Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f3e58ad-3413-3c2c-a7ce-f72e0959f7ec.roa
File:                     0f3e58ad-3413-3c2c-a7ce-f72e0959f7ec.roa (raw, json)
Hash identifier:          VcU1p4lYPkWmTTMpG8Gx3sXqtSO8TMXFWLj/7oJOpdA=
Subject key identifier:   11:C0:A3:5A:13:43:94:7B:3C:C6:0A:3D:D5:9F:15:3A:4E:0D:98:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAE05528A6154131BB8D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f3e58ad-3413-3c2c-a7ce-f72e0959f7ec.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.164.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:e0:55:28:a6:15:41:31:bb:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0a73c4c8-89bd-4ba7-9040-30933c874dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:8c:a6:21:45:93:b0:2c:17:5c:4a:43:59:
                    f3:5d:97:06:98:a6:27:6d:45:19:83:4b:18:d8:dc:
                    81:92:09:b1:da:eb:4e:43:d1:e6:7a:86:ee:d6:ac:
                    a3:cb:bd:f6:65:52:88:e2:40:43:8b:f2:7d:0d:d2:
                    39:09:29:6e:aa:5f:db:05:97:fa:92:de:c6:6a:4e:
                    88:5e:ad:df:22:25:59:0f:a7:7c:6d:97:e4:e6:a9:
                    2a:33:72:71:f9:e2:40:5f:0e:cb:0c:6d:8e:83:aa:
                    e1:d1:7f:04:90:7f:36:79:0f:0a:90:30:58:b8:3b:
                    42:fb:bd:93:73:84:7f:96:8d:8c:75:f0:42:79:b5:
                    bf:c9:2d:a8:be:1e:1e:18:a4:5c:68:78:c4:d6:91:
                    11:bf:39:92:4d:c5:ed:62:d7:3d:24:81:a2:98:22:
                    f7:92:6d:f2:75:6a:ae:41:1b:f3:13:8f:dd:27:7a:
                    a4:cb:0f:02:b7:d0:52:53:bd:3f:71:aa:c9:f0:fa:
                    e3:6f:60:c5:5c:a3:4f:91:38:1d:3d:86:6e:c7:2c:
                    2a:4e:d7:ae:a9:a2:d5:df:7d:9c:80:77:32:a0:8f:
                    af:df:46:aa:1b:94:ca:42:09:94:49:4b:a4:79:ed:
                    3f:9e:6b:f1:89:f3:ed:a9:ad:7c:14:9c:d4:d4:e3:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C0:A3:5A:13:43:94:7B:3C:C6:0A:3D:D5:9F:15:3A:4E:0D:98:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f3e58ad-3413-3c2c-a7ce-f72e0959f7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.164.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:53:81:b2:25:84:10:cd:09:59:58:40:5b:c8:af:8e:bf:8c:
         2c:b1:61:05:4b:69:66:d0:11:dc:1b:12:13:59:f7:39:5f:d9:
         d8:95:61:d6:02:a4:bf:a8:d5:1c:64:83:33:39:3a:5c:e7:57:
         69:25:5f:35:73:9f:0d:31:9b:b7:88:a0:bf:57:6f:da:cc:87:
         fa:a4:dc:5d:23:12:8f:54:0e:19:06:67:b3:f4:81:2d:70:55:
         ac:ad:4d:52:00:40:83:c8:25:d3:c2:77:7b:2d:ee:ab:d3:68:
         ef:7c:ce:9d:51:a0:40:9f:07:75:43:eb:78:45:f2:b5:6d:ab:
         a8:8f:95:30:c4:24:4c:0e:ea:68:c3:b6:37:95:7d:4c:2e:bb:
         9a:09:58:11:c8:ab:1d:71:23:ca:b2:5e:d2:52:55:de:24:15:
         3c:6f:c5:e6:43:08:ad:33:89:27:c4:fd:60:78:5a:b7:7c:8b:
         6b:9b:e5:b8:e4:c7:df:5d:60:f3:22:a6:53:9b:fa:c3:c3:b6:
         f0:c8:4b:e6:e0:eb:f3:5a:5f:c9:e9:a2:06:38:6c:49:5a:2c:
         d9:d5:8f:01:af:cf:e4:c2:a4:07:e0:d7:74:d3:a9:5c:35:d7:
         80:56:c4:21:45:31:78:a6:d0:ff:3b:5d:bc:ad:39:20:66:dd:
         14:cd:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:17:06 2025 by rpki-client