Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41947ac2-0ed3-382f-91c9-d472369014d3.roa
File:                     41947ac2-0ed3-382f-91c9-d472369014d3.roa (raw, json)
Hash identifier:          2qk/5I0YKuUdNYccxzaJahEbTTUnbnEphSHTQE05RY8=
Subject key identifier:   5B:5F:6E:84:08:8F:D4:32:54:BA:B9:FB:DC:C4:87:13:F7:A9:AE:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849AE7F44FD69416E5241908FA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41947ac2-0ed3-382f-91c9-d472369014d3.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        97.213.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:44:fd:69:41:6e:52:41:90:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=3189d3a0-fe03-446e-a93d-167622ab4d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:db:9f:7f:da:92:39:3a:69:36:48:91:bd:
                    3b:e2:09:09:e6:2e:4c:e4:c5:07:47:1b:69:22:19:
                    d6:f2:7d:9e:ec:6b:17:e9:d0:bc:1f:9c:93:ab:3f:
                    26:98:b8:1a:8c:82:7c:11:ed:ab:a6:92:21:c8:0d:
                    34:69:f1:94:33:2a:6f:62:fe:5f:b3:d3:0b:10:a1:
                    04:cf:2b:9b:8c:d5:5a:2b:fa:e6:a0:fb:f8:e9:79:
                    c0:5f:2c:f8:64:97:7c:30:7b:74:de:00:a4:c4:c6:
                    c8:03:25:56:69:df:e5:47:d5:07:d3:51:ee:61:ff:
                    d2:ce:2b:bc:58:1c:15:b0:79:3c:f5:89:0c:90:3c:
                    ad:ba:db:62:ef:94:ea:5e:09:44:23:c4:3d:a5:29:
                    8d:0a:07:01:04:e1:69:50:74:5b:3e:c9:46:a8:b2:
                    04:95:e3:00:e2:1f:9b:3d:d2:a0:49:42:eb:fe:51:
                    5a:1f:4b:04:db:d8:4b:94:db:2c:3c:3b:e9:8c:06:
                    01:d7:49:eb:59:af:c4:40:4f:fc:7d:36:96:99:db:
                    2b:24:fd:e2:d1:d0:ec:36:61:45:fe:30:cc:8d:4b:
                    8f:9a:3b:50:6d:ae:95:de:49:28:d9:a4:37:8f:ca:
                    2b:b6:e4:19:bf:e9:e6:cd:fa:6a:c2:b0:8b:85:e5:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:6E:84:08:8F:D4:32:54:BA:B9:FB:DC:C4:87:13:F7:A9:AE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41947ac2-0ed3-382f-91c9-d472369014d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:da:95:da:b1:fd:20:0e:e0:38:de:ce:a0:31:c0:85:b8:7b:
         6a:59:6c:e1:43:e4:25:47:28:c3:80:de:4d:54:c2:a1:01:da:
         03:15:2e:2c:25:f6:11:83:48:55:6f:13:e2:8d:4b:9b:18:90:
         85:85:87:d6:f8:e9:11:b9:5b:20:e1:9a:67:56:3b:97:97:e3:
         d7:32:c7:6b:31:e2:6f:43:43:3d:16:f9:4b:fd:a0:b7:9e:37:
         b4:68:a1:ab:22:b7:dc:8e:25:07:05:b6:c0:e1:eb:a0:ee:b5:
         c7:31:cb:99:98:1e:41:00:13:29:22:84:ff:57:c9:4d:bd:d8:
         80:92:06:a3:6d:9f:89:6f:3a:3c:01:4f:fc:48:32:31:ba:e4:
         f5:84:2b:eb:8d:a3:bb:bf:79:be:b2:ab:61:dd:e5:cf:8b:2e:
         54:f3:b1:15:06:95:fb:dc:e9:74:8a:ad:26:ad:cb:4d:85:bb:
         4f:ca:00:b5:3d:8a:02:3f:a6:6a:b0:1f:e8:11:41:a5:8d:81:
         fc:1c:f9:54:1f:32:4c:d5:9f:f7:54:68:2b:f6:32:dc:3e:58:
         70:99:c9:39:06:69:59:86:cf:20:60:b1:d8:25:5d:45:8d:c1:
         4d:72:d9:cd:23:34:15:04:e8:47:6d:fa:7f:7b:84:80:83:6f:
         e2:d1:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:19:56 2025 by rpki-client