Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9226de58-5746-30b1-8517-735767b767d0.roa
File:                     9226de58-5746-30b1-8517-735767b767d0.roa (raw, json)
Hash identifier:          KCmhf5H+VQw+nCW+DtlNpF53lv3QgPxcXTZ3/RQ3V1A=
Subject key identifier:   C0:41:BF:11:E3:19:43:DD:CF:45:A6:DE:0E:E1:47:27:5F:43:FF:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAEFC36EEEAAAB938B4500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9226de58-5746-30b1-8517-735767b767d0.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.184.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ef:c3:6e:ee:aa:ab:93:8b:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0f0caf84-24d7-4335-a8ab-7fc3c000cb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:c8:87:83:e5:64:f9:57:76:4e:12:6b:5f:
                    f6:1c:7c:ae:dc:1b:7f:dc:0f:b2:0f:ce:3b:b1:31:
                    b4:52:fd:8f:0a:18:57:3c:fe:3e:84:83:f8:a0:05:
                    c3:1b:f9:68:06:4e:83:eb:17:cb:70:3d:78:37:d8:
                    08:21:08:fe:1b:3a:74:d5:8d:33:c7:84:d7:11:0b:
                    a7:bb:65:82:8d:4d:88:78:10:cb:48:51:45:c9:d4:
                    0e:15:2a:92:de:cb:8f:57:c3:df:5f:6a:2b:a2:13:
                    15:4d:3d:90:6a:67:9c:47:76:8c:64:7b:dd:3b:d0:
                    72:e7:f8:ec:d2:b7:79:ef:10:f9:67:2e:c4:cf:7c:
                    46:45:79:41:63:ef:f4:c8:92:5a:fc:50:94:3a:cf:
                    70:de:ff:f7:be:87:5d:7a:af:20:5d:3b:54:71:e6:
                    a4:d7:42:96:98:f7:53:15:70:39:28:c5:fa:de:a5:
                    7f:22:22:5d:d2:1d:d1:ca:ba:0e:8b:19:c3:d3:93:
                    23:e5:d2:be:fd:f4:de:95:b9:09:9f:b8:04:42:eb:
                    df:86:68:2d:5f:c2:53:59:e0:48:28:85:42:56:e2:
                    bf:65:70:32:d3:e6:15:9b:fd:e6:97:02:72:d0:46:
                    1a:f6:da:fd:09:57:f0:2f:6f:c1:a7:61:0f:42:1e:
                    ec:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:41:BF:11:E3:19:43:DD:CF:45:A6:DE:0E:E1:47:27:5F:43:FF:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9226de58-5746-30b1-8517-735767b767d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.184.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:67:9b:33:18:11:10:fb:33:a4:a7:9c:fc:73:fe:11:52:15:
         46:80:08:85:39:af:bf:a8:6e:f3:77:a8:27:76:ce:b9:cc:14:
         39:e5:e7:e8:5d:f6:60:a8:c2:ab:e1:71:90:b5:ca:13:07:0e:
         4b:13:e3:11:24:46:27:5c:46:b6:df:d7:4e:a4:83:9d:80:c2:
         de:8b:84:bb:4b:51:5d:f3:1a:e6:0f:d5:94:1d:cd:39:c8:0b:
         a4:87:c5:73:7c:cb:0e:d3:47:98:dd:62:28:a3:ae:59:1e:60:
         e9:4b:94:a3:7c:6a:55:6e:d2:c2:93:2a:a2:c5:bf:3f:34:9a:
         c9:50:fe:d5:8a:dc:44:dc:5e:6c:9c:c2:a8:54:97:8c:ce:2d:
         da:57:d2:50:f6:0b:91:37:ca:90:ba:90:5b:f7:7f:6f:53:e8:
         f0:f4:7d:27:48:65:cc:ae:96:06:ab:a9:8d:6a:6d:27:3a:65:
         78:7f:01:ba:6f:fc:1a:b1:2a:ec:45:cc:77:49:a0:04:e9:a6:
         d7:07:75:65:7c:fd:1a:7e:d4:2e:17:7d:8d:95:0a:3b:61:f7:
         b6:76:4a:0a:4a:33:d1:ab:8d:15:f9:1c:5e:be:f3:ed:f5:68:
         7e:b2:8f:fd:ab:86:91:a6:21:71:46:55:4f:bd:9b:f4:86:90:
         c5:2d:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:36:03 2025 by rpki-client