Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4068e8d1-a0b2-3856-a3f0-26d85db6a5f0.roa
File:                     4068e8d1-a0b2-3856-a3f0-26d85db6a5f0.roa (raw, json)
Hash identifier:          CcupVwKey9Bf4JN1BYriSXg9R63U72fI09MiR2KmoPc=
Subject key identifier:   5C:01:DB:FA:D0:18:27:A6:58:FB:C1:B9:70:7F:BC:D6:D2:83:49:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4C3D3A2B5942CEAF91579000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4068e8d1-a0b2-3856-a3f0-26d85db6a5f0.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     6167
IP address blocks:        97.204.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:3a:2b:59:42:ce:af:91:57:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=8ebfb7f7-bf11-468a-950e-98343b2684e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:15:e1:f8:66:53:8b:01:61:06:ec:7c:f3:
                    03:b1:a9:1e:c0:bd:94:99:be:93:40:2e:96:28:8d:
                    89:b3:54:90:7c:69:63:5f:38:1d:30:dc:51:f4:0a:
                    7d:d2:42:b7:b3:8d:35:9a:94:23:94:8a:b1:4c:9d:
                    b0:88:59:a4:f4:f0:93:8d:71:7b:02:a4:fc:8a:47:
                    b5:50:d8:d5:ab:83:d5:c0:88:ed:e9:0f:07:d3:3d:
                    3a:91:fa:d3:8a:1f:39:34:ed:84:9b:83:48:2b:77:
                    bf:16:b0:84:70:8c:05:94:f9:b8:b2:9e:22:4f:67:
                    7c:93:8c:dc:7e:5d:e7:2a:24:f2:54:00:10:4a:d9:
                    58:bd:72:52:c3:19:20:4d:6f:36:b5:c2:1d:20:10:
                    ac:2c:1c:5d:8d:f0:32:c3:d2:58:ea:a3:5d:bc:d7:
                    38:14:01:d3:eb:a3:24:0b:c7:cc:63:06:94:40:f2:
                    37:30:c8:2a:4f:bc:86:67:52:e9:9c:a0:de:f2:b8:
                    4d:29:a6:51:d0:86:b9:a8:c8:67:c4:6a:fb:3f:c8:
                    40:a8:22:2d:2b:82:15:c0:85:76:c3:c4:24:57:d9:
                    47:46:5d:80:56:68:9f:2f:37:77:d2:3b:1f:41:8d:
                    d2:2e:65:bc:75:55:09:c9:89:65:18:55:44:9b:7f:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:01:DB:FA:D0:18:27:A6:58:FB:C1:B9:70:7F:BC:D6:D2:83:49:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4068e8d1-a0b2-3856-a3f0-26d85db6a5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.204.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:de:95:2e:45:40:18:0f:f8:94:ee:af:4f:f2:06:bc:4a:eb:
         0e:57:33:21:80:b1:82:e6:f3:29:f1:a0:99:50:5c:e4:fc:5e:
         18:60:a6:28:84:f5:a5:94:dc:b5:73:34:e0:84:73:ae:ac:9a:
         4d:e8:34:ac:bc:e5:b0:28:ea:2d:ca:a1:e2:30:a3:41:5a:7c:
         06:34:83:3f:0d:1e:17:5d:f1:ca:71:3a:e8:98:f2:68:39:82:
         a6:e3:c5:f0:48:ed:1e:3c:e9:3c:40:e8:67:56:03:e2:2f:5d:
         c4:fe:28:67:6d:d2:c7:3a:5a:0a:ac:c9:61:0f:00:c2:a4:e0:
         cf:3e:ba:cb:cd:1c:e5:2d:9a:27:7c:9e:c8:a9:ea:e0:ed:55:
         72:57:85:b8:30:13:58:eb:ea:82:c1:cb:0e:82:c3:e3:91:23:
         28:3b:8a:d9:13:8e:6f:09:8d:1a:c9:4d:cb:2d:f3:d8:01:f2:
         a3:89:11:5d:23:22:ea:5b:6a:fa:64:a8:07:56:73:5a:70:0c:
         f1:1c:e7:d1:7c:91:5b:dd:9b:ac:81:5c:47:d8:89:98:fd:51:
         fd:23:ba:18:1a:52:f9:d4:cc:35:c0:d4:26:18:5c:ce:2f:b0:
         1d:63:10:3d:07:1a:79:fd:44:96:ed:32:70:31:c7:f2:0f:ed:
         3d:f1:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:36:14 2026 by rpki-client