Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4b8e33f-6cdd-3d6d-8b8d-ef967d2174d1.roa
File:                     f4b8e33f-6cdd-3d6d-8b8d-ef967d2174d1.roa (raw, json)
Hash identifier:          +ZmuMBH5XycPvFeduW76Ky+++zJnogHyZPfarzhjK4o=
Subject key identifier:   BD:38:B6:DA:96:C8:FC:E1:B8:87:E4:58:44:9C:76:1A:D7:F0:28:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584FA85E05EA294ED6C316C0F600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4b8e33f-6cdd-3d6d-8b8d-ef967d2174d1.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     6167
IP address blocks:        97.132.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:05:ea:29:4e:d6:c3:16:c0:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=607f83ae-c92b-434a-b099-cd65bc62c7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:e8:0f:be:ee:78:f9:34:c4:33:d7:26:a8:
                    0e:ca:39:b8:a5:51:06:ae:6e:64:93:71:1b:82:d5:
                    fe:cd:a3:ac:35:e3:73:a6:dc:1a:f0:0e:91:85:8d:
                    fc:6a:09:c2:cb:ad:27:5a:04:b6:12:81:2d:1f:6d:
                    f8:89:45:f3:f7:f7:9e:ce:6c:14:c8:a2:54:45:24:
                    38:17:a8:35:f9:02:e3:2a:af:fa:4c:d4:c6:52:6c:
                    1c:28:b8:5a:93:1a:36:50:62:84:a3:1f:9c:77:f0:
                    ac:ca:aa:4c:19:f9:1f:87:8b:62:6b:13:8d:67:cb:
                    01:58:65:c8:34:3c:4d:46:48:0a:ea:35:a5:1c:e4:
                    36:3f:63:91:1c:d8:ca:ae:d6:b2:e5:54:ce:8c:d6:
                    24:7c:bf:f9:29:16:ad:5b:31:d6:0f:57:c6:e0:4f:
                    ce:14:29:07:71:4b:16:e1:3a:90:61:09:53:5b:cb:
                    b4:9e:bf:cd:da:b9:57:21:d8:09:e0:2e:e8:7f:8e:
                    19:26:ba:52:67:a6:78:48:b0:17:f6:ad:ce:c5:48:
                    c4:35:6d:74:08:78:9e:fc:a3:c7:a1:92:32:27:20:
                    c5:aa:1a:1d:37:91:34:08:d6:d5:20:52:ae:2e:df:
                    17:81:0f:48:d8:e1:d1:a0:b3:f4:df:62:e7:28:42:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:38:B6:DA:96:C8:FC:E1:B8:87:E4:58:44:9C:76:1A:D7:F0:28:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4b8e33f-6cdd-3d6d-8b8d-ef967d2174d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.132.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:5b:de:d4:d1:2c:fe:0d:98:3b:28:66:89:c3:5b:52:ad:
         a2:0b:3e:95:73:80:7c:e9:49:e7:0e:8f:f0:64:70:0b:1b:f6:
         ad:ce:7a:e7:52:6e:43:5a:9b:96:9f:84:8a:f8:46:88:cc:97:
         ec:7e:bf:f2:81:af:1d:48:c1:a0:4d:47:ec:58:40:ff:4c:cd:
         bc:78:9c:ae:d7:91:3a:fc:11:a3:8d:05:4f:a7:70:44:d8:25:
         c8:97:07:32:86:e1:7b:71:4a:49:05:9f:97:84:81:d2:94:83:
         9c:f0:5c:e4:84:08:45:fb:1c:d5:b8:e9:c9:42:79:df:11:17:
         3d:76:be:49:4b:47:12:de:1d:d8:b8:70:43:e4:61:b1:87:a8:
         fe:62:b3:79:ad:55:1e:f3:da:4e:a5:01:2e:3d:d2:28:dd:21:
         8d:e5:f2:7c:73:70:c7:2e:c8:6e:93:d4:d5:08:de:c7:75:8c:
         a6:44:f9:f4:55:b2:54:29:dd:9b:c7:b4:b6:a7:9d:73:90:ba:
         14:53:b9:a7:8f:03:ed:f8:d4:00:74:65:3b:0e:b2:a9:26:d7:
         f5:9f:f2:6b:fd:1d:cb:da:14:0e:30:26:2a:90:3e:b6:ee:d0:
         96:5c:57:fe:86:f1:40:ef:ee:bf:f4:9e:1c:ad:ae:8f:3c:a8:
         65:33:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:52:28 2026 by rpki-client