Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3044b90-2334-37f7-8a3a-78d8494bf4ee.roa
File:                     d3044b90-2334-37f7-8a3a-78d8494bf4ee.roa (raw, json)
Hash identifier:          aTvUkeee98k2sGv56I0X2pVXlYr9r+6rprmInma2LLM=
Subject key identifier:   92:C6:00:73:05:C6:ED:0B:7F:9E:CD:B5:DC:99:81:89:BB:28:53:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F067253E2095BC9A5C440AE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3044b90-2334-37f7-8a3a-78d8494bf4ee.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.128.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:53:e2:09:5b:c9:a5:c4:40:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ea2753ea-e10e-4768-b1f2-1218e52451d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:ce:03:11:6b:1c:37:49:f4:a3:5b:01:33:
                    80:03:53:41:c1:8b:31:da:28:06:db:93:f5:bc:39:
                    bb:85:1b:26:53:69:0c:92:8d:82:df:8b:85:ee:b3:
                    87:04:ff:c1:eb:fd:2b:3b:af:12:07:3c:d1:e9:c6:
                    34:17:75:91:f1:34:3f:1f:08:ea:a1:d3:74:5e:8e:
                    09:45:52:65:f5:50:fb:a5:6b:18:f1:5d:04:bf:b7:
                    fe:02:00:af:b2:8e:b0:03:06:45:3e:ed:f3:1c:af:
                    de:c8:51:ce:3d:cb:91:84:9f:c8:3b:56:14:76:97:
                    8a:7d:b4:48:60:b3:e4:03:e4:19:dd:bd:39:8e:be:
                    84:27:07:04:81:22:9f:7f:a3:46:ed:4b:ff:e5:3b:
                    dc:18:aa:cd:be:65:81:62:5f:70:1f:29:8d:3b:23:
                    e9:15:a0:a5:58:e7:15:9d:47:81:1e:4d:b7:1e:d7:
                    b6:86:48:2c:07:63:7f:40:f1:13:32:f2:dc:dc:12:
                    fb:96:85:d5:5e:19:36:e8:73:77:ac:e6:e4:99:58:
                    cf:44:8b:c3:2d:a9:fc:d9:3d:72:51:61:0a:67:0d:
                    63:15:41:ab:d7:f9:99:ae:69:ce:2b:bc:c7:3e:b5:
                    12:e8:a3:15:e2:58:ee:28:4f:26:e5:e7:4b:02:67:
                    0d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C6:00:73:05:C6:ED:0B:7F:9E:CD:B5:DC:99:81:89:BB:28:53:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3044b90-2334-37f7-8a3a-78d8494bf4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.128.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:f0:53:d2:26:f5:8f:24:aa:33:10:d7:40:98:69:45:bb:
         8f:84:f9:5d:58:93:26:65:72:9c:89:7e:b2:4a:a8:d9:58:e2:
         68:80:af:5b:2d:2c:91:00:04:0f:44:99:6a:85:3a:35:6a:07:
         e7:56:18:84:29:aa:95:a0:d0:fb:29:51:79:ed:76:ae:d0:5d:
         70:81:4c:ec:ec:0b:20:de:67:dd:df:d9:5e:b0:3e:88:0c:58:
         7d:74:de:f0:a6:40:2d:cb:53:34:3b:dc:dc:86:81:7d:33:72:
         ce:7f:72:cb:f8:76:da:37:04:28:e5:ef:7b:cd:f0:a4:d6:39:
         ff:cc:70:00:03:81:21:8c:7c:39:c5:5f:03:fb:b7:45:db:ac:
         a2:b6:ef:79:82:64:c0:9d:2f:41:70:d7:bc:3e:4a:92:db:89:
         38:56:68:51:4d:fb:98:89:d4:60:62:40:2c:0f:8d:7f:e9:a6:
         f7:6e:fd:79:fa:cb:51:93:01:d5:c2:17:7b:f7:4e:0f:63:89:
         ba:fd:39:3f:bc:a0:8a:2d:7e:ee:99:86:b9:17:a2:21:b3:1f:
         59:ea:5e:15:19:b0:e0:7c:d5:64:64:c3:20:3f:6a:e0:ca:b8:
         16:ad:1b:9e:80:08:5d:71:54:3b:7f:9d:2b:de:08:f2:a8:33:
         42:19:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:35:54 2026 by rpki-client