Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24e7f77e-710d-3396-8567-f21c076e8434.roa
File:                     24e7f77e-710d-3396-8567-f21c076e8434.roa (raw, json)
Hash identifier:          CcmsaLjIKPOfwz8fShe2IDhk0Y/toWLzx5+urA38pLE=
Subject key identifier:   FC:9D:6A:5E:BD:54:23:70:9B:F2:E0:43:60:8C:28:24:39:56:D5:34
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B76F29C8F99A60FB550E0A580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24e7f77e-710d-3396-8567-f21c076e8434.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        97.222.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:9c:8f:99:a6:0f:b5:50:e0:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=faf1a83f-80a5-42a0-a3fd-d5b33c864105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:bf:c1:3e:fe:67:6d:03:03:f5:97:54:a7:
                    c4:ef:37:35:99:c5:92:05:45:21:3c:08:cf:dd:54:
                    03:1d:58:fa:c9:5c:5a:2a:c3:0b:62:8b:11:e8:d3:
                    15:28:0d:8e:26:86:d6:f3:0d:19:97:b5:10:84:cb:
                    8e:48:b6:90:00:c9:4e:43:58:fc:cf:33:01:7b:d3:
                    21:fb:cb:9e:39:5d:72:06:66:af:aa:25:87:9f:1e:
                    39:6c:14:72:96:33:a4:43:ea:73:88:12:4f:11:3e:
                    72:aa:f0:bc:51:39:f6:b2:f6:d2:3d:26:ea:89:52:
                    94:46:d1:8f:66:6c:bc:18:b3:8e:8e:df:ca:c3:70:
                    f6:27:97:0a:b0:47:9b:e4:ca:74:5a:42:cf:db:1e:
                    9e:6f:c5:a6:ff:dc:90:1f:1a:21:37:7e:8d:f7:57:
                    27:02:ec:54:75:ff:e9:6d:a3:ba:8a:74:e6:1c:7c:
                    93:35:b3:47:f0:d1:2b:32:e4:89:8f:e6:aa:a3:4a:
                    b1:4e:d2:1c:40:fd:6c:6b:10:c2:7e:9c:c8:94:f9:
                    8e:d2:33:1a:2a:0e:3f:30:4c:67:b0:c6:4e:61:c8:
                    3c:da:cf:8c:7d:4e:63:f1:db:88:2c:b0:a0:75:75:
                    fd:e0:9c:56:30:9f:3e:0d:30:93:5a:f3:6a:ad:de:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9D:6A:5E:BD:54:23:70:9B:F2:E0:43:60:8C:28:24:39:56:D5:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24e7f77e-710d-3396-8567-f21c076e8434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.222.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:f4:89:3c:2f:fe:db:9f:37:d4:63:f7:55:54:92:b8:84:
         40:c2:cf:8d:8d:34:b7:bd:22:15:13:51:88:3e:61:3f:54:ee:
         93:72:8f:31:df:92:7e:04:78:7a:7f:f4:64:94:b7:2f:b0:93:
         f8:14:37:2c:03:0a:db:84:2e:1c:44:df:e5:fd:2e:2d:3b:f4:
         16:b8:26:58:fa:3e:2b:0b:d7:fd:f3:bf:be:ca:ff:f8:15:67:
         04:ae:3f:7b:bd:d4:1d:d2:5b:4c:18:f5:7e:62:bd:87:a7:9f:
         36:37:16:bd:90:0a:b9:e2:39:ec:68:eb:1c:1b:70:e9:c6:77:
         74:67:f1:d4:29:97:17:25:a4:90:0b:51:a1:9a:1a:33:87:d3:
         1c:cc:0f:03:7d:c0:ee:5e:2d:2f:77:f4:6a:60:02:db:31:4b:
         dd:80:e8:ae:1f:d3:6b:d4:fd:95:dd:fe:d5:74:a0:d8:57:28:
         0e:08:6f:5a:f0:16:b3:e2:39:4a:cf:60:0a:18:a3:7f:70:72:
         fb:49:1b:88:0d:fd:92:f6:27:3a:1f:23:ae:dd:58:14:7d:df:
         0e:f3:1f:c4:85:e8:cc:92:76:f6:36:bd:95:aa:97:9b:08:e2:
         49:2d:1b:fe:f9:46:2d:82:39:e6:44:aa:e2:8f:af:f4:b8:35:
         e1:d0:85:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:03:37 2025 by rpki-client