Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e134059f-2e06-324a-a111-b7b129272dfb.roa
File:                     e134059f-2e06-324a-a111-b7b129272dfb.roa (raw, json)
Hash identifier:          /sXnGCaWCk5l9itKbU3lmNPZJBTIfwl5X699+Q4F4Ik=
Subject key identifier:   7B:EB:46:0F:CE:52:E4:55:7D:AA:42:06:DC:6D:12:8E:7A:7E:2F:9E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F549D9E00D2C298D15B462618
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e134059f-2e06-324a-a111-b7b129272dfb.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.170.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:9e:00:d2:c2:98:d1:5b:46:26:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=38940f3b-d6ee-4890-9b83-14d801f9173a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:34:2a:b7:0e:df:bc:b8:6c:d0:4a:fd:89:
                    a1:62:07:1d:c2:7d:3b:74:94:07:82:45:35:2d:29:
                    e9:bb:bf:2b:98:fb:2b:24:af:76:64:71:a6:ea:ac:
                    c0:91:d4:c9:10:55:3b:37:1e:85:60:8e:dc:e6:d2:
                    2c:19:ce:b0:dc:86:eb:d3:10:b2:17:fe:e6:e3:9f:
                    d2:d7:fb:85:39:48:58:bd:a0:5c:c3:ca:fb:5a:de:
                    07:40:14:27:4c:ca:f9:4a:a0:41:51:ff:19:8f:f5:
                    5e:33:a8:d3:9a:9f:59:cc:6e:1a:01:f2:84:e3:50:
                    9b:ff:2f:bb:18:6b:62:6a:32:6b:ec:7a:87:e9:cb:
                    76:5b:85:45:4a:1e:c1:d3:7a:3c:45:e2:39:e6:83:
                    74:07:35:b1:a8:ef:08:76:df:c4:44:a9:c2:69:c3:
                    ce:83:af:7b:01:11:36:73:ed:b8:bf:09:62:d2:80:
                    ee:6f:1d:cb:42:a3:f6:16:64:05:99:fe:81:20:74:
                    91:db:6e:58:61:42:3b:f2:35:18:0c:8d:b2:1a:05:
                    30:58:b4:3f:10:93:94:7e:63:87:35:b3:7c:b7:1c:
                    07:ee:11:9f:76:e3:1a:79:a0:e1:13:64:b3:6f:19:
                    ae:62:75:ee:fe:31:0a:60:3d:74:02:3f:0e:f8:0d:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EB:46:0F:CE:52:E4:55:7D:AA:42:06:DC:6D:12:8E:7A:7E:2F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e134059f-2e06-324a-a111-b7b129272dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:75:f3:df:f0:52:98:1e:3a:b8:31:35:4e:a0:90:52:52:b8:
         d0:d0:b5:df:19:d6:0e:f0:1e:3e:34:02:0f:44:0f:ba:d1:8d:
         00:5d:b0:24:fd:a8:e7:08:d0:5f:71:8d:53:02:bf:f7:a0:76:
         7c:61:17:a2:96:71:24:7f:c4:f8:9e:db:a9:38:0c:f3:a9:bb:
         76:9b:63:4f:93:da:84:57:9d:66:5b:75:ba:c3:48:58:1d:61:
         e2:4f:a7:09:66:80:4b:69:a4:c2:0d:67:34:23:bd:3f:c8:75:
         50:96:3c:d7:d5:f5:0d:67:e1:36:aa:83:e9:4b:d7:8c:e2:94:
         6b:b4:27:92:ca:fb:cc:0c:56:c4:54:8d:d1:d4:c5:e6:f3:99:
         a0:2a:58:e1:82:2f:e8:30:3e:cf:7b:06:cb:16:03:75:f9:2c:
         27:2e:ae:9e:26:8a:43:2f:0e:9c:2d:20:1a:de:3f:2b:59:d5:
         f2:e3:05:d2:92:34:9d:29:40:c5:85:db:5f:25:fd:75:a9:d8:
         7c:bb:ee:5c:8e:56:38:db:9c:4b:e4:33:de:0f:aa:a8:2d:34:
         12:e0:85:f3:8e:a1:a0:b5:7a:12:88:25:64:d3:7f:ab:e1:66:
         81:c8:7e:34:28:6b:d7:19:7a:bf:2e:1f:29:f3:2a:34:1d:11:
         46:57:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:46:36 2026 by rpki-client