Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19ed9bc0-8d78-39ba-b01d-5bd1bfbdfa07.roa
File:                     19ed9bc0-8d78-39ba-b01d-5bd1bfbdfa07.roa (raw, json)
Hash identifier:          tp0Vg+yTdfY0MwZgAL6bxYhNN7ncqgj3kfE5XD4Dus0=
Subject key identifier:   0B:32:BF:D1:E4:C2:80:5E:63:A0:B7:DB:0A:28:A6:D3:F7:98:DA:D3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9A7FB0110C9D349DDF23C280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19ed9bc0-8d78-39ba-b01d-5bd1bfbdfa07.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        97.241.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:b0:11:0c:9d:34:9d:df:23:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=47a5ad57-46a7-4cf8-a9f1-7457a1a450b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:cb:5d:26:dd:f3:1d:0f:28:03:bc:8e:91:
                    b0:68:e2:3c:b9:e4:47:b6:08:bb:95:ba:24:44:0a:
                    3c:29:85:b8:b1:b9:83:a1:0c:8f:d6:c6:f0:19:d9:
                    e2:af:99:2c:9c:64:31:b8:ee:99:c9:0f:a9:4e:81:
                    4b:60:f4:3b:b4:17:19:4b:e2:08:df:8a:5c:ea:86:
                    e2:e3:cb:ce:44:69:d2:09:59:e9:5c:45:f8:21:61:
                    0b:06:b0:a8:de:3b:12:1c:89:0f:12:62:06:a5:76:
                    59:af:0c:ba:8e:5e:e5:5c:2c:6f:9b:12:d9:45:68:
                    d9:79:39:5b:73:df:8b:c8:dc:64:c4:b2:29:ab:2f:
                    22:e5:02:f3:1c:d6:57:b0:47:52:f9:2d:e5:39:4c:
                    ba:45:2b:7f:9e:88:91:c4:63:4f:e0:88:70:70:8f:
                    52:97:f5:a6:ff:f0:eb:30:60:c8:c3:65:50:94:cb:
                    be:9b:ae:e9:2e:e5:78:94:c0:98:68:68:47:89:e7:
                    d2:d7:02:28:b2:7d:4d:21:7b:94:d1:0b:70:12:da:
                    6f:5b:11:e0:95:c7:bf:21:e0:5c:80:9b:0e:25:90:
                    e0:03:d2:b0:bf:00:3f:cf:8a:57:1a:40:db:f5:04:
                    bc:3a:b9:c1:6f:5d:2e:a7:a6:3b:8e:91:64:91:d3:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:32:BF:D1:E4:C2:80:5E:63:A0:B7:DB:0A:28:A6:D3:F7:98:DA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19ed9bc0-8d78-39ba-b01d-5bd1bfbdfa07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.241.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:a3:7f:c3:99:70:f8:dd:a1:e7:4e:26:16:e7:d3:42:3a:
         9f:78:6d:4b:b8:10:80:e1:60:3a:0c:8b:4c:c1:b7:a3:27:08:
         13:20:83:d8:ff:74:ce:df:ec:d5:8e:42:00:d0:87:d5:0b:a6:
         cd:c0:33:b3:c0:fe:57:ce:46:19:ee:44:76:43:65:02:9e:65:
         85:7a:4e:2e:e0:13:61:cf:28:83:bc:13:7a:4f:9b:14:f0:b9:
         01:64:51:73:ba:cd:5e:e1:15:6f:13:e4:8d:3e:77:19:36:2a:
         5f:89:62:86:e6:ee:b4:59:9a:65:57:38:83:57:93:55:22:aa:
         5b:ee:af:e4:5f:3a:05:5a:41:0a:5f:bb:d2:98:89:ee:2b:fc:
         91:b1:91:48:6e:b6:55:6c:8f:a7:77:9e:50:2d:20:a5:99:47:
         8e:12:06:9b:e7:26:c2:f7:52:6f:a1:2f:43:7b:54:73:74:21:
         eb:1d:a0:ab:8b:72:fe:38:ab:2a:97:57:d2:17:1a:be:6e:64:
         49:7c:49:56:22:7a:92:b2:a1:aa:66:9a:fd:c6:13:79:85:bd:
         29:51:e0:df:f6:54:67:d0:9b:f8:66:54:35:78:c8:82:27:24:
         8e:5f:47:9e:95:81:1d:d1:c1:42:dd:7f:9f:3c:13:4f:3d:9e:
         17:ea:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:59 2026 by rpki-client