Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b01e6cd7-99db-33dc-9c4f-d997c8be354d.roa
File:                     b01e6cd7-99db-33dc-9c4f-d997c8be354d.roa (raw, json)
Hash identifier:          n4CTcwHB8Ocf652LE2MUYjFPf3Tai6NidDjorONbLaw=
Subject key identifier:   31:3A:05:00:19:5E:E8:57:C8:8C:9F:2A:43:B7:28:AD:29:AC:78:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F067257AAC08F4037C3208500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b01e6cd7-99db-33dc-9c4f-d997c8be354d.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.176.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:57:aa:c0:8f:40:37:c3:20:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=949ee4a5-8e72-4b90-b712-6cc22799e700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:77:b9:31:7b:ed:63:d8:02:0e:a9:8f:0f:
                    43:5d:52:e7:96:51:ed:04:0a:a1:54:70:63:7f:32:
                    85:c9:3d:8a:86:b3:7b:89:87:23:6a:69:dc:97:cd:
                    78:79:c9:a2:26:64:ce:92:5e:e3:51:04:53:49:6e:
                    2a:65:18:73:cd:45:23:ff:75:90:83:be:5c:68:91:
                    c2:d4:3a:a9:12:ce:b5:68:08:56:33:89:33:8c:be:
                    dd:55:9b:af:0b:43:75:3e:c0:1e:c4:b7:92:2b:eb:
                    b6:9a:b2:1f:81:2b:15:1d:e2:fc:63:32:b3:f8:62:
                    70:d5:fb:51:7f:0e:8e:12:c1:2c:c5:39:63:e1:63:
                    e8:7b:63:ba:31:bd:03:87:c6:34:5b:56:4f:b1:0f:
                    15:9d:35:0f:45:76:1b:b0:7a:c5:87:b8:37:51:a5:
                    7b:a4:6a:15:0a:92:ea:bf:9c:e5:8f:c5:98:0b:b6:
                    88:03:9a:96:b8:d8:f5:40:d1:3f:78:14:05:a0:90:
                    ab:81:6b:b5:2a:ca:7b:08:4e:61:42:c1:3f:2d:97:
                    b5:eb:45:75:fa:11:94:4a:01:cf:64:8a:ef:98:88:
                    83:32:9a:95:ae:7e:b6:cc:11:03:66:bf:b3:75:de:
                    5d:47:2b:a5:88:4b:67:07:14:5b:3f:92:0f:1e:18:
                    41:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3A:05:00:19:5E:E8:57:C8:8C:9F:2A:43:B7:28:AD:29:AC:78:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b01e6cd7-99db-33dc-9c4f-d997c8be354d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.176.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ba:18:c4:d7:39:be:c6:f2:b4:a6:ca:fc:6e:88:3a:b8:ef:
         6f:8b:09:ef:67:b7:ff:77:70:f6:b9:41:2c:e6:70:6e:89:6e:
         b6:fb:10:5c:c8:85:59:e3:59:2a:be:15:65:f5:3f:af:0e:8d:
         94:fb:15:43:da:fe:59:54:21:4d:ca:3e:bb:cd:3d:30:e8:70:
         ec:ac:c2:77:54:cf:6b:b5:3d:8b:42:9a:37:ab:fa:d5:8d:e1:
         53:ba:1a:ce:0a:ac:f2:6a:f1:76:02:af:7d:b2:c5:da:ca:cd:
         db:39:12:6b:da:5b:fa:1f:b7:62:1a:c3:9d:a7:95:dd:95:8c:
         8e:4f:ec:53:ce:ad:76:02:67:7d:cb:44:63:b8:14:82:b2:3a:
         ca:1b:a5:38:35:bc:57:b8:78:4d:5e:ab:5a:09:8a:34:28:10:
         84:9f:76:3f:55:68:78:45:a1:55:6d:77:fc:9b:c9:23:b1:d1:
         35:68:48:48:e1:e4:c0:3b:cc:29:54:69:17:92:ec:b3:4d:9e:
         30:e6:e6:06:35:ef:49:53:43:dd:74:d5:46:0e:7c:36:02:87:
         2b:02:d1:1f:7d:1e:ac:35:b3:01:85:0f:9c:91:94:85:67:b5:
         00:01:b4:35:01:89:fc:39:7f:d6:78:73:90:00:52:86:68:6d:
         29:55:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:34:43 2026 by rpki-client