Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/104d4d10-b2a7-3598-8a27-d9e12d6ef45c.roa
File:                     104d4d10-b2a7-3598-8a27-d9e12d6ef45c.roa (raw, json)
Hash identifier:          WYxVKg6rAyG/j7M5qPgTe8W+no8csGgAzBalknHjRLM=
Subject key identifier:   66:9E:89:0A:2C:E4:36:46:90:7E:D5:A6:5F:4A:6F:89:47:93:54:95
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF0047AEB87EA98315E20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/104d4d10-b2a7-3598-8a27-d9e12d6ef45c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.186.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f0:04:7a:eb:87:ea:98:31:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f019b8e8-1e1a-4d3d-9945-0ddde6bfdaae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:f3:09:e3:29:d3:d6:90:e9:6b:af:cb:de:
                    61:b5:20:bb:a6:cd:ed:13:32:d6:2e:90:33:7a:b6:
                    1e:d3:4d:0a:fa:64:59:be:0a:91:08:a4:90:1a:1d:
                    58:40:ec:ae:5b:33:b5:38:b4:77:55:1f:01:c7:ee:
                    af:44:30:5c:59:94:c6:33:36:3a:ff:23:8d:71:99:
                    4b:b5:1c:fb:c9:e3:5e:53:0a:37:2b:b8:de:5c:e0:
                    be:9e:bf:b4:2e:60:de:64:db:91:fe:85:33:c6:06:
                    18:87:83:5b:49:4e:83:92:13:ee:ee:04:15:69:71:
                    23:a6:42:39:36:8d:0a:2c:dd:40:a1:2d:c8:ef:66:
                    d3:22:66:46:b4:7c:c9:ed:83:7f:9a:83:e2:98:5a:
                    03:74:d5:17:91:cd:74:ed:e5:e0:b9:50:2b:3d:a4:
                    27:83:73:bb:27:4b:8e:5c:60:40:39:14:0a:bd:fe:
                    8f:33:a3:bc:8b:2a:38:2f:c5:15:5a:0b:92:da:12:
                    65:9c:4c:5a:63:77:d8:43:c1:78:33:4b:8c:dc:60:
                    2e:70:79:8f:58:7b:11:f3:78:1d:69:49:3a:99:52:
                    ce:be:8b:96:de:e2:dc:b6:f7:ed:fb:e7:e2:0f:25:
                    8d:ca:8a:6c:e0:de:15:02:d6:7b:fc:56:1d:bd:db:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9E:89:0A:2C:E4:36:46:90:7E:D5:A6:5F:4A:6F:89:47:93:54:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/104d4d10-b2a7-3598-8a27-d9e12d6ef45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.186.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e7:44:d5:56:bd:54:c0:d5:f0:40:24:67:b4:af:9d:db:c5:
         fa:f6:6b:c8:ca:46:c7:be:75:fc:a8:5c:3a:b3:79:37:78:90:
         32:fb:fb:ae:89:c0:4e:db:02:e8:5b:1e:20:e1:d4:d7:77:e3:
         8f:25:08:de:00:d4:74:b5:cc:74:8f:9e:80:14:be:e6:b0:e4:
         cb:12:0f:fb:75:ad:59:cc:1c:e6:eb:8b:1f:dd:c1:d3:7f:1c:
         7e:da:2b:df:29:6d:5c:34:a6:03:94:42:20:57:3b:b0:11:b5:
         51:97:e1:c6:6f:23:6d:9c:94:e3:21:f8:0b:34:15:b1:35:21:
         e1:d4:d6:4c:f3:9b:7f:91:5a:1d:7a:63:57:35:32:83:02:77:
         2c:07:f2:4d:d3:17:b8:de:d0:c9:db:0a:d9:8e:d8:30:d4:f2:
         0c:77:76:f0:b1:84:55:0b:41:e4:ac:89:da:7f:1d:fa:8e:0a:
         c5:ff:1b:0f:76:32:37:11:ad:a7:b5:b4:69:4f:e4:68:1d:c6:
         5d:b6:4e:f9:68:4e:61:00:74:b1:59:fe:8e:bc:0d:47:be:73:
         c0:60:4d:c6:24:03:ee:de:12:09:6b:85:a9:42:03:bf:d4:fe:
         11:3e:ab:0e:43:8f:72:27:1d:e2:25:5a:a7:36:6b:27:09:cf:
         78:d8:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:00:44 2025 by rpki-client