Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4640b215-3568-3b2b-b8be-b2dddd0758b7.roa
File:                     4640b215-3568-3b2b-b8be-b2dddd0758b7.roa (raw, json)
Hash identifier:          pwBKJ/oGJpxxlCM4vNvcm3kFOw4byXrXpb6ijJt3qy4=
Subject key identifier:   CD:2A:27:69:BA:6B:0E:79:31:B8:A8:2D:51:04:A7:27:7C:92:B6:21
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD0798DBD71F4D28E8300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4640b215-3568-3b2b-b8be-b2dddd0758b7.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        97.182.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d0:79:8d:bd:71:f4:d2:8e:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=046e0dd4-effb-4c26-9ac7-efa92808a776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:d2:81:2c:6e:6d:68:34:ab:f7:05:6f:52:
                    e5:e2:23:c0:d7:d0:c6:f1:41:13:48:13:d1:78:47:
                    b7:6e:c5:be:66:4d:7d:40:77:0e:f7:f9:f4:6e:83:
                    92:53:14:b3:60:34:88:c9:06:2e:18:5e:0c:e7:23:
                    d9:28:98:eb:b7:87:7c:87:34:8c:85:63:cc:01:f5:
                    84:bc:2d:4d:99:ee:84:b6:fd:d3:94:61:a4:b9:1e:
                    db:d6:4d:9e:68:45:49:86:e2:95:da:56:6e:bb:89:
                    df:4e:35:b9:f0:9f:80:82:82:33:27:c3:e9:89:cb:
                    b0:4e:e0:46:79:6b:f9:3a:d7:4a:e1:c7:cd:1a:6b:
                    67:ea:b0:3a:d8:3a:30:39:2d:81:6f:f4:dc:99:cc:
                    82:82:ed:77:38:d7:6e:5b:ed:41:12:a6:d4:a6:42:
                    17:43:33:cd:26:05:70:2e:52:35:a4:bf:21:ed:82:
                    fe:3e:f8:1f:ed:ad:fb:99:59:f6:88:c7:fa:93:b3:
                    82:0f:7c:a4:46:70:4d:f6:26:32:d7:09:2b:e3:32:
                    2e:c9:5a:50:da:f4:ae:59:bb:48:99:b7:94:37:cb:
                    07:6c:11:19:aa:70:e5:8a:00:fa:e3:8f:4b:2e:f2:
                    7c:a4:16:aa:52:20:40:12:3e:bf:58:de:91:d4:91:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2A:27:69:BA:6B:0E:79:31:B8:A8:2D:51:04:A7:27:7C:92:B6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4640b215-3568-3b2b-b8be-b2dddd0758b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:29:c9:d5:87:a2:23:4f:be:23:0c:d0:8c:5b:41:71:94:
         73:68:47:95:fa:fa:6a:24:a4:1b:b3:67:b4:c2:7d:b6:93:f6:
         aa:6b:57:41:2e:cd:77:cb:36:61:69:89:45:13:7a:aa:70:96:
         e5:18:b3:a1:2c:9a:8c:97:6d:8d:2f:9b:ff:5a:ca:bf:66:d3:
         31:f3:2a:18:0a:8d:6f:ec:c4:b2:95:17:22:8b:a0:a7:6d:a2:
         55:1a:43:e8:d5:a6:6d:7c:57:d2:c3:46:0c:b4:b8:f5:b3:b2:
         b3:18:de:9b:5b:05:1f:56:5b:1f:5f:95:d9:1c:cc:61:18:27:
         43:5e:73:22:f8:35:ef:65:8f:6c:e1:88:0f:06:f4:ad:de:04:
         ca:5f:66:2a:65:a9:73:eb:63:95:76:ea:c0:6d:bd:35:90:c7:
         bf:70:e3:51:aa:38:00:0b:07:51:a0:a1:74:e8:69:07:ca:fe:
         07:48:67:e7:a3:b3:e1:57:d9:4a:6a:78:30:04:af:1e:74:05:
         4f:86:45:2a:6b:37:29:6b:a9:e1:78:d9:76:3c:6a:76:8b:56:
         5d:46:24:2e:07:10:b8:ae:31:f6:a8:82:f3:f6:30:c2:83:f4:
         7c:99:60:07:76:64:9e:73:be:f0:27:9f:17:44:af:40:9c:d7:
         7f:ad:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:45 2026 by rpki-client