Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdeb9947-f3c2-3f73-995e-54cac4cbcb61.roa
File:                     fdeb9947-f3c2-3f73-995e-54cac4cbcb61.roa (raw, json)
Hash identifier:          jU3EPcG0XL9ee6c57FCrxzEllLBLtX2DtYaUhhxk/0k=
Subject key identifier:   FA:97:DF:65:81:95:7A:9E:39:F7:B1:58:C0:D3:A4:E3:85:14:E4:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAC1228D97C88CED22B884
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdeb9947-f3c2-3f73-995e-54cac4cbcb61.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        97.134.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:c1:22:8d:97:c8:8c:ed:22:b8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=9a086162-fcab-49b6-8ef4-fb8abce5bf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:87:16:2b:f1:a7:5e:8f:c5:f7:55:d2:88:
                    cc:00:21:e7:66:32:a7:20:dd:d1:dc:9c:ae:43:00:
                    6e:c2:01:17:e2:72:bf:94:08:09:b4:bc:53:4a:af:
                    5b:4a:ec:a0:dd:56:45:a1:69:55:7f:47:60:c0:07:
                    74:7b:80:4e:2a:58:68:26:c9:7d:49:6a:94:49:cb:
                    ec:7c:e3:7b:09:49:2b:e8:67:b2:68:f8:1c:f0:bf:
                    f0:84:32:74:f5:30:5c:4e:f4:1d:5c:d1:40:1a:ad:
                    b9:cc:73:a1:c5:4e:c1:32:b4:ba:a9:87:6b:72:5b:
                    b7:95:ff:df:02:f9:07:80:da:53:c0:91:84:95:60:
                    01:fb:5b:3c:c3:71:d8:b7:a0:14:70:05:ad:6d:d3:
                    a0:cc:9e:e5:45:dd:a3:8d:bd:84:c0:7c:47:4f:89:
                    60:7f:18:8f:a5:86:97:1b:70:fd:7b:0f:67:37:9a:
                    06:21:92:8c:91:5f:0d:61:6c:fe:de:cf:c0:a4:ee:
                    21:f5:fe:85:d9:34:80:49:26:b0:5e:17:4f:20:2b:
                    6f:66:ad:d3:d3:66:97:69:e9:5b:20:a0:dd:fa:4f:
                    2e:93:8e:e0:15:e1:0f:99:42:a6:4b:5f:39:e3:fc:
                    09:4a:c4:29:af:37:f4:5b:cc:f5:c7:b2:22:1d:49:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:97:DF:65:81:95:7A:9E:39:F7:B1:58:C0:D3:A4:E3:85:14:E4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdeb9947-f3c2-3f73-995e-54cac4cbcb61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.134.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:de:4e:07:c8:ab:4b:b1:4f:04:fd:68:9b:b9:c1:e1:63:6f:
         29:1b:6f:c2:0a:2c:20:80:3a:c1:9d:66:87:67:cf:b8:1b:f7:
         35:17:29:b6:9f:86:4d:ad:9f:48:f1:50:34:f3:d9:9e:68:ef:
         61:22:49:77:06:22:bb:3b:63:dc:b0:1f:60:53:4a:f4:6f:8b:
         2b:e9:6f:67:2f:05:d7:93:f0:9b:bb:76:80:be:bc:27:08:a8:
         4e:f6:b3:9d:31:23:77:c5:7b:7c:52:83:5c:2a:7c:1e:43:8a:
         4f:70:1f:78:9f:f7:80:f7:e0:12:b9:84:61:2e:b9:d1:7b:bb:
         08:b7:5d:3e:28:8d:04:e0:d5:ed:7b:a4:d3:9e:15:2c:b1:8e:
         44:cb:bd:9b:c1:f6:89:41:36:5e:6f:d7:1b:a0:04:46:b9:ab:
         13:c6:d8:ef:09:66:f1:01:56:47:e9:e2:a5:d8:da:69:2c:fc:
         46:4b:06:ee:a4:e5:c3:a8:f5:82:43:5d:f9:8e:63:1f:e0:7e:
         97:cf:2c:28:ef:80:06:bb:4b:a4:b8:73:60:34:fc:16:e0:c6:
         88:e4:6a:a7:1c:00:85:0c:d4:ed:cd:16:15:b3:0a:d7:15:23:
         c6:0f:88:93:9b:9c:05:9d:b7:de:db:c0:62:3b:4c:a7:d6:83:
         bc:f2:25:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DysEijZfIjO0iuIQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
OWEwODYxNjItZmNhYi00OWI2LThlZjQtZmI4YWJjZTViZjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48WHFivxp16PxfdV0ojMACHnZjKnIN3R3Jyu
QwBuwgEX4nK/lAgJtLxTSq9bSuyg3VZFoWlVf0dgwAd0e4BOKlhoJsl9SWqUScvs
fON7CUkr6GeyaPgc8L/whDJ09TBcTvQdXNFAGq25zHOhxU7BMrS6qYdrclu3lf/f
AvkHgNpTwJGElWAB+1s8w3HYt6AUcAWtbdOgzJ7lRd2jjb2EwHxHT4lgfxiPpYaX
G3D9ew9nN5oGIZKMkV8NYWz+3s/ApO4h9f6F2TSASSawXhdPICtvZq3T02aXaelb
IKDd+k8uk47gFeEPmUKmS1854/wJSsQprzf0W8z1x7IiHUneQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqX32WBlXqeOfexWMDTpOOFFOTCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmRlYjk5NDctZjNjMi0z
ZjczLTk5NWUtNTRjYWM0Y2JjYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYYZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITeTgfIq0uxTwT9aJu5weFjbykbb8IKLCCAOsGdZodnz7gb9zUXKbaf
hk2tn0jxUDTz2Z5o72EiSXcGIrs7Y9ywH2BTSvRviyvpb2cvBdeT8Ju7doC+vCcI
qE72s50xI3fFe3xSg1wqfB5Dik9wH3if94D34BK5hGEuudF7uwi3XT4ojQTg1e17
pNOeFSyxjkTLvZvB9olBNl5v1xugBEa5qxPG2O8JZvEBVkfp4qXY2mks/EZLBu6k
5cOo9YJDXfmOYx/gfpfPLCjvgAa7S6S4c2A0/BbgxojkaqccAIUM1O3NFhWzCtcV
I8YPiJObnAWdt97bwGI7TKfWg7zyJbM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:11 2026 by rpki-client