Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf09c582-e05e-3f22-b9a9-3fff0d84fd43.roa
File:                     cf09c582-e05e-3f22-b9a9-3fff0d84fd43.roa (raw, json)
Hash identifier:          C6HkNcDZbxwIQnSUeNkI1osjBxw1wUPk+psVk4K7HqM=
Subject key identifier:   91:36:71:A4:78:30:3F:C8:4D:23:4F:64:D8:DD:00:19:57:19:15:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7903E558666954A2C424F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf09c582-e05e-3f22-b9a9-3fff0d84fd43.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        97.213.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:3e:55:86:66:95:4a:2c:42:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1051441c-cdba-4f3a-91c5-939c0796fd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:d9:53:90:b3:bc:78:4e:3f:f9:47:ec:b6:
                    05:5b:42:2b:c9:6a:80:2a:ce:5f:5c:90:0c:6f:f9:
                    a9:b5:c0:46:7c:f5:45:2b:b3:83:d6:a3:82:b0:99:
                    dd:9b:0d:81:c3:38:1e:ec:7e:fc:5a:93:de:3f:a7:
                    68:89:24:2f:53:b3:af:6b:91:51:30:92:58:1f:ed:
                    30:3e:35:4b:8e:c6:c2:41:6c:7e:7c:c6:6c:3c:b7:
                    ca:51:6d:b3:2f:c5:d7:dd:b9:60:5e:db:89:ee:21:
                    da:2a:33:d5:e0:b0:f1:aa:63:df:64:51:8f:6c:de:
                    6d:c3:5e:ab:2e:5e:0a:36:13:b9:60:b0:ac:1b:2c:
                    f5:ed:06:c9:c9:43:50:bb:ed:bd:86:3c:a5:5c:be:
                    3d:f4:05:cb:5a:47:21:37:7a:d0:64:52:b0:c5:68:
                    f7:82:ab:69:cb:25:2b:65:59:42:20:da:6d:90:3d:
                    59:b2:6b:84:ab:6a:1b:2e:d8:1a:cb:c6:7c:5e:42:
                    fa:88:6b:a0:3f:7e:0e:67:c1:8c:44:ff:d4:9f:49:
                    b1:c6:4e:6c:fb:86:8a:6e:08:bc:e5:ad:92:ad:07:
                    c1:ba:42:a8:0c:68:ab:05:2f:ae:54:74:e4:5a:aa:
                    e7:cd:90:55:e3:ae:12:e6:54:d0:a0:b6:96:49:76:
                    f7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:36:71:A4:78:30:3F:C8:4D:23:4F:64:D8:DD:00:19:57:19:15:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf09c582-e05e-3f22-b9a9-3fff0d84fd43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:51:33:67:10:89:89:87:2b:93:bf:3a:45:a9:5b:f1:72:a0:
         0b:8f:73:8b:c4:91:9c:31:a0:71:46:d5:c9:aa:14:57:f2:95:
         f5:e2:73:a3:c5:7b:0a:b1:e6:af:c0:61:f8:b9:39:ad:8f:f2:
         44:27:81:af:1f:75:5e:7c:35:95:ae:42:de:9f:12:ed:6a:3f:
         f1:2b:71:da:68:2d:89:dc:49:79:86:9a:b7:86:9d:ab:b9:13:
         85:9c:e3:0b:70:59:3b:42:a4:1f:9a:48:82:59:d1:00:50:92:
         ea:bd:30:81:b2:78:ba:c1:06:87:9d:90:3f:9e:aa:07:08:9b:
         fc:42:e6:02:6e:68:32:f1:77:b0:48:66:ea:2c:e1:6d:3b:55:
         60:21:d5:77:a2:12:4d:c5:ee:f7:60:87:12:44:6f:36:f3:2c:
         a0:47:e3:7a:3c:62:c2:52:50:b9:76:8b:1b:04:85:9a:06:16:
         54:fd:16:96:42:69:a7:fb:53:69:f5:7c:82:aa:28:19:b8:18:
         37:2b:9d:b6:6f:b5:81:5b:30:81:1a:28:15:a9:96:94:55:5b:
         14:88:4d:3b:35:bc:f4:83:d8:96:e9:1b:81:c0:d5:e1:1e:4d:
         49:1e:34:32:a8:6d:34:eb:d1:48:08:e1:b1:61:66:51:d5:dc:
         8b:b3:db:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkD5VhmaVSixCT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTA1MTQ0MWMtY2RiYS00ZjNhLTkxYzUtOTM5YzA3OTZmZDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJzZU5CzvHhOP/lH7LYFW0IryWqAKs5fXJAM
b/mptcBGfPVFK7OD1qOCsJndmw2Bwzge7H78WpPeP6doiSQvU7Ova5FRMJJYH+0w
PjVLjsbCQWx+fMZsPLfKUW2zL8XX3blgXtuJ7iHaKjPV4LDxqmPfZFGPbN5tw16r
Ll4KNhO5YLCsGyz17QbJyUNQu+29hjylXL499AXLWkchN3rQZFKwxWj3gqtpyyUr
ZVlCINptkD1ZsmuEq2obLtgay8Z8XkL6iGugP34OZ8GMRP/Un0mxxk5s+4aKbgi8
5a2SrQfBukKoDGirBS+uVHTkWqrnzZBV464S5lTQoLaWSXb3KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJE2caR4MD/ITSNPZNjdABlXGRWUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2YwOWM1ODItZTA1ZS0z
ZjIyLWI5YTktM2ZmZjBkODRmZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdXcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9RM2cQiYmHK5O/OkWpW/FyoAuPc4vEkZwxoHFG1cmqFFfylfXic6PF
ewqx5q/AYfi5Oa2P8kQnga8fdV58NZWuQt6fEu1qP/ErcdpoLYncSXmGmreGnau5
E4Wc4wtwWTtCpB+aSIJZ0QBQkuq9MIGyeLrBBoedkD+eqgcIm/xC5gJuaDLxd7BI
Zuos4W07VWAh1XeiEk3F7vdghxJEbzbzLKBH43o8YsJSULl2ixsEhZoGFlT9FpZC
aaf7U2n1fIKqKBm4GDcrnbZvtYFbMIEaKBWplpRVWxSITTs1vPSD2JbpG4HA1eEe
TUkeNDKobTTr0UgI4bFhZlHV3Iuz2+Y=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:51:31 2026 by rpki-client