Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/230e4ed9-1f71-3c63-83b9-c85a08699253.roa
File:                     230e4ed9-1f71-3c63-83b9-c85a08699253.roa (raw, json)
Hash identifier:          Gb2QJbrpmNdqb1bF1bW7Wt03Y4gZ8NZ0AW4yteBtqys=
Subject key identifier:   AC:6A:67:47:D3:0A:A2:85:75:EA:B8:26:D4:D7:19:77:0C:47:E9:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAEFF8975483A27E756900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/230e4ed9-1f71-3c63-83b9-c85a08699253.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.186.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ef:f8:97:54:83:a2:7e:75:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=57d8be0f-1d50-4585-ae2f-fbc2c49adee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:a7:9b:e8:0e:e8:21:89:fa:3e:db:6d:12:
                    e8:70:ec:e4:a1:78:ba:36:8b:42:69:92:b3:dd:3b:
                    dc:1d:be:7a:f4:3b:72:bd:d8:bf:b5:83:10:d7:c3:
                    7c:06:bc:bd:27:ab:2b:31:01:97:47:8e:4e:8c:48:
                    a8:2c:64:01:07:51:c0:f1:ba:4d:fb:a9:88:3c:26:
                    15:c9:b5:cb:7c:55:54:4d:db:1d:b0:06:4c:c9:b1:
                    2d:fc:06:2e:94:c2:ba:d9:5b:26:a7:2b:27:f2:cc:
                    2b:19:92:c5:4c:19:7a:48:db:56:0a:0e:26:5e:07:
                    0d:04:bb:3a:14:c4:d7:d7:84:04:54:fe:50:03:5a:
                    6f:1b:db:ad:47:d7:9e:b1:fe:ad:8d:33:4e:44:71:
                    ca:e7:3e:c5:6b:69:f1:0d:b0:65:1d:88:6b:81:28:
                    4f:d5:f8:d8:81:ad:39:ef:ef:d1:b3:65:09:ed:bd:
                    82:a0:05:f2:5c:87:72:0b:18:b0:66:77:d8:c7:40:
                    58:64:6e:c3:d6:ec:34:c1:68:7a:36:4f:7a:a2:04:
                    5c:7a:0b:04:16:e4:75:f7:63:be:ef:04:a6:06:9c:
                    71:11:c9:4b:eb:48:48:41:de:66:5f:10:fa:7d:a8:
                    66:a5:f4:18:8e:f2:57:88:ba:af:e8:a6:a3:7b:c4:
                    d1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6A:67:47:D3:0A:A2:85:75:EA:B8:26:D4:D7:19:77:0C:47:E9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/230e4ed9-1f71-3c63-83b9-c85a08699253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.186.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e0:a2:02:0e:24:75:d5:b8:6a:89:94:ad:b3:5e:31:43:4e:
         9f:a2:0f:90:48:4b:fc:d3:cd:96:62:8b:d1:15:81:5e:4b:ae:
         7a:83:4b:66:ac:29:84:b6:51:db:2e:88:93:be:7e:7a:4f:ac:
         b6:e5:a8:58:cd:87:bb:93:8d:74:42:93:4a:e6:99:d6:a6:55:
         82:82:a9:71:3c:fc:b7:80:05:30:ce:a4:9a:d3:a3:ea:c7:ba:
         df:e8:fe:49:c1:ad:ce:c7:37:93:3e:5e:c9:14:a4:68:15:73:
         f7:c6:0a:da:b3:43:12:a2:59:c2:3a:95:e8:42:5c:cc:1b:3a:
         a9:f3:36:63:80:0c:6b:ae:71:7d:de:34:49:ee:af:43:96:a2:
         ae:48:dc:97:56:49:6e:5d:15:4a:ef:71:d4:e2:12:eb:62:a3:
         b8:a5:d0:e7:79:3f:9d:55:f0:1d:bb:ab:e3:64:4d:ae:54:cf:
         61:8a:7c:f5:b2:5d:8f:1f:53:25:82:a7:4f:4a:b8:93:07:69:
         5d:19:4d:0f:ac:00:70:5f:53:b3:b9:71:62:d4:4b:dd:77:19:
         6a:52:82:fe:e7:26:51:4a:f6:28:d1:31:43:84:b7:31:cf:3c:
         0c:6a:4c:84:8d:a3:cf:e9:44:0c:99:65:7a:6d:22:8b:66:ea:
         ed:3c:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:09:34 2025 by rpki-client