Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa8794aa-575d-368e-8d1e-fd1f141bb911.roa
File:                     aa8794aa-575d-368e-8d1e-fd1f141bb911.roa (raw, json)
Hash identifier:          s3yiNa/iOMGh68aILvUqIAHkETfzCM/rnXmh4JZpoRU=
Subject key identifier:   68:9A:B5:15:9B:61:35:56:4B:A4:D2:87:0C:0A:D5:5C:02:4D:74:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAC320B3077AD5352A8500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa8794aa-575d-368e-8d1e-fd1f141bb911.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        97.150.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:c3:20:b3:07:7a:d5:35:2a:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=bcc7ff78-2d47-4c4a-9caf-3ec7da89aecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1a:03:65:11:b8:d2:d6:c8:2e:8c:58:65:50:
                    fb:89:34:8f:03:c5:a2:2b:22:be:97:b7:d4:d8:35:
                    a2:6e:70:ef:83:be:f9:34:b5:77:ba:2c:83:be:d4:
                    8e:bf:f6:81:dd:25:2d:dd:be:5a:3b:38:57:be:ec:
                    1b:e3:bc:9b:43:1d:f4:4b:8d:f0:71:30:9d:62:94:
                    09:e9:5e:f9:cb:4d:e3:93:84:9c:07:63:8e:f0:c7:
                    8e:36:e9:de:3f:f2:97:61:83:71:b6:b5:7c:1b:11:
                    1c:30:15:09:96:da:7a:44:29:b8:7c:d5:77:c0:12:
                    ff:ce:51:c5:60:e9:88:3d:d1:59:00:04:65:fa:6b:
                    43:b8:05:a4:c5:69:f8:34:be:dc:8a:00:bd:65:b7:
                    e6:31:66:02:b9:ef:2f:15:74:29:71:a3:ee:b0:ae:
                    a9:ab:63:29:ab:84:10:78:3e:fa:1c:75:dc:80:04:
                    11:de:59:3a:41:63:d9:c2:69:fe:60:1e:53:73:42:
                    ae:5d:58:38:70:14:56:44:2b:3c:c2:24:6d:c2:7a:
                    5a:3a:38:9e:46:49:86:24:52:7e:e5:71:d6:cd:15:
                    19:8c:21:da:a3:ec:89:64:c8:94:31:98:2f:53:a1:
                    26:c4:b1:92:2d:aa:54:67:ed:be:3b:4a:00:09:d0:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9A:B5:15:9B:61:35:56:4B:A4:D2:87:0C:0A:D5:5C:02:4D:74:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa8794aa-575d-368e-8d1e-fd1f141bb911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.150.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a6:65:af:ca:a9:4b:1c:f8:a1:7d:78:83:59:03:88:5a:9f:
         8b:3a:1a:fc:57:84:af:fe:d4:01:16:d2:68:cb:b8:09:4c:a9:
         ea:68:19:db:83:0a:d9:79:8d:51:12:03:7d:c2:b8:64:be:4f:
         2a:38:c2:6c:e0:ad:17:86:d1:40:f2:32:21:f8:71:03:cb:c4:
         5c:48:75:f6:81:ff:24:23:00:62:35:b8:20:f5:3d:04:5c:dd:
         cd:24:6f:9d:7d:28:64:7c:6c:9d:6b:b0:82:81:d9:35:ad:46:
         f6:a0:bb:3b:5d:66:41:0f:fc:e8:5a:8f:d1:bc:f2:1e:7b:28:
         32:6f:1c:f7:fd:00:28:0b:3b:43:67:e9:d0:0b:8e:13:e7:56:
         06:f9:d6:5e:c9:c1:d9:2f:d5:3c:42:0f:fc:c2:d6:d0:57:61:
         20:7d:bc:d6:cc:61:e5:b1:4d:62:5c:d4:63:3b:bb:6a:96:e5:
         d9:fa:77:6e:b7:fc:cd:85:77:65:74:06:51:aa:cb:8c:24:07:
         91:8c:45:18:1d:35:b0:64:40:a3:7f:03:15:12:10:45:aa:5b:
         47:c2:c4:00:10:95:a2:d5:13:68:dd:ac:8f:54:22:74:39:2d:
         0d:a2:dd:23:0e:87:61:e0:9b:f3:6e:95:03:8b:0b:d6:94:4c:
         00:7f:20:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DysMgswd61TUqhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
YmNjN2ZmNzgtMmQ0Ny00YzRhLTljYWYtM2VjN2RhODlhZWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhoDZRG40tbILoxYZVD7iTSPA8WiKyK+l7fU
2DWibnDvg775NLV3uiyDvtSOv/aB3SUt3b5aOzhXvuwb47ybQx30S43wcTCdYpQJ
6V75y03jk4ScB2OO8MeONuneP/KXYYNxtrV8GxEcMBUJltp6RCm4fNV3wBL/zlHF
YOmIPdFZAARl+mtDuAWkxWn4NL7cigC9ZbfmMWYCue8vFXQpcaPusK6pq2Mpq4QQ
eD76HHXcgAQR3lk6QWPZwmn+YB5Tc0KuXVg4cBRWRCs8wiRtwnpaOjieRkmGJFJ+
5XHWzRUZjCHao+yJZMiUMZgvU6EmxLGSLapUZ+2+O0oACdAHlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGiatRWbYTVWS6TShwwK1VwCTXQSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE4Nzk0YWEtNTc1ZC0z
NjhlLThkMWUtZmQxZjE0MWJiOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYZaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6mZa/KqUsc+KF9eINZA4han4s6GvxXhK/+1AEW0mjLuAlMqepoGduD
Ctl5jVESA33CuGS+Tyo4wmzgrReG0UDyMiH4cQPLxFxIdfaB/yQjAGI1uCD1PQRc
3c0kb519KGR8bJ1rsIKB2TWtRvaguztdZkEP/Ohaj9G88h57KDJvHPf9ACgLO0Nn
6dALjhPnVgb51l7Jwdkv1TxCD/zC1tBXYSB9vNbMYeWxTWJc1GM7u2qW5dn6d263
/M2Fd2V0BlGqy4wkB5GMRRgdNbBkQKN/AxUSEEWqW0fCxAAQlaLVE2jdrI9UInQ5
LQ2i3SMOh2Hgm/NulQOLC9aUTAB/INU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:35 2026 by rpki-client