Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09cd1edd-5679-34ae-a434-0e57e54819c9.roa
File:                     09cd1edd-5679-34ae-a434-0e57e54819c9.roa (raw, json)
Hash identifier:          ivYNWqsKFKx1+yYvsWhL0rpLokcNkFWJZJ7Y+jDj4Q0=
Subject key identifier:   8F:54:9B:1E:7F:30:A1:0F:E9:F9:31:37:3F:5D:76:89:C5:FF:42:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDB01F962E98B4249CFA6DC18
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09cd1edd-5679-34ae-a434-0e57e54819c9.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        97.193.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:f9:62:e9:8b:42:49:cf:a6:dc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=b3d0e97f-8a33-490c-8914-4b4002154db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:ab:5c:96:a5:bb:28:93:70:06:da:be:8c:
                    e2:5b:ac:51:cc:e7:95:9d:74:e8:66:05:b8:bd:8d:
                    ef:5b:7c:bb:49:5a:87:47:80:eb:a8:48:94:c2:09:
                    1e:7c:fc:39:6b:5a:a5:9c:38:c7:e1:70:48:ef:f4:
                    8a:9a:7e:e7:f4:b4:b1:44:da:93:e2:90:b2:58:17:
                    3c:fb:27:a4:5a:b9:51:3c:b6:04:43:34:4c:51:58:
                    21:76:29:32:00:e5:e4:07:3e:bb:49:6d:de:f1:cf:
                    19:3f:6f:b6:5c:4b:ca:1e:06:f8:71:a1:f2:27:ea:
                    84:00:1d:ff:bc:d5:4f:31:b9:cf:d9:4a:fb:ac:29:
                    99:e6:5b:78:a9:ba:50:70:6e:ad:1e:d6:80:b5:53:
                    f4:02:0f:03:83:65:53:4d:76:92:4b:2d:5c:cc:43:
                    73:f2:72:06:1c:29:02:49:eb:fa:c5:7d:64:f1:23:
                    d4:7e:cb:fd:ba:46:a2:a9:2f:6a:a8:4e:5d:f9:9d:
                    1a:ad:7b:50:dd:72:64:7d:aa:2c:e9:c1:a5:21:d1:
                    85:0b:6a:2e:02:c8:6d:41:2c:8e:63:d8:51:f3:e7:
                    34:4e:76:08:98:3a:41:ff:11:03:db:2f:af:5f:2b:
                    5f:06:b4:65:c6:02:f9:51:ba:96:84:25:32:97:ad:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:54:9B:1E:7F:30:A1:0F:E9:F9:31:37:3F:5D:76:89:C5:FF:42:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09cd1edd-5679-34ae-a434-0e57e54819c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.193.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:0f:08:3f:a2:c8:89:ae:d6:83:d1:22:9c:fe:49:52:8c:
         13:8a:68:a0:81:eb:b0:c6:72:20:56:fa:92:a6:18:cd:15:5b:
         95:00:5a:0e:c2:7c:b8:97:56:c5:34:ef:35:68:93:76:e0:e6:
         ad:21:99:fa:79:72:a4:ae:64:31:05:7b:22:7a:35:4d:a8:cb:
         2f:8d:57:d2:88:79:83:97:b4:4f:08:42:fd:00:e9:f1:f5:f5:
         a3:5c:c9:8a:fa:2b:3e:1d:fd:2b:f8:63:fc:e0:f7:61:7c:4d:
         10:06:95:67:bd:88:a8:61:7f:59:ef:33:d7:91:86:5e:20:33:
         2e:b0:bc:f7:89:00:30:58:0c:db:dc:34:e2:1c:7f:5e:19:15:
         a5:bf:f2:25:3e:3b:b9:e3:72:8f:40:1b:7a:60:56:34:de:9b:
         8a:94:41:d9:f2:61:0f:73:91:72:fa:bc:0c:0b:20:08:0a:c7:
         69:b3:03:c0:c7:f3:5f:c4:95:9a:5d:a9:96:a2:da:7a:59:cc:
         7d:e4:09:c2:57:46:50:c0:97:76:9d:5c:f4:68:53:29:22:3c:
         2a:3a:ef:d5:82:63:2d:9d:7e:cc:b0:eb:e8:50:40:d7:59:81:
         bf:27:5e:b2:b3:91:ff:b3:ed:6e:69:dc:d1:d9:4b:72:ce:34:
         21:d1:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:16 2026 by rpki-client