Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa364766-b718-3526-aee4-74b463e1e670.roa
File:                     aa364766-b718-3526-aee4-74b463e1e670.roa (raw, json)
Hash identifier:          UOKwy7vyZzdVgPEncKFX7P2kT8eNZ53I2oKbeYzq1ec=
Subject key identifier:   E6:D0:4D:02:D6:82:45:23:65:84:2F:E4:5E:5E:EE:F1:77:FC:26:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29557378EA441D9F6FAD8500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa364766-b718-3526-aee4-74b463e1e670.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        97.213.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:73:78:ea:44:1d:9f:6f:ad:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=71dc6c7d-4e86-417c-8a92-6585ffa7601c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:09:5d:ba:f9:e5:97:fd:37:f9:a9:c7:ca:
                    95:06:b5:7c:92:a1:07:ce:bd:71:55:a5:d0:d7:73:
                    95:c6:64:1e:06:b8:68:49:0b:26:e0:ca:b9:79:5a:
                    6e:a8:0d:82:ba:87:f5:6a:4a:7a:32:8a:a1:43:a7:
                    14:cf:b7:da:80:31:71:e7:dd:5a:af:d1:bc:5d:96:
                    b8:9e:5c:e6:9b:1d:a2:38:14:67:9f:ff:28:e9:d0:
                    dd:ca:2a:06:da:75:74:89:dc:58:37:9e:fb:9d:3b:
                    c1:9e:2d:92:0b:d2:72:75:d7:5e:db:5e:cb:7b:31:
                    3d:9a:e7:69:75:5b:2e:80:23:6b:28:e7:49:97:a6:
                    26:2d:23:67:d2:d9:b4:f0:ce:35:6f:f8:23:1a:10:
                    dd:75:87:9e:9d:92:bd:c7:a5:e7:6d:65:2e:d3:b4:
                    c9:75:04:3f:c3:1d:19:f6:6c:94:a2:29:8a:2b:15:
                    6d:05:fc:37:9c:09:04:1b:88:7e:56:0a:c6:1a:d4:
                    c6:22:e8:c7:0f:2c:56:42:ae:dd:13:c4:7a:12:fa:
                    b9:e6:f6:2a:41:0c:28:fa:4b:b4:50:1e:1a:6d:0b:
                    d7:17:78:fc:df:e9:30:a2:f5:77:9f:8c:f0:2b:da:
                    2a:19:5c:a2:c1:80:c2:71:54:25:e4:a0:58:7c:66:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D0:4D:02:D6:82:45:23:65:84:2F:E4:5E:5E:EE:F1:77:FC:26:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa364766-b718-3526-aee4-74b463e1e670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:31:46:fe:71:e1:55:e0:86:79:96:f9:b8:84:98:a2:ae:0b:
         38:00:59:b9:25:13:5a:e3:8d:56:43:ae:7c:c6:63:5d:95:c3:
         2e:9d:a6:eb:d0:84:a7:ff:60:9c:e0:d7:ed:57:20:a3:d1:1e:
         cc:24:d6:88:c6:07:73:24:65:e9:e4:ff:1d:74:46:6a:0f:1e:
         e8:35:33:29:0e:c7:97:e2:07:f9:3f:2d:72:be:ef:92:2f:c3:
         7f:f7:a7:09:96:bd:f5:b8:3f:fe:e8:ad:c5:73:b2:a8:3e:ea:
         9b:39:c1:73:34:e5:47:7c:10:9c:39:e5:cf:ee:70:50:2e:8a:
         e5:10:49:bb:e7:1b:44:12:46:5f:9c:d0:d6:44:13:6b:d4:94:
         33:ea:0e:8c:4a:92:73:1c:fa:b4:c6:7c:e1:0b:77:2a:7a:3d:
         91:e6:de:13:e3:10:c7:78:32:33:03:10:91:28:10:3c:18:c5:
         d5:80:36:3a:20:d3:bb:e0:e4:0a:f3:1b:5e:a3:77:f2:a1:d8:
         7c:b1:94:28:bb:22:c6:63:76:2c:64:49:0b:4b:31:7c:33:a8:
         d6:c5:f0:1f:a4:ca:fd:42:b1:54:e1:fd:fa:30:94:a7:e6:d2:
         a5:ba:6d:84:8c:67:16:c5:b1:d7:bf:59:07:89:38:2c:30:05:
         04:2c:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:34 2025 by rpki-client