Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/97e9d611-40e4-3b07-810e-c664531a71cb.roa
File:                     97e9d611-40e4-3b07-810e-c664531a71cb.roa (raw, json)
Hash identifier:          Q+1BT9hXwa6jNfByRxDF2i9OhXZly0RNHFgWDIkllRQ=
Subject key identifier:   66:DF:74:41:4C:E6:3E:22:FF:13:D3:13:87:E0:43:A6:97:93:67:FC
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E2809BE628BC2E7811ED6C300
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/97e9d611-40e4-3b07-810e-c664531a71cb.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     23473
IP address blocks:        173.230.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:be:62:8b:c2:e7:81:1e:d6:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=96982ee9-f673-4b15-aa3b-7b0a95711ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:15:97:62:94:3d:26:27:81:3c:d5:0b:40:e8:
                    7d:be:e3:e8:84:8e:b7:7f:4e:4b:3e:6e:6d:1b:57:
                    27:4f:97:9b:78:ad:d9:04:fd:49:1f:e2:02:b4:0d:
                    f8:7e:f2:60:0c:d1:c9:4b:0b:61:3b:d6:c4:4e:11:
                    b2:7b:9f:d8:cd:20:66:69:29:55:42:b5:3d:0a:73:
                    37:d9:e5:d8:7f:b4:e3:7b:7e:26:f8:b1:55:20:24:
                    e7:04:fc:f7:7d:ce:e5:d1:48:e0:b1:09:b4:95:6f:
                    02:6b:d9:05:5d:02:72:0b:31:b0:30:b8:57:93:ec:
                    14:21:ef:15:88:d5:a1:3c:ba:67:73:93:18:c6:46:
                    af:8e:01:ae:22:dd:12:b3:ea:5f:43:f7:7f:ba:34:
                    2b:92:8d:39:11:59:1d:1b:6f:9d:76:e9:e5:85:f4:
                    b9:07:26:ac:89:47:d8:7e:90:b3:16:2f:f6:79:e9:
                    10:c1:e7:b3:81:70:29:6a:c3:62:5d:41:ff:97:75:
                    0d:99:2a:f0:96:37:79:01:35:38:cc:7d:53:6a:5c:
                    77:94:09:b3:31:03:0f:67:91:2f:d6:91:bc:6a:52:
                    1a:f9:65:7e:f6:49:98:39:df:02:49:45:d1:eb:19:
                    3a:f6:ce:8d:34:d6:09:7e:a9:4c:bd:d0:d2:08:e7:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DF:74:41:4C:E6:3E:22:FF:13:D3:13:87:E0:43:A6:97:93:67:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/97e9d611-40e4-3b07-810e-c664531a71cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5d:4a:b8:d6:1e:77:93:10:7f:bb:2c:d7:72:a1:5a:61:de:
         a8:11:bd:72:40:5d:c2:cd:0b:e2:9f:d0:4e:cb:d4:4f:42:a0:
         42:ca:3c:25:15:f0:e5:e9:5f:e4:6b:de:5d:4c:e5:3a:e8:d8:
         5f:3e:aa:88:11:bc:d7:64:06:48:6f:2d:cb:36:56:b6:f4:64:
         ab:8f:56:48:28:98:4b:85:3f:0c:e0:57:c0:d4:fb:9d:ec:9f:
         bf:45:e3:58:bf:a7:cb:0c:d8:70:67:50:3e:54:cb:81:90:f4:
         ed:a2:83:f7:f4:8d:50:33:c0:69:c6:b7:1a:60:30:68:c0:00:
         4b:2f:52:0d:3d:a3:ea:e4:28:e9:5a:8b:d1:15:68:9c:dc:41:
         3d:24:50:10:ac:b0:e2:35:c0:54:2f:bc:30:d0:70:05:03:fb:
         87:51:6d:73:a3:a4:4e:26:e8:32:f6:8b:64:eb:10:fe:a8:2d:
         ae:63:bd:80:39:75:88:9f:8a:94:48:37:d4:4f:f6:62:d8:9f:
         08:26:f8:e1:c6:28:44:39:d2:54:a3:02:26:d4:2d:46:fd:bd:
         47:15:6b:fc:17:ce:64:6c:8c:e5:1c:da:90:24:be:c8:95:dc:
         8c:c2:46:18:33:6b:50:37:aa:eb:8b:14:98:f8:f8:9c:49:44:
         f2:3a:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:33:53 2026 by rpki-client