Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d12aba80-fbff-3cbd-b4f4-75fc97147980.roa
File:                     d12aba80-fbff-3cbd-b4f4-75fc97147980.roa (raw, json)
Hash identifier:          oEwFqqkjUoXvzT24rVHwdA2tVoCHy75zAygAXDpSW04=
Subject key identifier:   EE:38:57:37:37:14:13:88:31:2D:4C:FE:E8:0B:3D:E4:57:A0:EE:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E74CF72FDA5629A87C5377980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d12aba80-fbff-3cbd-b4f4-75fc97147980.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        97.160.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:72:fd:a5:62:9a:87:c5:37:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=0d5522a1-6357-4488-86de-099202a396c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:85:da:f5:e2:c0:fd:be:53:32:f3:e4:74:05:
                    33:94:67:f8:f5:c0:f3:1a:1e:57:d9:62:8b:63:87:
                    2c:b2:9d:fa:3b:4c:fb:67:a2:0f:ac:ee:ef:5b:56:
                    25:04:1c:a8:53:20:de:0f:b3:3b:f6:ea:39:db:a8:
                    32:d2:61:80:87:12:9f:b7:05:98:8a:6e:72:ba:6e:
                    c1:b0:6e:d2:0d:49:73:3a:d2:4e:a3:b9:ea:f1:96:
                    12:78:62:c5:37:aa:18:59:ad:2a:65:b6:1b:7e:61:
                    93:ea:05:da:ab:0c:74:a2:00:af:94:54:aa:62:20:
                    31:0e:72:dc:e3:9a:3e:bc:d0:6a:4a:3a:cd:fd:a4:
                    6a:13:34:2c:79:92:de:aa:7e:93:74:1e:9a:5d:dc:
                    24:93:66:b7:40:ce:d8:70:62:07:8f:bf:f6:45:92:
                    28:7c:d5:6a:c5:00:8b:d1:a5:3b:3b:ae:08:3d:b7:
                    15:d8:37:ee:10:f1:e0:04:15:4b:59:37:f0:83:38:
                    f7:dd:5a:1d:48:99:91:f5:3c:27:09:e5:20:7f:e6:
                    9b:d8:68:95:8f:7b:0c:8d:74:29:5e:27:d1:85:45:
                    fc:04:a2:7c:3b:9a:68:ea:8e:85:4f:18:e0:72:5a:
                    50:3a:db:e7:09:c6:15:3c:4f:63:26:a9:81:c3:a6:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:38:57:37:37:14:13:88:31:2D:4C:FE:E8:0B:3D:E4:57:A0:EE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d12aba80-fbff-3cbd-b4f4-75fc97147980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.160.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:25:b9:18:6d:25:ff:cf:3c:78:2b:1d:ec:cf:69:2a:5b:c4:
         29:41:3b:5d:45:a4:43:75:3b:0c:7f:94:f2:97:51:2a:25:a2:
         36:f4:1a:d1:d8:44:30:74:a9:10:fd:4f:c2:d6:42:42:ed:1b:
         b6:a0:f3:30:fc:b3:70:cf:7f:37:f6:dc:4f:f4:a5:e9:8a:72:
         2c:2c:39:8b:c7:48:3a:77:a5:9e:16:e5:3e:b3:2b:63:ca:3f:
         95:49:ea:d7:93:9e:f5:f1:78:be:a9:e2:7c:13:d0:89:97:da:
         e7:a2:09:b5:9c:9f:42:78:b1:06:55:a8:cf:f6:79:09:1f:2b:
         c6:0d:25:14:8b:64:f7:cb:49:4b:aa:a5:83:57:be:65:f7:bb:
         0f:a1:74:b3:e3:db:59:22:62:e7:c0:a4:97:7d:06:1a:7f:0f:
         81:84:ed:b5:6c:dd:4a:33:8e:cd:df:53:8c:ef:f2:32:f7:c3:
         09:0a:53:f5:6c:29:7e:c8:ca:d9:53:e7:06:87:2d:0f:06:4b:
         cc:70:73:90:0c:f5:e3:b2:82:70:58:e7:c6:78:83:7b:34:99:
         e2:c3:be:6c:8a:8b:9f:ad:8f:bd:6b:4a:cc:36:e2:83:bb:40:
         19:f8:9d:bc:5a:7f:38:4c:df:a9:72:36:52:10:3d:e6:24:a6:
         fa:c0:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:47 2026 by rpki-client