Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ba87d31-4614-3779-a648-60574d102180.roa
File:                     7ba87d31-4614-3779-a648-60574d102180.roa (raw, json)
Hash identifier:          aHT1UGE6IfW5kCyz4JifIJGhYtIA8CrUdPguCxPqPYg=
Subject key identifier:   8B:E8:36:5B:DD:E2:AF:19:C9:FA:59:95:3C:2F:53:61:54:9E:B9:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A9B25E08684CADFD21EC0E560
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ba87d31-4614-3779-a648-60574d102180.roa
Signing time:             Tue 22 Jul 2025 19:27:22 +0000
ROA not before:           Tue 22 Jul 2025 19:27:22 +0000
ROA not after:            Mon 20 Oct 2025 19:27:22 +0000
asID:                     6167
IP address blocks:        97.248.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:25:e0:86:84:ca:df:d2:1e:c0:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 22 19:27:22 2025 GMT
            Not After : Oct 20 19:27:22 2025 GMT
        Subject: CN=c6c5af54-5484-4f6f-a5bb-8f31cf2bcacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:6c:9f:a9:5e:e4:da:0a:b4:7b:dd:aa:70:
                    33:8d:e0:b4:d5:98:a8:ad:73:9e:88:18:83:34:e0:
                    58:cc:53:8e:1f:56:1f:c3:09:db:ad:d7:f9:a8:9c:
                    e4:5b:df:5d:ba:c8:30:16:4b:8e:ea:e5:c4:e2:15:
                    94:b9:8e:1e:9b:62:5f:7d:04:e9:97:52:bf:f6:c5:
                    72:6b:1b:36:53:f4:b0:66:fa:c4:2a:e7:28:24:e5:
                    a0:60:78:f7:bd:3e:82:2c:4a:92:c8:dc:74:d6:30:
                    42:5f:ef:6a:04:de:ac:e2:c2:e4:18:3b:58:10:d6:
                    66:82:cb:46:9d:4a:ea:b6:3e:5e:fe:51:15:92:67:
                    70:eb:50:0b:33:ba:ef:b3:3b:18:7e:b4:1d:d7:c7:
                    d9:27:12:fc:b3:db:99:ad:f7:08:83:8d:6d:83:ac:
                    c4:ae:d7:53:6e:da:09:90:cb:1f:ef:9e:c3:48:e9:
                    16:0f:a2:d9:59:b4:bd:4e:3e:f2:f2:17:5c:25:85:
                    44:12:39:2b:ce:7d:28:b1:cb:c2:4a:b4:c6:f0:1b:
                    3d:22:4b:34:4f:b5:d9:18:fa:dd:2f:a1:21:0f:0a:
                    7c:e5:55:eb:96:b4:78:83:22:53:de:a3:fe:62:19:
                    32:ad:83:c6:c7:e4:50:13:c7:4b:92:6b:b3:a3:88:
                    0f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E8:36:5B:DD:E2:AF:19:C9:FA:59:95:3C:2F:53:61:54:9E:B9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ba87d31-4614-3779-a648-60574d102180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.248.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d0:ef:59:0f:ac:dd:6a:5f:87:4f:5c:01:fb:ee:95:1d:05:
         d2:8e:ff:fa:69:24:a0:37:7f:d7:f0:44:27:4b:c5:a1:37:9c:
         20:32:87:d0:7d:e4:2a:f3:3b:03:ee:f4:7e:7f:bb:72:4b:98:
         d2:fc:b5:d5:b3:07:1f:7a:fa:d0:db:06:8b:ba:b7:41:83:92:
         ee:2b:15:5e:b3:bb:9b:0d:8f:6e:d3:9e:d8:33:75:0e:eb:f7:
         ee:e6:fb:c3:c0:a7:24:b6:bd:58:b0:02:41:7e:66:54:84:fd:
         f4:31:40:f2:e2:70:f0:f0:12:01:9a:65:65:ea:01:b1:e4:de:
         99:b2:e5:aa:fb:da:59:e5:3e:bc:98:30:31:05:d9:9b:95:04:
         2e:4e:ec:6c:09:f4:1e:0c:c2:53:97:2b:13:25:e0:06:40:62:
         7c:7b:53:d3:1b:72:d3:0e:7c:9f:a9:e2:fa:02:f5:1b:3d:8d:
         ef:28:20:65:3c:f7:e4:ba:ab:4f:6d:1e:55:0c:81:44:09:63:
         94:4a:26:36:fe:39:dd:f3:2c:ba:f0:b2:aa:df:39:07:f8:ae:
         ff:63:cf:9e:f9:f0:88:07:bd:a4:98:a8:c8:ea:0f:25:90:ce:
         30:c8:80:4f:af:1e:12:ab:65:20:90:eb:52:14:62:c8:7e:20:
         d8:29:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:00 2025 by rpki-client