Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4586061-f094-34aa-a2ba-ef8815459725.roa
File:                     c4586061-f094-34aa-a2ba-ef8815459725.roa (raw, json)
Hash identifier:          ER/Eea9m9hUVA5YMN8Pmy6am5s2YMrubgN/75ee3LD4=
Subject key identifier:   C3:F0:C4:9A:F0:F8:ED:AF:A3:DB:FB:47:1D:E6:61:BC:7C:BB:DF:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAC05A067D6E961A917600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4586061-f094-34aa-a2ba-ef8815459725.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        97.131.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:c0:5a:06:7d:6e:96:1a:91:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=d758381d-10d1-4591-a781-8164854f9b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:b2:d2:fd:3b:a8:7e:57:31:a2:de:50:cf:
                    1b:7d:8f:2d:f1:a4:ef:d3:50:28:01:aa:b7:16:ad:
                    97:51:5c:22:b1:08:a2:32:5b:b6:e6:c4:4a:72:c4:
                    02:5f:f8:0c:4d:a3:04:1b:4b:e8:2c:55:59:15:75:
                    5d:46:f1:2e:6f:c1:bf:29:a1:4b:22:5c:23:45:5a:
                    17:9d:a3:11:24:42:84:5d:bc:13:9e:7a:8b:6d:a1:
                    6b:fe:b6:2b:8a:bc:f1:97:6c:d9:17:d1:61:a8:b0:
                    bd:f0:59:8f:1a:84:16:4a:a3:2d:0f:26:e7:b9:4c:
                    79:75:71:60:0a:d3:8e:13:a9:d5:1c:54:f5:be:ed:
                    6e:38:b2:77:88:1c:a1:81:61:b0:b4:23:36:83:76:
                    74:b3:ab:5b:fd:53:2e:0d:83:87:f8:4b:fd:30:23:
                    0e:ad:ec:bb:9e:dc:76:56:6d:21:02:ab:04:11:c5:
                    70:7d:2e:d1:d0:f0:5d:cd:1c:77:37:27:0b:95:3c:
                    e9:23:81:9b:0e:f1:b8:c5:9c:bb:c7:81:a7:da:ee:
                    9d:00:b7:3a:13:b4:0a:c2:7d:1e:24:df:46:2d:bd:
                    a1:aa:1d:47:d8:88:77:42:01:c8:52:13:fb:e1:96:
                    39:1b:a2:b4:65:74:aa:4f:39:4d:38:6c:58:ba:ba:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F0:C4:9A:F0:F8:ED:AF:A3:DB:FB:47:1D:E6:61:BC:7C:BB:DF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4586061-f094-34aa-a2ba-ef8815459725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.131.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:da:41:4f:f9:46:03:7c:72:cb:ac:f7:b2:bf:a2:b6:56:
         b8:c8:97:b1:0f:19:aa:66:3e:ef:c0:39:be:b8:56:1a:dd:a0:
         21:0a:e5:96:53:4a:6d:e8:84:f4:20:b5:20:4c:00:81:e9:c0:
         e3:8d:56:b5:4c:a3:88:35:57:17:0a:bf:af:71:8a:32:07:36:
         c9:d9:2c:de:e2:8f:ab:64:5f:47:c5:6d:c0:81:16:68:42:3f:
         80:81:7c:11:04:82:20:d3:ae:c5:24:09:9f:e2:51:67:a0:d7:
         29:8d:0c:9c:51:df:c1:a4:cd:e9:cc:38:26:a1:1f:6b:37:ea:
         47:c4:56:30:23:7c:e5:28:d3:56:fb:b0:1d:bc:47:42:33:95:
         1f:72:69:56:bd:8c:7a:4c:fa:d3:8a:40:45:ed:81:1f:e1:c0:
         67:5e:16:9b:37:0e:d9:be:62:53:54:82:0e:e6:47:ed:b3:e0:
         6a:ca:5e:46:b3:55:1a:f0:aa:c1:42:19:b4:09:a3:6f:da:23:
         62:8a:ac:29:3c:c5:a3:1c:d6:6a:5f:cc:7e:4c:8d:89:58:15:
         40:c5:9d:bd:20:dc:c2:94:4e:f4:ba:e3:a9:28:d3:35:0e:9a:
         8f:6e:d1:1a:20:cc:15:3d:0f:86:0b:43:fe:e3:91:21:8f:ba:
         1f:2a:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:08:09 2026 by rpki-client