Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e63a235-6978-35d9-92c1-03e14155c356.roa
File:                     0e63a235-6978-35d9-92c1-03e14155c356.roa (raw, json)
Hash identifier:          IuCEOP0hRkNSsa8QFfF17oK9mqLTpCstC87mrQTTc7U=
Subject key identifier:   76:47:0A:4F:98:E0:44:12:3E:A9:B3:97:CD:AC:7B:7F:4F:5F:E5:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDB01F9193590EEB5B85D9540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e63a235-6978-35d9-92c1-03e14155c356.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        97.193.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:f9:19:35:90:ee:b5:b8:5d:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=24d61b4e-3d87-4c50-b7ff-38001d85088c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5b:2b:26:fc:c6:c3:fe:01:f9:a7:57:44:92:
                    0a:a9:ca:45:82:ba:31:fe:de:62:d0:cb:79:a1:b6:
                    d1:29:06:6b:e8:d7:51:2b:18:53:5b:d4:24:02:02:
                    b3:cf:e3:da:f0:6d:3b:e7:be:69:7d:b2:63:a9:65:
                    33:7e:6b:51:8d:4e:a6:67:0a:a8:43:82:35:05:95:
                    3b:05:14:4d:0a:54:a6:b5:c4:fb:97:6f:83:d4:0c:
                    4b:c3:af:9a:bf:0b:a6:ec:de:44:3e:8e:05:5d:b7:
                    d6:55:78:e9:ab:5a:22:d2:43:36:2b:ca:53:fe:9b:
                    46:cc:e7:d9:67:cf:3d:a1:88:c6:77:d5:c7:ea:6d:
                    2b:8d:fd:9d:14:04:30:b7:69:ec:7c:e1:07:50:25:
                    d5:b0:03:b7:1e:d0:41:4f:21:86:86:f4:64:d3:22:
                    c1:af:79:94:d8:ba:ae:19:66:d9:d3:88:dc:1f:da:
                    84:0a:cd:1b:4a:f1:31:a7:0f:22:a2:ee:fb:59:e2:
                    02:a2:1b:91:4e:04:dc:9a:be:00:39:70:31:27:a8:
                    7f:67:78:e4:25:74:50:1a:21:47:29:b7:54:e7:6c:
                    6c:60:51:24:c0:fd:1e:06:2b:37:d0:42:ff:df:30:
                    0f:5e:8e:86:80:72:46:bf:2c:6d:b3:12:e7:9c:7a:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:47:0A:4F:98:E0:44:12:3E:A9:B3:97:CD:AC:7B:7F:4F:5F:E5:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e63a235-6978-35d9-92c1-03e14155c356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.193.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:90:b5:26:2f:85:35:67:b9:96:56:02:f2:6f:6d:23:57:f3:
         be:26:22:be:21:8b:ce:3b:68:0c:42:e4:8d:54:d4:cf:04:30:
         d4:20:6e:03:82:c3:27:2d:cc:76:1f:3d:77:d7:ee:7a:1e:c2:
         e8:84:1d:7b:09:4e:5a:f0:48:84:ba:c4:fa:d6:78:cd:8b:12:
         b4:80:85:4a:19:65:35:b2:2d:75:38:79:a7:5b:62:d3:96:61:
         b5:24:70:db:de:97:31:be:e2:2b:76:d5:4d:0b:43:71:76:dd:
         91:b1:d0:5e:32:7a:13:c6:64:5b:96:a1:2d:e0:9d:61:bc:4d:
         7c:b5:91:82:f5:62:f9:12:3d:ce:d9:0e:4c:7f:b0:6d:38:70:
         73:a6:be:6a:e9:67:c4:3c:f5:65:33:57:25:09:0b:7c:5e:25:
         36:9b:12:bf:be:63:9e:82:79:27:d1:9b:af:64:13:9f:ef:1e:
         37:c2:3c:82:a4:ec:ee:b3:15:de:57:5c:75:c6:cb:23:1b:52:
         a6:2c:94:dd:6c:b2:1b:fb:bf:a2:90:04:6d:59:ff:a4:8b:88:
         99:62:bc:82:e8:8e:b0:07:49:dc:a4:8b:db:8d:88:60:bb:b0:
         79:68:9a:78:75:b3:a1:cd:95:87:2e:cc:68:71:29:00:16:53:
         ad:c5:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:18:24 2026 by rpki-client