Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7290ec63-ac9f-3d02-8d4c-a0b36696b72a.roa
File:                     7290ec63-ac9f-3d02-8d4c-a0b36696b72a.roa (raw, json)
Hash identifier:          +aTeI4ppgLvLTV7eXXkZT3xQviwJyPRY9dNi8C2Xm3I=
Subject key identifier:   98:6C:09:EA:89:1E:07:D3:EC:ED:07:47:BD:EA:6F:A7:FF:E3:5B:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3E48059479C572F6452B3380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7290ec63-ac9f-3d02-8d4c-a0b36696b72a.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     6167
IP address blocks:        97.192.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:05:94:79:c5:72:f6:45:2b:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=1432a557-f241-4796-aa08-43ec479b9f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2f:4b:9d:a4:a4:59:c7:22:32:07:03:2a:d7:
                    6f:7e:4c:13:46:b5:ae:c7:fe:26:2b:07:70:63:fc:
                    fd:2b:a4:38:ef:b7:bd:76:05:3d:d9:08:30:db:f4:
                    89:94:ef:55:11:3a:f1:df:81:7e:7c:b9:11:5b:77:
                    3e:98:2a:63:a9:a6:b2:4c:8a:a6:25:ea:e6:de:d5:
                    6a:e9:4b:59:c4:0f:b1:91:f0:e5:ed:0d:f5:15:18:
                    b0:db:77:17:9b:33:e0:86:1d:19:a5:7c:da:83:2c:
                    d0:7e:15:2a:83:af:3d:dd:35:c7:e9:1d:5a:f2:4e:
                    6f:70:8b:4b:b7:3c:31:32:e2:19:a5:bf:74:e2:97:
                    5b:f5:bc:73:d6:72:16:9a:5f:89:8d:5e:70:d3:d8:
                    0b:db:2b:8c:fe:33:f1:69:cf:e3:e8:34:90:eb:ba:
                    cd:f1:6f:2b:28:6a:89:4c:51:1f:80:27:c9:82:60:
                    8b:91:45:50:09:a0:2e:b3:60:45:4b:00:ef:dc:26:
                    78:0f:63:33:63:ea:ba:f7:d3:3e:32:b6:65:25:d2:
                    35:5f:ae:e7:10:f7:cb:3b:50:b8:d9:59:99:dd:7d:
                    ea:90:87:79:df:17:97:42:15:09:f9:2a:0d:71:c3:
                    a7:be:e6:0f:60:45:4e:a9:ef:21:f9:d8:71:b2:1c:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6C:09:EA:89:1E:07:D3:EC:ED:07:47:BD:EA:6F:A7:FF:E3:5B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7290ec63-ac9f-3d02-8d4c-a0b36696b72a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.192.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e4:64:f1:48:e9:0d:05:f4:fa:61:af:2d:03:89:f1:4a:1e:
         fd:e3:8e:8b:2d:dc:de:87:1e:82:0b:6a:03:14:c2:7d:e7:1b:
         18:38:b0:30:fd:0c:d3:21:cc:d7:7c:a1:ed:47:35:c2:46:c6:
         3b:af:a4:f3:a4:25:34:39:33:18:d1:9e:a1:98:ae:08:96:f8:
         2d:8a:a8:cf:54:58:a5:d0:0c:c4:43:29:3e:9f:12:90:66:a6:
         e4:5c:08:54:a2:b1:10:e4:6a:4d:c3:17:ae:ee:03:60:d3:76:
         20:a9:1d:20:d7:fd:b2:a9:ab:ee:b8:2e:5f:39:af:c0:71:2a:
         fa:f7:f2:8f:64:6f:41:b6:f0:6c:ec:dd:4c:ab:0c:56:04:71:
         7e:d2:48:30:d6:be:8e:e1:f0:73:a6:51:85:3f:6d:fc:be:5b:
         17:2b:de:ef:f1:17:95:c3:90:62:91:88:4f:0a:28:46:16:1d:
         d1:b8:06:2e:d6:21:8a:e7:50:08:3e:68:1a:c0:93:41:cf:e1:
         55:a0:66:55:56:3f:95:15:71:cd:5a:82:c3:ec:4c:f6:a6:b5:
         4e:1e:b3:84:6c:dd:d0:72:48:61:a6:a8:ca:e3:05:58:2e:0b:
         c7:a1:5a:16:ef:c2:18:ee:3d:91:83:99:b1:3c:c0:6b:8e:6b:
         8c:fa:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:40:04 2026 by rpki-client