Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9001192-964e-3635-b6fc-984ba55a2f8a.roa
File:                     d9001192-964e-3635-b6fc-984ba55a2f8a.roa (raw, json)
Hash identifier:          hzl2Yxv1b7G/JM/uyYv6VB1AaBcR+vYhrINHKs45R70=
Subject key identifier:   38:B6:5F:CC:B7:6B:C4:3B:B5:DA:AA:34:93:6E:BB:51:70:A1:DA:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA788C0734A0CB48CBA701E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9001192-964e-3635-b6fc-984ba55a2f8a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        97.201.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c0:73:4a:0c:b4:8c:ba:70:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e4590c9b-b626-4248-b764-c0c536ab6166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:41:50:25:70:40:16:04:15:67:6b:49:01:
                    cb:5a:7c:25:a0:bd:2c:35:38:67:ca:4a:70:57:ee:
                    b5:ee:dd:29:d8:42:0e:25:6c:97:cc:6e:49:9d:55:
                    22:de:8c:8d:6e:85:b7:1b:f8:7d:98:a0:3c:13:37:
                    ca:c1:66:e2:89:ff:3d:6f:cc:e4:52:70:70:82:04:
                    aa:68:da:0d:37:8f:e5:84:5e:39:29:bb:f2:23:8e:
                    e1:6c:78:a7:a9:d9:37:e5:dd:08:4c:78:89:d8:d6:
                    ae:2d:78:a8:0c:1d:24:d3:6e:bd:20:a0:81:44:b2:
                    8f:63:95:5f:e7:80:10:37:a3:8a:6c:a1:df:35:d5:
                    7d:06:29:69:70:8a:94:a6:ca:24:45:7b:9b:d4:e0:
                    f6:98:84:ec:e9:25:5f:33:c1:ce:27:46:72:12:cb:
                    2b:2b:33:0d:ab:2f:93:28:b0:05:06:a3:73:2c:5a:
                    d8:75:29:f0:52:95:4e:3b:3f:aa:3b:ae:6b:e9:6d:
                    31:59:de:84:13:dc:c3:f2:5a:25:6f:dd:0f:9a:bd:
                    3b:3f:f3:44:54:16:78:c4:9e:1b:1b:9a:2b:60:4f:
                    28:26:20:f8:0b:ba:03:25:6d:4f:1c:58:8d:02:8b:
                    ba:4e:55:d3:2a:71:8f:1f:04:35:e9:be:d2:a2:68:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B6:5F:CC:B7:6B:C4:3B:B5:DA:AA:34:93:6E:BB:51:70:A1:DA:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9001192-964e-3635-b6fc-984ba55a2f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.201.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:18:ba:e0:5d:3d:2e:1c:1d:ac:63:ea:da:dd:5b:5d:d4:b4:
         06:6c:e5:71:01:04:04:97:dd:c9:47:3a:08:8b:a4:a1:ca:d6:
         ff:47:b9:68:95:f1:8f:e0:64:d9:1c:6e:5a:40:d9:b1:17:e0:
         45:c6:2f:c4:72:a1:45:9c:41:93:56:0f:0c:1c:a9:6b:57:6f:
         ef:84:86:1f:28:7e:b3:d7:9f:21:f1:2b:fc:8c:1a:a9:70:38:
         04:97:c9:be:47:ce:ae:fb:94:b5:00:56:76:cc:f0:42:b3:2b:
         99:2b:f9:15:29:cb:5f:42:8e:93:04:89:a1:91:02:c6:05:2e:
         49:c6:6b:4b:ca:4f:f5:45:df:6e:2d:0f:9d:78:7c:c2:07:d6:
         84:1c:ea:fe:65:0c:2b:bd:ae:33:d4:54:bf:1e:7f:de:97:d1:
         78:f8:d3:08:87:b8:42:10:95:76:a0:33:05:bb:da:0d:ab:56:
         35:be:58:55:83:45:8d:96:b5:30:09:6c:8b:78:05:c5:f4:f3:
         0f:00:5b:50:0d:cc:81:fc:57:85:4f:f6:ba:dd:cb:a5:ff:bb:
         ad:32:dd:c3:03:28:38:81:22:c6:ba:f4:00:7a:de:20:a8:64:
         ed:2b:46:ff:1c:4f:79:c0:59:e6:12:3f:02:35:3d:ad:cb:a1:
         5b:2e:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:18:11 2026 by rpki-client