Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/405233e4-0350-3cf9-b498-83f34e6e1d8f.roa
File:                     405233e4-0350-3cf9-b498-83f34e6e1d8f.roa (raw, json)
Hash identifier:          J7LfzOryn36Zwo5QqEgGaQ/wy+NL1VkUVm58svbfWkI=
Subject key identifier:   DA:DF:81:63:53:C3:97:4A:E5:AD:21:C6:1F:FA:43:8C:6A:26:1E:5E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849AE7F45258A6717CFEE5BE6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/405233e4-0350-3cf9-b498-83f34e6e1d8f.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        97.204.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:45:25:8a:67:17:cf:ee:5b:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=6b9cd89d-423f-4343-8751-b342cf26aea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:95:ba:3e:f2:18:55:8b:5f:18:70:ac:4b:
                    dd:5a:50:83:23:a3:0b:4e:03:62:98:81:24:fc:31:
                    5d:d5:2f:81:1e:91:a3:06:ac:de:dc:7b:33:40:17:
                    ae:c5:dd:f5:b1:12:5f:86:7d:50:f6:e9:74:fe:52:
                    e6:50:fc:ce:20:46:5a:f8:a9:3f:0b:1d:19:ef:d3:
                    d8:5b:0f:71:79:9e:5b:93:ef:68:3d:f6:b0:a3:62:
                    77:4d:a4:3d:ac:60:50:32:ac:89:59:00:83:99:7a:
                    7e:0d:34:a4:8c:81:04:95:8b:33:ae:06:58:61:8f:
                    8c:ec:6a:31:48:44:00:2e:34:db:91:1c:f7:a2:6a:
                    58:fe:38:3d:f9:c7:dc:d8:b6:4e:b7:e4:d5:c8:f0:
                    bd:00:97:4d:9c:ff:14:fd:e4:9a:2c:f3:3b:d8:1f:
                    2d:82:e3:fb:13:89:97:14:45:ba:59:73:b6:5b:e4:
                    c9:09:80:4c:de:f7:65:6a:fc:fb:56:01:9b:26:36:
                    e1:cf:4b:b3:c3:7f:68:49:11:7e:37:1b:65:40:d8:
                    cb:65:73:1e:b3:a9:2d:fe:63:96:e5:76:72:0c:67:
                    82:24:3d:bc:16:95:d7:5b:f0:98:95:94:b8:c3:a8:
                    b6:73:14:79:cc:24:4e:b9:0f:c6:02:1f:fa:b5:b6:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DF:81:63:53:C3:97:4A:E5:AD:21:C6:1F:FA:43:8C:6A:26:1E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/405233e4-0350-3cf9-b498-83f34e6e1d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.204.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:06:60:72:b4:64:e7:74:21:1d:5f:d5:84:df:ad:ef:6f:33:
         be:57:6f:ca:17:9d:e4:fb:b2:5b:4a:b9:d8:ac:26:0b:08:e8:
         e5:fc:94:5c:f6:a4:59:6f:7d:55:fb:b0:3c:98:1f:8d:d6:03:
         ef:5f:29:98:cf:b9:c8:d4:16:28:c4:a9:44:0e:59:6e:75:bd:
         1b:2a:a2:d5:1c:4e:bb:40:7d:d0:be:af:fa:1c:6d:ef:e5:8d:
         bf:ce:09:b8:88:b6:21:2d:4f:e0:a3:06:90:84:fb:91:e9:d6:
         ac:15:ee:d5:dd:37:92:f3:da:8d:38:7d:8a:f2:eb:c0:cb:ef:
         20:44:89:af:64:0e:3e:bd:7c:06:bf:91:f1:8d:81:6b:79:92:
         1e:db:4b:3b:48:5d:67:30:bb:33:74:1d:29:58:1a:91:04:fc:
         00:94:39:27:b2:00:0a:26:8f:bb:23:5a:0b:57:cf:e6:49:a4:
         c2:3f:d0:cb:c5:36:2a:84:d9:3f:ac:5b:99:37:8e:22:c0:71:
         a0:f9:48:e2:80:f6:8d:11:52:da:30:42:a7:bb:b6:91:dc:1d:
         c0:ca:70:2a:50:23:91:50:19:9c:12:87:55:55:81:b1:6e:43:
         41:25:30:9c:d6:a4:4e:4d:e5:ce:53:30:10:a3:91:ca:36:e7:
         5d:6b:b0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:57:32 2025 by rpki-client