Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c707a59-9446-333c-9b32-da5e7e5dd43b.roa
File:                     1c707a59-9446-333c-9b32-da5e7e5dd43b.roa (raw, json)
Hash identifier:          9z17aJMWI1AcGf+fRyUOf4AjY/P6wY7OJgQiGN0Uj4Y=
Subject key identifier:   89:C5:EF:6C:E5:8D:3F:81:68:BE:F8:A7:69:5B:13:74:F5:2D:56:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAEFDFA36386B8713F0500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c707a59-9446-333c-9b32-da5e7e5dd43b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.185.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ef:df:a3:63:86:b8:71:3f:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=9e6db556-0094-4af3-96b2-b74e04342470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:85:ce:53:2c:de:39:ff:a9:44:a3:6d:30:
                    10:22:64:2d:b7:df:88:12:68:da:33:45:e2:78:8c:
                    ec:42:2f:97:0c:67:2e:50:66:29:aa:11:50:41:72:
                    3b:50:b4:3c:a0:54:45:4c:6f:b9:0f:57:20:03:0c:
                    ea:bc:a3:d0:93:67:e0:49:db:39:66:da:de:07:5e:
                    82:12:5e:25:45:72:32:a4:80:e5:28:f3:fe:57:83:
                    c4:67:69:cb:92:d3:33:86:4a:ce:a5:6b:f0:6b:77:
                    af:de:b9:16:94:f4:68:0c:41:cf:ea:b2:43:a1:e9:
                    fc:45:ec:4f:b1:1e:46:38:41:e8:f9:68:2f:dd:01:
                    f9:4e:84:05:19:35:3c:21:8c:38:39:fa:8d:8e:33:
                    b0:0f:73:5d:ff:92:a4:ea:0e:9c:5c:fa:fb:f4:40:
                    ac:2d:14:a1:71:8d:99:f8:88:16:38:a7:e1:c9:b0:
                    de:35:06:46:cd:78:37:c8:9c:e0:91:60:34:74:90:
                    ca:86:58:4e:8d:4b:e9:af:a9:9c:c0:88:a0:75:67:
                    10:f2:e0:f0:ab:1b:40:3f:59:d6:08:d4:22:58:bd:
                    91:44:22:7e:88:9f:d7:16:22:75:25:2a:d6:15:b2:
                    33:aa:58:14:75:43:cf:40:80:11:83:e4:89:38:cf:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C5:EF:6C:E5:8D:3F:81:68:BE:F8:A7:69:5B:13:74:F5:2D:56:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c707a59-9446-333c-9b32-da5e7e5dd43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.185.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:5f:ac:94:68:aa:d9:70:98:4d:61:77:ce:d9:39:21:74:8a:
         89:c8:15:73:9b:1b:be:7d:d9:e4:00:38:cd:4d:e8:bb:1a:fe:
         7b:15:31:59:67:57:41:e9:13:ef:bb:e3:e7:0c:49:68:6d:2d:
         1f:56:04:ff:b9:9f:52:a6:58:b0:c7:0e:8f:bc:0e:b6:13:b9:
         d6:4c:da:28:d9:2f:33:39:bf:62:3b:cd:6b:03:47:be:cf:60:
         11:61:f4:4a:e0:24:ff:88:28:fd:54:1e:ce:b8:8a:20:66:ce:
         d2:3d:bc:61:89:1d:f9:22:f0:42:78:82:d0:f0:de:7b:3b:36:
         13:b3:62:35:ca:55:42:d6:d8:03:32:14:ec:27:bb:0c:f1:f4:
         e8:f1:23:e7:88:c4:25:31:06:2b:6a:e9:e5:0f:bf:14:d9:34:
         17:93:54:6a:f2:a5:4d:81:a7:08:98:92:d7:db:87:d8:46:a4:
         ab:44:61:f4:e9:45:fc:fc:b0:f9:8d:69:9c:ea:af:b1:12:8a:
         e2:bb:27:42:3b:af:38:72:ca:e6:dd:5a:96:09:3f:71:d7:08:
         ed:14:5f:a0:99:ae:8d:18:4d:fc:de:4d:62:5d:ca:10:d7:1f:
         32:58:be:e3:1b:d0:52:18:89:f4:7a:89:a0:c7:1b:8a:8a:6a:
         73:1b:ff:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:04:32 2025 by rpki-client