Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ac0ed88-0ed4-3c9f-9c52-1b08782fa0c1.roa
File:                     8ac0ed88-0ed4-3c9f-9c52-1b08782fa0c1.roa (raw, json)
Hash identifier:          Cx272IMByGpaSC5L7wRsYxwONbtreYBMFS9v8+p1HiY=
Subject key identifier:   93:07:B3:99:B6:0E:0A:19:0D:6E:8E:BA:53:C7:D2:C5:BE:AF:E7:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DADDCA1C4700541E211500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ac0ed88-0ed4-3c9f-9c52-1b08782fa0c1.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.135.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:dd:ca:1c:47:00:54:1e:21:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=37a785b4-5956-4e44-8568-d80747c75b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:c8:d3:f2:01:e2:c6:1b:7b:95:40:7f:06:
                    54:fa:b8:ca:41:c5:35:50:75:ed:3c:7c:fd:60:2c:
                    13:21:08:6c:0e:aa:6e:3b:71:60:3f:51:a2:b5:95:
                    82:87:fe:0c:7b:7f:50:43:7b:df:d2:57:ed:dd:79:
                    f9:9d:cd:7a:57:a9:be:4c:bf:93:06:5f:cf:21:30:
                    52:db:d8:f2:1b:d0:68:34:68:a7:26:5e:c2:7f:69:
                    9c:ba:03:17:af:33:6c:02:7d:4a:57:b6:62:85:a2:
                    b4:35:94:d6:2f:d3:ad:c9:bf:4e:16:1e:62:9b:02:
                    08:38:b1:f2:fc:19:0a:aa:26:dc:8a:46:05:d5:83:
                    03:30:01:2a:dc:2d:e6:a2:dc:9e:a2:01:0e:6b:43:
                    48:56:c2:26:bb:17:af:f8:fc:d6:7b:30:b0:07:2a:
                    59:5f:2a:22:ed:b1:af:2e:6b:66:df:e6:ff:b4:46:
                    85:5c:5d:f3:0d:eb:8c:8b:88:a2:b7:6c:a9:4e:f0:
                    55:0a:86:0e:78:51:e7:3f:cf:a7:6a:aa:f1:48:6e:
                    36:b6:a2:42:4f:a6:91:32:59:ef:e3:f5:55:cc:08:
                    2b:5f:76:7d:83:91:45:1b:1c:81:fc:4e:56:fa:f0:
                    0c:e3:32:21:10:32:b8:09:d1:37:93:fc:f5:43:94:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:07:B3:99:B6:0E:0A:19:0D:6E:8E:BA:53:C7:D2:C5:BE:AF:E7:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ac0ed88-0ed4-3c9f-9c52-1b08782fa0c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.135.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:57:72:6a:80:0f:4e:cd:5d:e6:81:38:1c:58:82:2d:fc:c9:
         fb:96:53:e1:11:c2:c7:e8:db:13:3b:36:f4:74:ca:bd:fd:44:
         de:8b:ee:0a:90:fb:3c:8e:b7:f4:92:d5:00:d5:9b:a3:d9:16:
         b0:02:fe:08:66:11:85:4f:50:dc:b8:d0:7a:3b:46:3f:a9:f4:
         80:40:e6:c9:65:57:24:39:3d:5a:d5:0a:51:19:99:dc:45:b4:
         be:2f:c0:5f:82:99:97:18:1f:3e:aa:72:87:02:8f:14:e6:44:
         db:8f:78:e7:8a:4e:56:12:f5:f9:ac:e5:fe:0e:ba:65:1b:91:
         99:2e:07:b6:03:d2:32:d4:1a:10:75:31:a5:ec:33:3b:26:70:
         76:ae:cd:e5:4a:03:0e:a6:c7:09:66:51:6f:2e:b4:24:eb:33:
         51:9f:e1:3a:ec:23:5a:a2:7a:ad:21:83:48:cf:05:c1:94:f7:
         9c:32:c9:29:85:19:be:3c:e2:45:74:e1:36:af:da:a8:d6:cf:
         c3:e1:88:6c:6c:ce:c7:69:65:43:5d:72:39:9d:05:f5:46:42:
         11:54:c4:23:b4:3b:ca:2d:2c:56:13:53:44:40:82:d6:b2:c6:
         2a:c5:b7:3b:03:2a:4c:66:18:0b:e5:e6:65:f2:91:aa:11:6b:
         09:c5:6f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:56:38 2025 by rpki-client