Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c92d5f9-9bee-37a1-8c2e-b0084ea5e291.roa
File:                     0c92d5f9-9bee-37a1-8c2e-b0084ea5e291.roa (raw, json)
Hash identifier:          6bEwYxO7vHbZDjX3HFkDw4+Lw9DsCdVbQgrzdnOSVEo=
Subject key identifier:   63:37:C3:E0:CF:61:F9:46:65:55:67:F5:3D:0A:C0:45:34:14:21:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA78FE1CA99B0996006E07BE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c92d5f9-9bee-37a1-8c2e-b0084ea5e291.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        97.216.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:e1:ca:99:b0:99:60:06:e0:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b674b776-3486-4012-bd31-8fb56fbc2227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:53:8f:2a:f1:31:3d:05:89:9d:3b:e0:1b:
                    05:c2:58:f3:54:71:08:fa:6b:c7:46:d0:30:d2:6f:
                    1e:5f:fc:74:63:23:f4:02:1d:34:8f:da:9a:9e:40:
                    c4:f4:52:e0:8f:b1:d5:69:fb:1b:e9:1e:a4:97:04:
                    5c:9b:66:79:bd:7b:3e:ed:b4:37:27:97:b3:f1:1d:
                    39:e3:e3:18:cf:9a:9b:86:0c:6b:d5:94:ec:17:c5:
                    69:ef:71:ff:56:da:42:90:30:ca:45:45:59:dd:4f:
                    70:de:10:7d:37:c5:d5:d2:a2:4d:57:b7:c4:3b:8f:
                    59:c5:fd:51:29:6a:32:57:51:55:52:df:5c:09:fa:
                    33:c7:b7:1f:db:12:42:22:74:9f:32:72:d9:1c:91:
                    1b:26:82:9e:44:07:00:13:76:9c:1c:76:34:f9:af:
                    47:1e:e9:52:89:20:b7:43:ef:40:87:e8:d6:92:a2:
                    3f:c8:14:05:01:91:66:7a:39:54:aa:20:ed:90:09:
                    7c:a9:c4:d2:cd:be:21:e5:ab:ca:e5:69:cb:24:1a:
                    11:25:26:67:22:b5:71:de:e4:c1:a2:5c:a0:6d:79:
                    14:e8:8f:ae:47:2f:24:71:2e:94:aa:4b:87:a9:cf:
                    25:9a:fd:72:8f:ad:a4:00:25:1b:09:08:e7:4f:cf:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:37:C3:E0:CF:61:F9:46:65:55:67:F5:3D:0A:C0:45:34:14:21:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c92d5f9-9bee-37a1-8c2e-b0084ea5e291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.216.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:f2:65:6d:02:7a:85:f6:a0:82:2b:79:48:b1:dd:68:2a:
         0d:23:10:20:70:ef:0e:91:aa:8f:c9:b4:14:c8:a2:7b:48:05:
         12:ec:97:92:aa:14:36:09:1f:1a:29:a4:22:e5:b2:3f:06:89:
         60:e4:91:91:a1:ea:10:87:b4:b0:5d:80:44:6a:2a:64:87:04:
         8c:6d:3e:bf:0b:60:a0:c4:4b:3a:f4:c9:a4:cb:91:c1:de:9b:
         57:86:f9:a5:38:d0:6c:e9:34:e3:73:40:8d:8b:32:07:45:f2:
         32:b5:5d:93:2a:c0:66:11:8e:91:2b:ca:01:ec:e4:e3:1f:e4:
         26:8f:d7:e3:36:84:92:be:3a:5d:ef:ad:4d:3f:16:a8:3b:ac:
         e5:b9:54:7c:7e:3a:ed:68:01:5b:c2:d6:64:fa:c3:af:fe:bf:
         62:43:ab:88:f2:a2:44:0b:c9:b4:e0:11:2a:ec:ed:c2:36:4e:
         d1:0f:73:3e:69:0c:46:ab:3b:87:24:f9:cf:61:6e:3e:a2:ef:
         48:eb:bd:33:1d:6f:8d:35:51:f8:51:78:c9:57:2d:f4:e6:b9:
         a3:31:8c:9f:96:b0:1c:bc:b5:30:9d:ae:98:57:f1:8b:6f:fc:
         da:c1:e5:aa:08:30:c7:cd:04:dc:22:1d:f3:6e:77:f4:78:c8:
         3a:91:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:10:18 2026 by rpki-client