Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01f599b3-2e5b-32bb-88c8-e9ec7a676214.roa
File:                     01f599b3-2e5b-32bb-88c8-e9ec7a676214.roa (raw, json)
Hash identifier:          ZveTrlpT79dPJjqk3h4ZL5Hqqw5IDs4WRoeuYbGrcV4=
Subject key identifier:   F1:3B:AB:37:29:91:10:A3:92:B0:F0:E9:80:80:70:08:5A:BE:F8:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196A328B5831301C0ECEC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01f599b3-2e5b-32bb-88c8-e9ec7a676214.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        97.132.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:a3:28:b5:83:13:01:c0:ec:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=a0de96b5-b230-4118-8559-c23e4d1dd5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:01:ed:f5:9d:76:96:21:b4:e9:bb:92:75:
                    bf:08:18:fc:de:fd:92:03:1b:b8:47:f8:96:33:f3:
                    f1:88:06:85:2d:ce:aa:63:9b:f7:b0:b1:20:f0:4a:
                    80:7d:fc:8c:6b:b4:d7:7f:6c:64:ea:56:bf:1b:f3:
                    b3:ad:77:21:b2:db:15:1a:60:f5:e4:64:da:29:01:
                    8e:1f:1b:9e:1a:c0:ff:e4:1b:0b:ef:a2:55:21:74:
                    42:6d:69:60:c4:2d:ec:2d:11:97:dc:f3:52:72:91:
                    7d:e2:1c:84:cf:59:b9:31:87:d1:dd:66:d6:4f:fd:
                    b1:1f:0b:7a:e4:51:79:84:68:ce:f2:96:16:27:fb:
                    ce:18:7f:2a:21:73:a3:39:40:86:8d:f0:99:5c:8b:
                    7a:ce:5f:90:ef:96:05:3e:76:87:1f:d5:ff:bc:0e:
                    f5:85:5c:30:e9:a3:47:20:ed:0c:f1:ef:35:a8:c9:
                    0a:1f:cc:93:16:bc:b4:6f:2c:73:eb:ee:4d:a8:37:
                    aa:dd:1a:f9:51:a5:8c:4e:be:1b:de:e9:4c:c1:dd:
                    e6:30:52:67:ba:5f:13:dd:7b:e9:bc:63:3f:b9:58:
                    54:8a:0e:fa:d2:ef:aa:97:db:0e:35:14:92:0f:6e:
                    ee:33:07:f2:ba:95:05:d6:14:42:f2:69:c0:34:81:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3B:AB:37:29:91:10:A3:92:B0:F0:E9:80:80:70:08:5A:BE:F8:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01f599b3-2e5b-32bb-88c8-e9ec7a676214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.132.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:72:0c:03:6b:c7:30:6d:b0:1c:92:be:6e:6a:82:b3:13:1a:
         b0:02:48:53:b2:1b:63:ea:25:8d:34:26:cc:07:af:81:b2:85:
         6b:e7:67:1a:63:60:fb:fd:13:50:86:ee:4a:5c:1f:73:47:20:
         bc:86:5f:2e:ab:b4:7b:1a:39:04:fd:24:08:6d:ea:c8:14:bf:
         5d:71:93:60:64:6e:15:c5:b1:ff:fb:42:cb:0c:a0:0e:e9:b0:
         6d:ae:a1:f8:a9:c5:4a:4c:ea:4d:20:04:ce:42:f7:ad:24:e4:
         a0:b1:90:76:96:0e:89:36:6c:0c:1b:2c:4a:0f:3d:14:99:b0:
         9d:54:36:3f:72:60:91:d7:82:51:95:bc:ad:0f:06:6f:07:72:
         94:e4:80:4e:49:3c:4e:fe:07:56:5c:b6:ec:94:4f:92:3a:a6:
         11:6f:c4:19:2a:8b:5b:d4:b1:a4:c2:16:6a:4c:bc:bb:12:30:
         45:55:fc:f0:62:b3:b5:c0:d2:8a:c5:86:58:17:c7:c2:86:9b:
         6c:77:6b:a9:fe:da:2d:e6:87:3c:c8:c6:01:df:8d:c7:13:ab:
         e8:54:3c:88:8a:89:38:c2:6d:7f:54:5f:22:e5:fa:8f:e6:3c:
         05:59:c7:70:d1:fd:79:a6:ef:a0:1b:f0:a3:46:00:da:13:b6:
         a7:16:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:42 2025 by rpki-client