Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4b64007-0257-3992-ac32-60754a469ae9.roa
File:                     d4b64007-0257-3992-ac32-60754a469ae9.roa (raw, json)
Hash identifier:          2PgQSf9BwpDbnWdbxNuYJGK4GfiWPGwWiqjOtIwOItc=
Subject key identifier:   B3:28:78:96:79:E1:BA:EF:28:6A:44:82:A0:7B:3C:22:86:79:C2:01
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDB01F94EE7305CB066875E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4b64007-0257-3992-ac32-60754a469ae9.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        97.193.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:f9:4e:e7:30:5c:b0:66:87:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=5418f8d0-abe8-449e-a603-3670b890733a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:f0:25:29:45:ee:3b:ec:a8:b2:95:19:72:
                    96:37:1e:eb:87:81:b9:6c:f4:d4:11:c1:e9:a5:79:
                    42:24:58:29:53:65:16:f1:b3:c7:d3:cd:70:a1:34:
                    3d:b2:8f:ca:d4:6a:20:93:1d:77:fc:f7:f5:98:0b:
                    3f:e7:04:be:94:ea:04:13:e7:d8:42:2f:ac:e4:a2:
                    a1:62:b1:50:1d:df:4a:f3:d9:e9:04:00:9e:ff:11:
                    69:c8:18:26:01:f8:5e:ad:8c:65:05:d3:0b:fc:1b:
                    e0:8a:b1:b5:4f:9b:ee:25:8e:4b:cd:e8:a6:ea:53:
                    55:d7:eb:b7:3c:37:d1:45:2d:38:ee:19:f7:86:72:
                    a4:73:1b:4f:a8:9d:e0:6f:f3:a0:e1:81:35:d2:55:
                    78:e7:e0:42:f8:22:4d:97:cf:7a:7e:d6:e6:2c:d5:
                    51:52:3a:09:86:92:ef:21:58:fb:d9:0e:8a:b7:44:
                    53:be:5d:96:15:2e:da:e3:80:fc:f0:55:74:ca:eb:
                    14:17:cb:60:34:79:b9:54:a1:44:52:ad:5d:dc:6c:
                    c8:73:37:73:97:48:81:70:cc:57:72:fe:36:97:e3:
                    90:bb:e7:e1:0a:be:58:22:1e:aa:59:0d:34:7f:8e:
                    01:7b:b2:6e:53:97:9e:84:51:e3:5c:21:2a:5f:8c:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:28:78:96:79:E1:BA:EF:28:6A:44:82:A0:7B:3C:22:86:79:C2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4b64007-0257-3992-ac32-60754a469ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.193.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2c:b4:fd:22:15:0e:73:2a:d9:ce:6f:a8:70:6d:6a:36:39:
         f8:e6:4a:93:d2:8f:78:e5:87:f4:f9:79:a0:c0:bd:17:85:3b:
         8c:c0:14:bc:fe:e5:1e:5a:c5:0a:13:6e:91:06:69:7b:4b:0f:
         2c:85:aa:f3:60:ed:3b:c1:a0:86:1e:6b:f5:6f:25:a3:78:b5:
         a1:33:09:54:61:dd:70:e5:52:a8:99:2f:32:e4:85:fe:99:c5:
         3c:30:71:ab:c9:4e:21:9a:b8:eb:7a:d2:ba:f9:27:af:0e:a3:
         b8:7b:c0:94:ba:57:0b:66:f9:e1:bf:d1:7d:8c:54:77:ff:2f:
         05:23:54:f6:eb:6b:f7:66:13:00:f3:2f:ab:bb:e4:5b:df:3d:
         6f:0a:e3:8d:e2:d4:3e:2b:4e:e7:37:cd:92:d0:26:7b:8d:1a:
         19:a1:6d:d2:c2:74:e9:c2:cb:e3:ed:48:2d:5d:0a:6d:7f:0d:
         45:bf:81:02:e3:b2:3e:fc:1f:fb:bd:83:2b:58:ec:6d:fb:fd:
         1a:1c:e7:30:93:08:e1:10:a1:76:8c:ac:ea:c5:5d:be:cf:24:
         56:d4:81:ba:68:74:54:a7:ab:0f:c7:e3:2b:8a:3b:10:1c:1f:
         a5:49:68:44:e1:fc:5b:9c:5c:ad:73:2d:79:35:82:bf:58:a0:
         e0:7e:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:21:43 2026 by rpki-client