Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca23c9a2-7f13-378f-84d0-1b2e94c0bd61.roa
File:                     ca23c9a2-7f13-378f-84d0-1b2e94c0bd61.roa (raw, json)
Hash identifier:          naqMobj+QHOJ380zAk8qqbPal56SeWLDIUHgOh1t8k4=
Subject key identifier:   28:21:FC:99:33:DF:13:2D:D0:DE:30:96:14:C3:30:83:A9:86:9D:5E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5E62E8DF1EEC2BA2FAF33200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca23c9a2-7f13-378f-84d0-1b2e94c0bd61.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     6167
IP address blocks:        97.244.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e8:df:1e:ec:2b:a2:fa:f3:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=42126eb8-8582-4ea9-ab56-059d9eedb89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:79:e0:8b:77:3f:e3:54:3d:c2:83:87:0d:
                    d6:18:6d:bf:ed:48:55:0a:a2:e0:f5:5c:27:9b:de:
                    a0:8d:f5:b3:30:e3:bb:0d:de:ac:b4:a6:d1:0a:5e:
                    77:c3:de:36:8e:fc:bf:b6:e6:0d:81:09:a1:d9:be:
                    2e:61:1b:13:93:ec:ff:64:75:5a:a7:6a:b6:50:bc:
                    b5:a4:6c:9c:de:32:eb:0b:15:d8:80:f7:85:df:ed:
                    5e:02:c6:24:08:6f:05:11:6a:d8:a1:c4:45:c5:cf:
                    84:fe:d5:df:4f:5a:dc:c6:d6:7c:75:10:2c:18:26:
                    b2:30:2f:54:33:d3:50:1e:e4:1c:d3:8e:21:1f:91:
                    f0:82:36:b5:61:74:3c:83:03:90:96:44:75:f3:d0:
                    eb:c8:d6:89:8f:1b:a1:26:8c:a3:f0:1d:12:7a:0c:
                    d0:53:95:48:f5:c0:8b:fe:6d:dc:89:b0:48:b6:9d:
                    1d:33:78:24:2f:30:ee:3b:25:3e:17:e0:19:57:15:
                    c7:66:2c:84:9c:59:03:ad:66:b0:67:71:8f:fc:6c:
                    b1:5d:95:72:40:df:c6:d8:45:f0:78:d8:b2:10:78:
                    3b:9e:33:5f:70:b0:b0:f3:01:c7:ae:7c:2f:a3:65:
                    76:88:1c:7d:7f:98:d7:c1:12:29:db:d1:2d:31:fb:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:21:FC:99:33:DF:13:2D:D0:DE:30:96:14:C3:30:83:A9:86:9D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca23c9a2-7f13-378f-84d0-1b2e94c0bd61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.244.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:02:e7:59:4a:db:6c:30:d1:ca:1f:6f:0e:a8:3a:9b:e6:
         9f:bc:01:97:4c:bd:d2:01:3c:e6:d3:55:70:00:44:a5:d0:21:
         70:2d:45:8a:d4:86:26:ce:92:f4:5c:e6:95:f0:51:59:80:3a:
         29:55:f1:0a:77:56:cc:68:f4:2e:95:30:0c:1a:fb:f1:21:73:
         ba:c6:f4:ac:e3:49:da:81:0c:be:f4:b7:bf:f3:37:fe:9c:52:
         33:6a:e7:dd:b8:66:e9:df:1e:e6:05:35:9c:3c:1a:84:b6:48:
         14:5f:a1:67:37:89:ca:6d:02:f3:05:f6:a3:8a:80:ed:35:b7:
         9a:93:de:7a:c6:b8:3b:dc:58:f6:8f:f5:54:14:c8:9f:8f:ce:
         a8:c9:28:e8:33:e5:c0:32:d2:a0:80:67:80:5f:fe:96:bc:79:
         e5:40:b6:cc:cb:d9:96:c4:4b:d2:04:4b:b5:63:46:14:9e:98:
         ab:96:c1:05:5c:20:2e:3b:82:d0:17:d4:8f:bb:bb:c4:c8:74:
         2b:dd:c4:0c:1a:8f:3c:7d:3a:2e:53:88:07:35:c9:0c:5f:7d:
         56:06:40:ba:7c:7c:7c:24:6c:b6:b5:18:25:eb:c6:91:0c:b1:
         16:24:03:30:1a:1b:a5:c9:22:32:f7:6f:18:1e:8e:eb:66:50:
         d4:6c:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:14:18 2026 by rpki-client