Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5032306b-f6f4-3a43-87b3-525190153b6a.roa
File:                     5032306b-f6f4-3a43-87b3-525190153b6a.roa (raw, json)
Hash identifier:          +Wfw+xgxR2ct1zMwzm4CB8/3FH6AowTauyTL3w3tRJ0=
Subject key identifier:   45:D0:8C:18:FD:29:1E:3F:1B:1A:37:7A:61:F0:20:4C:78:A6:2A:FC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAE09C28F972744AD21880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5032306b-f6f4-3a43-87b3-525190153b6a.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.177.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:e0:9c:28:f9:72:74:4a:d2:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=61abb2f1-ef4d-4404-b45c-e1c6e34f98bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:b6:89:a5:c2:27:48:eb:b9:d2:c4:18:a0:
                    6a:3d:57:fd:33:31:f6:45:cc:97:ad:df:25:8c:2e:
                    c9:c9:c2:bc:51:74:39:8a:37:16:70:a0:6c:6d:dd:
                    38:36:b6:db:e8:9d:d0:ee:78:d5:42:f7:9c:c4:96:
                    ab:d9:cf:ef:ba:54:85:44:92:9c:93:96:25:2a:68:
                    59:21:5e:01:7d:48:1b:bf:cd:18:34:d8:0d:5e:0d:
                    45:5f:e6:16:8f:9a:25:21:23:82:37:66:ba:c6:68:
                    a9:bb:6b:cf:0b:bb:c0:8e:08:d6:b8:84:34:50:f3:
                    54:90:a2:c8:00:64:9f:72:c5:80:ac:77:bb:a2:ed:
                    2b:f3:92:d0:02:6b:2a:e5:b0:d0:c8:c9:c4:6d:c2:
                    b9:c3:0f:4e:a4:cf:18:e9:02:61:ba:10:3c:f4:b3:
                    c2:60:8c:cb:e4:f3:f4:5a:77:f1:ae:ab:ed:f5:3b:
                    30:50:3a:a3:4c:b1:f0:97:73:a7:44:c6:94:e6:a2:
                    00:cc:7d:9a:21:2d:a8:ed:6a:21:17:47:61:b8:a7:
                    2a:4a:4c:47:d0:12:2a:49:b5:61:64:f3:ce:f8:35:
                    7b:ae:8e:70:16:a5:03:3c:eb:58:31:cd:2a:cf:17:
                    83:3c:ad:66:60:71:76:f1:1f:08:83:14:4e:7e:d1:
                    fb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D0:8C:18:FD:29:1E:3F:1B:1A:37:7A:61:F0:20:4C:78:A6:2A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5032306b-f6f4-3a43-87b3-525190153b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.177.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c9:01:5a:5f:8b:25:3b:f8:37:20:8f:52:a8:7c:1c:3d:5c:
         b5:90:3a:e7:ee:44:a9:d7:af:92:41:19:69:8f:ca:68:1e:3d:
         7b:43:a4:51:f9:85:15:70:b1:0e:ec:a8:53:e0:9f:e9:c6:ef:
         8e:af:fc:67:74:6e:40:f1:2e:75:9c:9f:0f:69:83:7f:74:a6:
         d2:38:60:9e:10:17:ca:a9:10:1b:78:b3:48:81:40:2f:63:31:
         31:7e:e7:b3:3e:0f:62:72:54:84:51:09:35:f3:39:5b:bd:25:
         f5:1c:25:02:ab:bc:6b:06:44:96:97:d8:55:04:fc:66:d1:1e:
         30:19:7d:db:6f:64:d3:0c:ce:58:d1:8a:52:27:58:97:9c:19:
         cd:cd:03:39:aa:e4:10:ec:94:76:16:4c:4c:2c:ec:e3:15:55:
         62:ba:84:f7:c1:b2:14:97:af:ad:5f:b2:9b:c2:00:da:98:03:
         1d:83:98:3c:9c:00:65:c1:d2:07:1f:c4:14:83:5c:64:28:e7:
         89:f1:0e:bd:e6:95:f1:58:4b:ca:55:45:8e:38:eb:a9:bf:93:
         11:20:c3:c6:08:ab:04:ca:a4:b5:17:a0:82:f5:f4:a3:c6:f0:
         ec:93:1c:7b:55:01:cd:41:3a:6a:71:1e:73:b9:57:2c:c9:af:
         c0:4d:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:15:06 2025 by rpki-client