Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/109bc38d-d5a0-3b99-b89c-0cfbc84d3b4e.roa
File:                     109bc38d-d5a0-3b99-b89c-0cfbc84d3b4e.roa (raw, json)
Hash identifier:          UYHj45IhZd9aflAW18d5FdjAP5WLNbhVXProKfDVhVE=
Subject key identifier:   DB:61:33:F0:CB:1F:CC:5C:B9:89:76:B7:50:FA:30:4D:24:7E:E8:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A126D42E4DD1206A87B5B7E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/109bc38d-d5a0-3b99-b89c-0cfbc84d3b4e.roa
Signing time:             Tue 03 Jun 2025 20:05:28 +0000
ROA not before:           Tue 03 Jun 2025 20:05:28 +0000
ROA not after:            Mon 01 Sep 2025 20:05:28 +0000
asID:                     6167
IP address blocks:        97.247.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:6d:42:e4:dd:12:06:a8:7b:5b:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  3 20:05:28 2025 GMT
            Not After : Sep  1 20:05:28 2025 GMT
        Subject: CN=6df4fbaa-d43c-4b59-a68b-007e3a98cc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:ba:56:bf:49:5a:49:59:d2:bd:0c:0c:a8:
                    cd:f0:6c:5a:8c:ff:7f:34:78:70:2e:9d:5d:40:c5:
                    9b:b0:55:80:e9:26:96:53:21:82:b6:05:e0:db:57:
                    f6:3f:a9:24:2c:be:b2:04:43:7b:91:4f:72:09:a3:
                    bc:a3:8d:1d:8f:e7:eb:a3:de:e4:f3:f3:92:38:1a:
                    32:62:eb:4d:7a:0d:04:d8:5e:f3:99:09:b3:d7:9d:
                    88:01:93:46:49:d9:25:1f:86:96:ab:8c:26:01:b6:
                    ea:4c:b3:ad:08:93:49:74:d8:9e:81:ce:d0:94:01:
                    3a:26:42:8d:ed:fa:22:70:4e:bc:2d:fa:28:b7:ee:
                    20:22:d3:35:51:f2:ba:58:8b:6d:32:4e:b1:28:09:
                    fd:28:47:0a:2f:f8:f4:94:ca:90:a3:0f:29:25:c0:
                    b2:2a:e9:62:c0:14:8c:8a:fb:50:f4:c4:d4:92:71:
                    2f:27:1b:47:d9:39:8a:1a:99:0f:4d:47:d4:cb:ed:
                    ec:0a:f6:02:7c:bd:9e:37:56:29:0e:d6:fa:c8:dd:
                    a3:bf:05:1c:8b:0a:93:fa:9a:82:fb:1c:fd:22:41:
                    50:42:b6:dc:a0:53:69:dd:74:2b:76:cf:d0:ad:6a:
                    18:e3:d9:af:41:da:ab:e0:56:2b:2f:09:79:76:ff:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:61:33:F0:CB:1F:CC:5C:B9:89:76:B7:50:FA:30:4D:24:7E:E8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/109bc38d-d5a0-3b99-b89c-0cfbc84d3b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.247.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:6b:c0:9f:86:24:b5:fd:6e:f9:1e:58:75:44:18:de:a6:
         1c:f5:53:d1:c0:0d:a8:72:e0:72:14:e1:a5:b8:fd:fb:9d:c2:
         aa:87:dd:f0:11:8b:5e:aa:ab:00:88:35:4f:7b:a8:f5:42:39:
         73:06:9d:c0:ac:d9:9f:f0:48:cf:b6:b7:c0:fb:e9:d9:34:2e:
         91:62:89:ac:e6:a0:51:6a:37:98:2c:04:16:90:8c:7c:84:2f:
         a4:f6:a0:3b:88:59:5e:e3:f8:96:91:c3:09:fe:31:c5:30:c8:
         5d:07:22:a4:76:7a:c3:ad:4c:28:09:a2:0b:84:9c:49:b4:52:
         60:65:f6:1d:28:3e:87:a4:ae:d3:e2:4b:34:a8:32:65:f6:37:
         8c:12:4b:16:eb:c3:45:7e:c1:74:45:01:c8:a3:96:95:9a:a2:
         b3:b8:a7:2e:6e:84:8b:8c:b5:ca:30:24:4e:92:6b:fe:6a:71:
         cb:0d:92:74:a4:bc:0b:ff:81:55:b6:f1:0b:71:ed:12:a2:13:
         e4:33:52:9c:46:19:2a:39:8e:db:c6:45:85:9e:f4:9b:26:40:
         9d:7d:40:38:dc:6e:fe:82:1d:08:4f:52:0f:db:8b:d3:57:d5:
         68:32:02:a6:64:c5:39:d3:06:13:4f:f3:9a:e8:4e:ca:5b:91:
         08:5a:5b:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoSbULk3RIGqHtbfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYwMzIwMDUyOFoXDTI1MDkwMTIwMDUyOFowLzEtMCsGA1UEAxMk
NmRmNGZiYWEtZDQzYy00YjU5LWE2OGItMDA3ZTNhOThjYzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFq6Vr9JWklZ0r0MDKjN8GxajP9/NHhwLp1d
QMWbsFWA6SaWUyGCtgXg21f2P6kkLL6yBEN7kU9yCaO8o40dj+fro97k8/OSOBoy
YutNeg0E2F7zmQmz152IAZNGSdklH4aWq4wmAbbqTLOtCJNJdNiegc7QlAE6JkKN
7foicE68Lfoot+4gItM1UfK6WIttMk6xKAn9KEcKL/j0lMqQow8pJcCyKuliwBSM
ivtQ9MTUknEvJxtH2TmKGpkPTUfUy+3sCvYCfL2eN1YpDtb6yN2jvwUciwqT+pqC
+xz9IkFQQrbcoFNp3XQrds/QrWoY49mvQdqr4FYrLwl5dv92rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNthM/DLH8xcuYl2t1D6ME0kfuiTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTA5YmMzOGQtZDVhMC0z
Yjk5LWI4OWMtMGNmYmM4NGQzYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYfcAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEY6a8CfhiS1/W75Hlh1RBjephz1U9HADahy4HIU4aW4/fudwqqH3fAR
i16qqwCINU97qPVCOXMGncCs2Z/wSM+2t8D76dk0LpFiiazmoFFqN5gsBBaQjHyE
L6T2oDuIWV7j+JaRwwn+McUwyF0HIqR2esOtTCgJoguEnEm0UmBl9h0oPoekrtPi
SzSoMmX2N4wSSxbrw0V+wXRFAcijlpWaorO4py5uhIuMtcowJE6Sa/5qccsNknSk
vAv/gVW28Qtx7RKiE+QzUpxGGSo5jtvGRYWe9JsmQJ19QDjcbv6CHQhPUg/bi9NX
1WgyAqZkxTnTBhNP85roTspbkQhaW0s=
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:58:23 2025 by rpki-client