Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5bac686-9016-351f-bebb-d30663e4a5c6.roa
File:                     e5bac686-9016-351f-bebb-d30663e4a5c6.roa (raw, json)
Hash identifier:          DVzst9MdwNxXiFcMs09Jn0hpaARcGE/wQx9FrRyM3D8=
Subject key identifier:   8F:13:95:A1:DF:6B:C6:29:99:F4:7F:B0:32:A7:73:62:C8:17:98:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584FA85E08C9CC3BD46432CFCA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5bac686-9016-351f-bebb-d30663e4a5c6.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     6167
IP address blocks:        97.154.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:08:c9:cc:3b:d4:64:32:cf:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=551b8b00-5448-4ae4-a42a-5281dbaea3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:77:a5:d2:74:ae:5c:a8:3e:1f:be:97:a1:
                    df:54:19:59:9a:ea:50:7b:32:ef:ca:dc:d5:fa:9b:
                    45:1a:eb:e4:84:20:70:f3:47:97:80:11:80:c7:be:
                    1b:f8:24:68:b2:ee:13:03:81:f4:ee:a5:ce:9a:5a:
                    90:4d:a3:e1:a8:95:1f:ea:75:5b:7e:f4:dd:67:ee:
                    98:4b:16:25:b8:23:ae:75:5f:54:a0:8e:af:ed:94:
                    02:bf:fa:52:ff:e5:03:39:b0:de:f3:bc:62:55:a0:
                    ff:d8:4f:44:05:f5:d7:46:b9:bb:58:48:b6:7e:05:
                    ff:8f:92:5d:b9:31:85:29:9d:c7:53:4d:0b:47:79:
                    d1:3b:70:c7:43:53:63:96:55:80:36:b3:d4:e8:18:
                    2c:f4:7f:57:59:c3:3e:ec:40:c2:fd:1c:cd:32:9e:
                    1e:ad:44:64:65:c6:5b:72:b4:46:c9:14:98:03:25:
                    8a:2c:e1:f6:d5:a8:6d:5c:28:56:57:f7:ed:39:d3:
                    20:0c:98:fb:8c:58:df:22:9a:93:b1:ff:12:98:11:
                    ea:bf:be:ad:22:1a:d4:04:87:7f:e2:ee:e8:a4:e3:
                    f7:ee:9a:87:18:b8:23:62:e8:f1:7e:25:75:8d:8c:
                    e3:8f:4e:f5:c7:1e:8c:1b:11:72:fc:77:05:e3:b5:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:13:95:A1:DF:6B:C6:29:99:F4:7F:B0:32:A7:73:62:C8:17:98:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5bac686-9016-351f-bebb-d30663e4a5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:a7:e4:31:19:0f:7a:43:a9:cf:0d:12:3f:b6:b0:ef:7a:
         00:e9:3a:cf:ee:ca:c6:30:98:0e:eb:6d:d8:19:bd:9f:07:e0:
         1f:0b:cf:f6:a4:bd:53:ce:77:df:59:96:dd:42:8f:0b:5c:55:
         89:f3:fa:6f:b8:f0:63:99:d9:b4:ac:59:2b:89:5c:25:7f:19:
         58:b5:8c:e0:5e:e4:cb:1b:10:52:b2:39:2c:8b:e8:ca:ba:58:
         77:2c:3c:2b:94:48:a4:e3:28:b7:b8:1b:f4:9b:70:be:1c:b2:
         2f:a8:57:eb:ec:86:4d:3b:0f:89:84:68:27:31:29:15:9c:cc:
         2a:7e:c1:11:25:d3:12:a0:28:3c:b1:d2:ae:55:54:9c:3a:45:
         49:dd:05:86:31:7c:4b:01:ac:92:9e:f2:59:96:85:70:7c:87:
         66:ed:85:aa:17:8a:1d:55:10:ed:bb:0b:c6:7d:f9:c3:08:dd:
         2f:a2:41:de:79:cd:49:f4:68:a7:03:cd:5d:e5:63:d8:a2:d9:
         06:8c:c6:b2:e2:c2:fb:d8:07:ca:f5:0d:e4:6d:71:5e:7f:4e:
         6b:40:d6:b2:2c:16:ae:ba:29:8f:78:df:c2:11:d8:56:9b:66:
         5a:c1:87:aa:84:db:41:73:0d:41:f8:7c:bf:e1:6a:81:8b:da:
         94:8b:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:53:19 2026 by rpki-client