Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2b35badc-2bb0-33ac-97cb-695ccfa2e3b0.roa
File:                     2b35badc-2bb0-33ac-97cb-695ccfa2e3b0.roa (raw, json)
Hash identifier:          a/ctbOqkujBAh9RlxvBIJmssgauPCs8xQa2M7S91iUg=
Subject key identifier:   85:1A:16:9B:6E:AF:6E:60:5F:59:A4:DB:5D:A1:0D:3D:91:6F:60:45
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F5CE3E18DE5A0D3DE7280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2b35badc-2bb0-33ac-97cb-695ccfa2e3b0.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        97.84.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:5c:e3:e1:8d:e5:a0:d3:de:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=38513a43-861b-4b4e-bc0d-4c7852083b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:d8:9b:fd:f3:9a:d9:96:24:e6:19:d5:26:
                    d1:06:2e:1a:5a:48:f6:b6:0c:e3:b2:7c:8e:de:2c:
                    5b:3f:1a:b1:bf:0f:0e:b7:61:1c:8d:06:6b:17:cd:
                    36:6e:09:67:0c:68:87:ee:62:a5:52:95:d3:53:4d:
                    2e:3a:d1:57:3b:91:41:80:ca:12:b6:37:5a:6a:cc:
                    5a:07:af:20:86:e8:c6:94:21:54:6b:a3:56:e8:bc:
                    08:e7:97:ed:30:b3:61:9a:bf:42:5b:73:29:38:8c:
                    4e:cc:06:84:d3:b8:56:75:c6:e7:34:6f:9e:92:85:
                    97:57:7d:ca:5f:2c:16:f7:67:38:38:cb:72:a0:68:
                    47:0f:b8:de:a6:6e:15:34:59:27:c6:6a:3a:93:13:
                    0a:75:5b:81:7e:9f:44:5e:7e:aa:fd:b7:70:7d:96:
                    f3:df:0c:99:f5:e8:5b:07:cd:38:50:64:ea:de:dc:
                    2a:6e:cd:b9:c5:7b:03:99:fa:82:96:4a:0a:24:96:
                    33:fe:0f:1c:d5:aa:f2:4a:76:29:e0:02:d9:34:10:
                    a5:ea:9b:a8:28:a8:8e:e0:21:70:d3:8a:67:d9:c3:
                    67:f3:d6:a8:bb:86:8a:ca:ed:cf:c0:fa:8d:46:1d:
                    a7:61:7e:8b:46:16:07:19:82:6e:d1:7d:54:ea:80:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1A:16:9B:6E:AF:6E:60:5F:59:A4:DB:5D:A1:0D:3D:91:6F:60:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2b35badc-2bb0-33ac-97cb-695ccfa2e3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.84.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:98:6a:84:de:93:32:11:8c:81:6f:98:f9:b7:2f:b7:0e:29:
         1b:cd:eb:d3:51:d3:91:d3:f1:5c:4c:4b:aa:66:3e:87:d8:85:
         a5:b4:54:74:d5:d8:96:fc:0a:d3:28:9a:a3:b9:19:9d:0a:d8:
         01:2d:e2:83:05:93:1b:b1:43:1b:17:3a:c8:94:be:de:be:8e:
         0d:6a:12:47:16:83:67:3a:8d:d8:66:ab:e1:bb:9d:ac:a3:8b:
         f3:0f:94:21:3b:04:64:6e:10:b1:4d:87:e8:70:03:17:b0:a8:
         83:bd:ee:b7:5e:49:e6:27:06:a3:5f:a2:db:71:9e:db:35:d1:
         4b:b3:2f:c9:3a:06:93:53:1c:04:93:26:8e:0b:47:ab:fd:82:
         97:04:1b:63:da:6f:5f:68:21:db:55:a9:02:1d:33:ea:4b:ec:
         8a:06:d5:aa:74:d4:97:5d:d1:84:2a:64:e5:5d:03:01:b7:3c:
         5c:d1:8d:9b:0c:10:ca:1e:0e:05:38:82:ed:bc:6e:b7:ae:c0:
         d8:25:eb:2e:bb:e2:e2:15:9f:e4:24:82:b5:b0:6f:ac:4c:ca:
         1e:1b:4d:ad:d2:be:65:15:cc:68:bd:58:f9:65:8f:37:7e:80:
         29:ab:de:0d:47:2a:91:2e:5b:14:e6:df:29:75:26:6e:19:3c:
         ab:5d:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:12:51 2026 by rpki-client