Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c63324-0c7a-3b4e-8205-475dc39df7ab.roa
File:                     c0c63324-0c7a-3b4e-8205-475dc39df7ab.roa (raw, json)
Hash identifier:          cb8NpUC3GhsrROdugvuV9sUk7vHkWhQiWp1wrnbks5Q=
Subject key identifier:   03:B6:36:8A:2D:A5:F9:F6:AC:6F:5C:5C:70:D7:F0:43:0B:AE:23:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAC1D23AF3D7E379EE6200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c63324-0c7a-3b4e-8205-475dc39df7ab.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        97.137.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:c1:d2:3a:f3:d7:e3:79:ee:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=4fbc7eba-fa75-4146-885d-9f42324e8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:56:d3:c3:51:e5:46:33:f9:89:72:11:c2:5b:
                    d1:d6:88:88:5c:5b:74:8b:53:e1:11:b4:40:7c:17:
                    37:d7:74:ff:20:a4:bb:2f:9b:42:bc:bd:ac:9c:f7:
                    b3:1f:e6:08:31:6f:f8:8b:c4:2d:38:24:f5:bc:1a:
                    6a:b7:09:2c:b1:a4:b8:5c:c3:57:0f:4e:bb:8a:f3:
                    ac:b0:25:e7:64:7b:39:2e:e2:22:0a:c6:fe:d9:5f:
                    c5:bb:29:6d:40:c5:23:65:a3:56:26:7a:4f:9a:b4:
                    ff:1a:7a:9c:e9:66:04:c2:57:11:d3:73:5e:72:63:
                    70:69:94:65:b2:1c:48:7a:85:6c:0c:6b:10:cf:7a:
                    38:69:b7:6f:e4:18:ac:43:06:2f:ec:6a:b3:d1:f4:
                    77:5f:c6:62:d6:09:2d:6b:46:5e:8c:14:52:7f:1e:
                    d8:8d:db:60:ce:72:f0:f5:fe:af:a1:84:a0:67:34:
                    48:51:08:64:ff:85:b0:b4:43:eb:93:5b:0e:c2:59:
                    7e:30:13:ed:f8:7c:42:c4:30:1b:12:92:ca:01:91:
                    3d:5d:c4:cc:15:24:df:97:df:86:1a:76:28:25:b2:
                    ec:28:fc:21:a2:2e:c0:58:72:72:20:73:e8:64:17:
                    90:28:04:b4:25:7d:86:08:62:87:b2:55:c9:96:07:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B6:36:8A:2D:A5:F9:F6:AC:6F:5C:5C:70:D7:F0:43:0B:AE:23:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c63324-0c7a-3b4e-8205-475dc39df7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.137.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:89:f2:42:54:37:7e:6d:09:d2:8f:a8:21:d3:60:72:05:3a:
         99:d0:16:48:7a:b1:20:30:10:5e:cc:5f:0f:e9:ec:2f:b5:35:
         88:74:92:c5:0c:f5:87:66:19:cf:7b:1f:79:46:e5:1e:04:80:
         43:1a:1b:54:75:6c:b9:ee:d7:d9:6f:63:ef:1b:99:c9:1a:67:
         20:30:7e:50:82:1f:06:33:3b:4a:33:d8:c1:5b:c8:16:bb:30:
         cb:9a:f6:cf:00:1f:33:cd:02:52:82:90:19:e2:37:46:14:86:
         cd:0e:b2:11:35:f9:5f:7d:ad:ba:e6:60:01:d5:35:48:ea:b8:
         91:13:36:c0:a9:c4:8b:3f:13:79:81:cf:6a:fe:a3:bc:b6:dc:
         43:6d:2d:aa:c9:e6:88:ac:50:c5:36:1e:52:0e:5b:da:01:b1:
         5f:ef:9f:b2:4f:06:7d:26:2c:a7:60:85:3b:97:8c:60:61:23:
         59:78:79:13:94:d6:04:92:39:0c:31:18:e8:bc:57:2d:99:98:
         1f:59:a8:d1:c6:57:a1:03:3d:2f:64:47:c7:2f:f6:19:98:84:
         75:d4:1c:93:8a:49:34:b8:9f:43:85:7c:dd:4c:bc:02:d8:0a:
         18:38:89:92:1e:7d:41:70:14:97:cf:16:66:7d:b0:cb:82:45:
         7f:0d:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:25 2026 by rpki-client