec:f2:ff:5a:2e:19:76:4c:7d:ff:74:68:07:e4:b5:
         ce:8b:5b:64:a9:2b:b6:65:c3:97:84:6e:fe:57:76:4e:0e:2d:
         0e:95:35:a3:5e:b8:9c:37:e8:13:69:09:33:1d:4a:0d:0e:ff:
         17:11:e7:df:d7:5c:78:84:6a:7a:04:63:a7:b5:ae:38:bb:ca:
         47:b4:61:fb:e5:ee:34:a4:3f:9f:05:30:8f:c2:a4:40:e8:ce:
         3f:ce:d7:c2:5f:09:50:18:73:bc:65:08:ca:a5:23:ee:63:98:
         ea:af:b5:7d:0d:55:b2:83:64:e6:16:85:f0:2e:07:1b:65:0d:
         25:d0:6e:88:bb:bb:ae:a0:ed:87:b1:e6:ea:55:a8:96:5e:29:
         11:23:ae:c4:40:77:60:d8:b8:07:3c:22:fc:c7:6a:1f:66:79:
         8a:52:11:a9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9aMtA8ykXWvJCp4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
Yzg2MmFlMDktNTBmZi00NjE2LTlmZmQtODJkYTE1Y2IyMTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdVMYG7TCKvjUSLSZ3WxQ6jgCSJI+X6gO8Du
Jqfcu8YOoZ4VOJ68Bit1zYHuOuMol8RJSMX268H7pihMouIeOBhWBz+ibo2YTlYV
Uevim6FMi+Kq43HnH08k1/SoVZ0TxdV1r2j0VaaXTGF9mI7cAXOWPV7Lm9DqLm2S
PwQ9FRgN3GonOf+TcJeHV1gj8TifVvbdm+jU2nTTus46SiwZuS10Wo5euu8V/i0/
fZfZfHDXHdA8Yd43/c8qcjbapJomiSnkcZczcaA7S4RYMbSsl3Ek4pkvOVAuG+p6
BvrcCvaTxADSH0qX0LFAhWSlv+Ko5p1O65bGlQqzmVl7DBYrxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDOWoA2SjcIXb8820OFzeAM2yoQFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2IwOWJiM2ItZTdhNC0z
ZmU3LTk2YWYtMzU0NTdjODM0MWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYfIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdGZrb80ZlDua/NqujIdnDGObsCs7MTS7RBxOJqjpWaL430Nb9MDH2kAI
Ta7+K+3d5GAW1rXaBmsY2j1B0r/Ogjcrg7IbAdsxoEdjr0u9jXydFdeSWMaIz4+Y
wjUf7PL/Wi4Zdkx9/3RoB+S1zotbZKkrtmXDl4Ru/ld2Tg4tDpU1o164nDfoE2kJ
Mx1KDQ7/FxHn39dceIRqegRjp7WuOLvKR7Rh++XuNKQ/nwUwj8KkQOjOP87Xwl8J
UBhzvGUIyqUj7mOY6q+1fQ1VsoNk5haF8C4HG2UNJdBuiLu7rqDth7Hm6lWoll4p
ESOuxEB3YNi4Bzwi/MdqH2Z5ilIRqQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:04:19 2026 by rpki-client