Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67bd2388-101d-369a-b707-5ec32bf31731.roa
File:                     67bd2388-101d-369a-b707-5ec32bf31731.roa (raw, json)
Hash identifier:          ZF+8gQolFJPQKc1N9bwXX/7nP+KOZEa/nb7OcCJv3Hs=
Subject key identifier:   6A:7A:C5:68:4C:88:EE:71:E4:B1:D4:B1:E4:D2:A7:83:44:D6:E6:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7900C2BAB4815F2CC89D040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67bd2388-101d-369a-b707-5ec32bf31731.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        97.208.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:0c:2b:ab:48:15:f2:cc:89:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f8c47424-8758-441e-b17d-448923608445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:7c:1c:44:d1:77:98:94:e5:26:e6:d6:a7:
                    22:fa:43:c8:2d:59:7d:43:c6:3c:20:c4:df:17:fd:
                    fc:e6:eb:fd:cb:84:67:b6:c0:ae:5b:b8:4a:1e:d0:
                    4d:a8:e7:03:52:07:e1:24:9b:a7:19:ce:77:ee:25:
                    bc:63:39:60:2f:e0:31:54:8a:f6:89:68:38:11:2a:
                    d7:dc:50:b8:30:19:b4:6e:11:7e:56:2f:bc:a0:c5:
                    1c:77:cc:4e:9a:4b:51:a3:f5:22:0c:67:41:74:68:
                    ba:13:79:ba:19:ee:11:5e:05:82:a4:1d:cc:73:d6:
                    05:03:9a:8b:61:c9:c8:ef:ae:a7:ae:65:17:c4:b1:
                    15:b9:48:6d:3f:c7:e4:56:b0:07:3a:02:b0:2a:f5:
                    23:23:e5:30:4a:f2:72:8d:be:89:f3:a4:c5:13:3c:
                    38:27:50:21:93:2f:a6:12:83:f3:88:62:48:eb:e4:
                    ec:93:c3:d8:59:00:b4:cf:d6:ef:ca:7f:c1:28:48:
                    bd:7f:9b:2b:a6:20:d4:ee:3a:74:49:de:07:ef:d4:
                    b1:b6:cd:bb:c9:58:f5:1c:24:df:f7:b4:b3:07:54:
                    01:6d:70:03:7b:a8:a9:8b:9d:28:b6:76:d7:f9:86:
                    b9:f4:f3:23:39:bd:41:4e:f6:ba:01:6d:54:12:0a:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7A:C5:68:4C:88:EE:71:E4:B1:D4:B1:E4:D2:A7:83:44:D6:E6:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67bd2388-101d-369a-b707-5ec32bf31731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.208.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:26:e8:59:80:cf:76:9c:06:cf:dd:46:c8:93:0b:62:18:6d:
         32:92:ae:10:91:25:f8:da:90:cb:36:b6:63:0b:1c:9d:61:c8:
         c5:bb:8c:83:c1:90:e6:a7:ad:76:60:ae:3e:49:d0:b2:dc:7b:
         97:dc:b9:fe:73:79:08:55:ce:50:60:27:f7:47:4c:71:7b:d4:
         64:58:39:14:66:41:eb:c3:75:68:4f:b6:8d:11:13:7c:8d:0b:
         af:2a:98:28:a6:3b:21:e9:af:e5:7b:8f:e1:ed:5e:5d:a7:2a:
         0b:e9:da:8c:61:a9:ef:fa:f0:23:9b:61:fa:d6:e7:63:e7:2d:
         e4:f2:cb:a1:1b:40:0d:80:b0:b8:93:04:42:2b:64:4d:cc:38:
         0e:18:3a:67:17:22:17:c7:08:1c:eb:4d:f2:45:f2:f6:dc:97:
         79:6c:00:bd:fa:7e:ce:bb:1e:7e:08:21:4f:2e:50:16:92:0c:
         02:dd:57:f1:6b:33:c4:ad:40:5d:a0:02:1c:3b:ab:17:92:06:
         bf:20:ec:51:b2:e9:b9:fc:85:b2:7e:8b:89:c1:ff:52:63:44:
         ca:a0:f3:0f:a4:0f:43:7e:f4:71:d4:84:19:5d:fc:49:86:7c:
         34:92:64:13:73:2f:8c:73:3d:5d:31:28:7d:04:cf:26:c2:a7:
         46:86:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:04:27 2026 by rpki-client