Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3ca6287-6e57-3653-972f-0e4bccfcb28a.roa
File:                     a3ca6287-6e57-3653-972f-0e4bccfcb28a.roa (raw, json)
Hash identifier:          R0wfU5Ux7NR6igArbNjedlrDHHOlV5lnqCyhOPyLJQc=
Subject key identifier:   12:CC:0C:DB:EE:85:F6:F6:57:A2:03:3E:95:C6:B8:EE:C9:56:6B:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE3620A31C2A2EE5E3E8C6B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3ca6287-6e57-3653-972f-0e4bccfcb28a.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     6167
IP address blocks:        97.206.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0a:31:c2:a2:ee:5e:3e:8c:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=0174609b-6570-45eb-b70e-5019ed02f4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:64:e9:8e:45:a4:80:bf:6e:61:79:60:33:
                    12:c9:e2:b6:32:36:f7:e4:48:cf:95:5d:fb:ef:aa:
                    2b:61:96:66:92:18:5d:d5:89:2c:1e:95:a8:bc:08:
                    52:98:0d:b1:eb:8c:28:53:3e:f8:44:92:12:8c:da:
                    98:26:21:39:9d:15:eb:9b:ab:0c:6b:35:41:88:1d:
                    d0:30:09:e8:4e:5f:82:7c:49:0e:e9:8d:9d:b4:fe:
                    e9:b7:2e:76:29:1c:92:95:c3:a8:6b:b6:87:66:97:
                    ad:eb:91:c2:5e:11:51:fd:50:e9:e9:56:55:8d:42:
                    31:78:bd:80:4e:74:95:f6:ed:04:f9:89:e1:a5:b4:
                    7a:eb:a4:05:dc:db:97:f0:9b:96:35:13:22:de:df:
                    5a:d3:4f:62:3e:4d:eb:62:a2:ff:08:3e:b4:48:be:
                    a4:6c:c3:0a:c9:f7:a2:43:34:52:fe:56:dc:71:74:
                    e1:19:40:ca:98:5f:3f:28:8c:11:b5:d1:aa:ec:ea:
                    6e:34:b7:6f:89:32:ae:66:b9:4c:ca:20:57:d1:c4:
                    f0:63:eb:09:3b:bf:89:fa:eb:57:78:38:53:45:81:
                    cb:f2:76:15:c9:0e:56:59:38:c7:cc:56:d8:96:b1:
                    03:4b:97:af:3d:f4:2c:0a:fa:55:b4:94:2b:f4:c1:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CC:0C:DB:EE:85:F6:F6:57:A2:03:3E:95:C6:B8:EE:C9:56:6B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3ca6287-6e57-3653-972f-0e4bccfcb28a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:68:6e:85:8f:b1:92:c1:7d:e7:e7:c2:fc:be:30:9d:cc:
         c5:4e:d1:d9:d4:67:c8:d6:04:d1:98:73:51:2f:a1:c8:74:d2:
         a2:d7:e5:3e:50:ac:f1:86:99:a2:4f:66:36:03:ab:f8:cb:29:
         56:ec:9f:96:d6:db:b8:81:b7:da:ec:96:11:b6:e8:f4:0d:d1:
         0b:ac:89:86:eb:30:da:3d:b6:9f:51:d3:07:bd:48:b3:e5:bd:
         ac:98:33:22:81:a9:c7:7d:04:58:bb:7f:37:70:e1:c3:d6:82:
         c1:8b:3a:d6:56:77:9c:1a:39:d3:7c:ae:b1:03:c8:b0:cc:2e:
         dc:32:e4:97:4e:fb:2b:e7:81:52:27:3c:f8:8c:12:ca:cf:e9:
         7b:02:ae:ce:94:83:87:90:c2:04:41:03:57:d7:2b:62:35:7e:
         94:44:be:16:84:35:6b:8f:ef:3e:0c:1c:4f:fa:78:9b:9e:02:
         1a:5d:8a:a7:60:e1:4f:d5:0c:67:66:ba:01:e9:bf:bd:53:e8:
         eb:b5:ad:07:3f:92:19:08:a6:96:cc:70:b1:1a:3c:97:52:80:
         2c:2b:74:8a:23:7e:73:46:f7:a6:55:c4:fd:5b:1e:7a:e5:7c:
         68:57:e4:c6:9b:18:3e:48:fa:22:a2:8a:bc:91:b0:92:bb:ad:
         26:9a:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:02:10 2026 by rpki-client