Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aec5e40a-fb82-3378-9301-93490c2fcd97.roa
File:                     aec5e40a-fb82-3378-9301-93490c2fcd97.roa (raw, json)
Hash identifier:          ql1Olk8LLvPtxASglLukwGATI/g3i8gN461IkDhcJm4=
Subject key identifier:   66:37:B7:34:E8:7F:0B:8C:04:2A:A6:F3:55:E4:95:9D:C1:E7:02:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC9DBA91DD93246224AE43070
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aec5e40a-fb82-3378-9301-93490c2fcd97.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        97.216.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a9:1d:d9:32:46:22:4a:e4:30:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=29a04cde-0610-4caa-b543-74ce3704d094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:dc:7d:23:a4:19:3f:2b:af:7d:1e:3d:07:
                    90:35:e3:29:8b:7a:90:a4:c2:f6:bc:bb:0e:ae:de:
                    17:78:ff:46:c7:97:5a:73:63:ab:03:65:fd:f9:03:
                    1c:d1:01:51:d6:8e:ad:ff:0f:07:b3:1f:2f:af:c4:
                    1f:e2:89:a2:cc:1c:7b:4b:e2:87:ec:4e:85:a6:41:
                    71:e6:ae:78:b0:e1:b8:a4:54:1c:6c:67:f3:eb:f9:
                    36:01:55:7e:28:dd:c1:ac:79:bb:15:d9:58:be:64:
                    c5:f3:8f:71:88:7c:0a:27:92:91:4f:53:7b:6a:b7:
                    ea:ee:c2:37:a0:14:31:38:dc:33:65:cb:21:b5:34:
                    8a:8b:a5:72:b1:9b:8f:3c:7a:84:f8:50:d0:b7:f3:
                    25:ad:d3:c5:c6:c3:5b:5a:01:fb:12:f7:e1:1f:a2:
                    c5:55:8f:7c:7a:79:9a:06:9a:1c:8d:14:55:ab:bc:
                    eb:77:62:aa:40:06:12:65:8d:9f:a8:ba:e4:74:ec:
                    11:12:42:35:66:3d:59:f5:ba:8c:a6:8d:3b:56:a6:
                    b9:03:fe:b5:4c:29:24:6b:19:8a:5d:bf:77:43:dc:
                    24:0a:87:0b:89:46:11:0d:13:a2:b8:98:f7:62:72:
                    65:9d:5a:5b:6b:98:70:b3:df:25:aa:0f:1a:d5:1c:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:37:B7:34:E8:7F:0B:8C:04:2A:A6:F3:55:E4:95:9D:C1:E7:02:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aec5e40a-fb82-3378-9301-93490c2fcd97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.216.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c0:ee:6b:0f:1a:db:1e:bc:44:58:3e:00:5a:28:2e:43:2a:
         a4:03:3f:e6:90:6b:ca:85:bc:d2:7d:35:f8:9e:aa:55:2f:80:
         1d:7c:0e:34:9a:3c:9d:d4:f3:6f:e3:d1:14:4a:fb:64:09:e0:
         24:ef:c9:46:95:e9:8d:ef:5a:36:a4:5f:fc:f9:65:03:06:b4:
         ec:13:55:03:d9:0e:0d:1a:13:7b:ec:93:bd:f9:a2:58:92:8c:
         5c:1f:27:db:4c:b3:6d:45:87:2e:8a:73:d3:18:7e:7b:13:8b:
         64:ee:d0:39:52:e8:63:8d:ce:fd:0f:45:e3:11:a5:7b:69:a4:
         6a:3c:1f:5e:d1:7a:31:2f:cf:f9:df:b8:41:ee:c5:59:30:ba:
         bc:ee:29:65:56:96:24:66:96:f4:48:ab:92:b1:10:d4:08:e0:
         f8:27:6f:3e:9c:21:10:cf:cb:b5:f4:4e:6c:04:7c:a4:bf:3a:
         26:d8:1f:ba:6c:87:e2:19:be:13:27:03:2e:65:af:ac:94:8f:
         cc:f4:f1:dd:d7:d3:29:6b:ad:f7:45:70:59:45:c0:d3:d0:35:
         d5:43:5a:57:eb:be:9e:b8:28:ab:bc:f3:7c:6f:fc:8a:1a:44:
         3f:55:38:f4:41:87:70:b2:0b:4e:48:e1:32:80:d2:26:83:35:
         5e:ad:4a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:38:03 2025 by rpki-client