Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d76c6ca2-9451-3a2a-a37b-ebb0449fd6b3.roa
File:                     d76c6ca2-9451-3a2a-a37b-ebb0449fd6b3.roa (raw, json)
Hash identifier:          wJleUk59zhSbRkuZbpOUKWJcWJZ3NWi1D6Lln1VjHvc=
Subject key identifier:   CC:76:3E:3A:93:E5:09:18:CF:6D:5C:CE:A1:CD:85:C0:1A:BA:24:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F067256A7A697E231B387AC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d76c6ca2-9451-3a2a-a37b-ebb0449fd6b3.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.144.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:56:a7:a6:97:e2:31:b3:87:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=e8678338-acd4-4231-9064-0167c95a91f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:fa:e3:a7:fb:25:f9:e5:8e:e6:a7:56:ce:
                    3f:2b:b3:8e:05:63:4d:f9:69:0b:a9:98:96:b4:11:
                    7b:5b:db:ab:21:a1:df:1a:5f:b0:d6:5c:65:66:45:
                    33:60:48:96:2b:8a:65:d0:98:77:28:ea:fc:ea:81:
                    1a:08:2a:8f:d9:a7:cb:fa:e7:7f:44:d2:ed:1d:7a:
                    58:3a:cb:5d:7a:1a:9a:1a:23:ad:dd:f7:8c:2f:09:
                    57:be:f5:b1:1a:a1:67:d6:98:49:0b:9e:0b:33:4f:
                    0e:cd:aa:87:1c:35:f1:c7:5b:34:62:67:ec:b8:74:
                    b1:e8:62:e7:55:39:f1:6b:b8:73:0f:0e:ba:30:07:
                    6f:7f:90:69:42:59:a7:f6:6d:68:6b:14:6c:17:ba:
                    37:a8:6c:8f:00:9c:a1:93:0e:a8:24:c2:65:f2:b2:
                    b4:0d:c7:5b:d4:fd:6f:87:1c:00:ee:c5:c9:90:52:
                    1c:4d:dc:f0:bd:97:0d:5e:cb:cc:73:b5:02:ca:9a:
                    63:be:78:30:46:68:83:81:93:34:b9:a6:cf:a9:88:
                    fb:3e:bc:df:b4:0e:bd:30:0b:21:72:2e:a9:03:50:
                    ce:17:8c:83:7e:2e:e9:4e:11:ca:8c:b7:a9:31:4f:
                    12:63:09:49:41:ba:79:d2:82:80:31:44:0e:e7:99:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:76:3E:3A:93:E5:09:18:CF:6D:5C:CE:A1:CD:85:C0:1A:BA:24:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d76c6ca2-9451-3a2a-a37b-ebb0449fd6b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:d3:c3:47:d2:1c:ab:a6:62:0d:e3:16:8b:ba:d2:32:93:6f:
         15:9d:7d:d4:89:7f:69:3e:e5:b7:8d:f1:bb:17:cb:ea:a4:28:
         40:fa:0d:21:06:7d:24:95:60:46:8e:c4:f0:2a:90:6f:f8:11:
         8f:fe:5f:fc:a8:0f:75:a8:24:2c:18:58:a1:56:a9:6f:65:17:
         2a:92:b8:61:17:6e:af:15:50:64:72:2f:83:4e:fb:a9:5b:a1:
         68:3f:d0:7e:dc:31:b2:47:40:9c:7a:66:8c:3f:b4:d7:c5:6d:
         25:44:11:07:81:49:31:e8:ac:58:cf:8f:5c:d3:22:87:30:99:
         a5:01:82:0c:de:e2:dc:18:4b:14:8f:86:dc:4e:4e:2d:57:e9:
         5c:ca:5f:a5:76:06:89:cb:09:81:d9:37:89:e1:c3:8c:e4:83:
         51:55:95:05:54:28:77:e3:af:d0:a1:76:4f:00:c9:eb:af:7f:
         df:57:1e:9e:e2:c2:3f:d8:38:db:7c:54:48:77:42:0f:c1:f1:
         f3:2f:0c:90:db:61:34:11:38:24:f1:4b:c1:8c:5c:79:17:40:
         3e:c9:56:7f:a8:bb:88:e1:cf:ac:c5:31:8f:ab:fe:e2:d1:42:
         2c:85:e0:43:9c:fa:7b:4d:a1:d9:f8:74:38:e0:84:13:a1:95:
         8d:18:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:12:10 2026 by rpki-client