Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/815ddfcb-5c7e-3374-b137-1db22ac656be.roa
File:                     815ddfcb-5c7e-3374-b137-1db22ac656be.roa (raw, json)
Hash identifier:          pDa/ZKVEldsfg4K9LjaHpl16/5Abpn9Er+GCKrqOWoA=
Subject key identifier:   AF:9C:72:2E:C3:60:CF:91:8B:25:DC:16:9D:D5:1D:9D:F6:BA:A8:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858499D10810B8E2AEBF48F6D8400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/815ddfcb-5c7e-3374-b137-1db22ac656be.roa
Signing time:             Tue 22 Apr 2025 19:08:59 +0000
ROA not before:           Tue 22 Apr 2025 19:08:59 +0000
ROA not after:            Mon 21 Jul 2025 19:08:59 +0000
asID:                     6167
IP address blocks:        97.250.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:10:81:0b:8e:2a:eb:f4:8f:6d:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 22 19:08:59 2025 GMT
            Not After : Jul 21 19:08:59 2025 GMT
        Subject: CN=34af8900-e216-4555-8b34-024a4cf2bb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:54:b9:23:24:3e:01:c2:61:cb:c5:be:9e:
                    5b:c2:f9:bb:2d:ac:52:4d:e3:3f:05:94:60:0e:09:
                    57:21:c0:fd:9c:ea:e2:77:0e:63:e2:81:63:e9:c8:
                    9c:09:66:05:a2:64:66:19:6e:28:8b:e7:f5:16:8d:
                    28:9c:38:c1:f3:c4:b0:70:f2:f7:40:1d:15:b3:80:
                    83:28:10:21:a2:d9:93:61:21:b7:85:34:a5:79:9a:
                    b1:20:c9:0e:17:04:77:c1:63:f3:0d:56:5a:2a:53:
                    dd:ba:93:dc:40:41:44:71:fa:87:1a:1a:6e:7d:f0:
                    b6:41:bd:ae:6a:a5:bf:95:80:46:96:35:a7:f5:ab:
                    28:e8:09:bc:7c:dc:cd:39:23:8f:6e:a9:8b:1e:67:
                    6b:f6:08:96:d0:07:00:94:83:66:f5:17:9c:cf:21:
                    3b:a3:13:9c:f1:23:89:30:62:9a:19:c2:f2:8f:6a:
                    3e:47:62:21:00:0b:c1:2f:c5:55:af:6e:1c:37:bd:
                    d7:2a:ad:21:7c:1f:54:89:3c:09:b3:a2:7f:f0:3a:
                    7f:bd:92:a2:c0:8b:cb:6c:e7:d2:67:e2:34:93:35:
                    01:62:59:16:da:a4:29:fa:21:7d:3d:1d:18:2a:57:
                    97:6b:d7:d4:a1:17:7a:51:a0:c4:f4:ac:87:81:8f:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9C:72:2E:C3:60:CF:91:8B:25:DC:16:9D:D5:1D:9D:F6:BA:A8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/815ddfcb-5c7e-3374-b137-1db22ac656be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.250.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:df:61:0a:01:57:00:10:d2:eb:b3:eb:43:2a:6e:fc:79:22:
         d4:e3:d3:af:f1:5d:3d:53:44:cd:b8:21:f9:1a:a5:92:9e:1b:
         37:b6:a5:89:47:25:55:22:c2:9d:28:df:bd:37:2c:dc:fc:31:
         e5:74:7b:69:52:d6:13:07:51:2b:82:8d:78:f4:9d:93:61:10:
         b0:5e:f9:a3:9e:d7:b4:ca:30:0e:83:3d:9d:ef:24:f3:95:30:
         dd:2f:4d:b7:7d:9b:6a:cb:98:78:c4:27:08:30:ed:1e:d9:49:
         ba:ea:60:00:af:fa:5f:d2:42:df:e3:1d:75:a8:c9:4c:4e:83:
         35:25:95:de:7f:ea:1f:8e:04:52:f0:79:98:56:04:67:70:8d:
         86:c7:db:2e:eb:ec:5b:e1:9f:a9:f3:a8:47:95:d4:0a:73:60:
         47:9c:84:a0:34:3f:86:d7:cf:56:29:43:97:8c:bd:3c:bb:29:
         f4:ba:b2:b6:50:c3:92:8d:a5:47:7b:f8:5f:03:72:c7:ce:c1:
         30:04:8e:26:4a:ad:a6:e3:c7:af:92:8d:7b:0c:c7:07:94:b0:
         e0:53:b0:61:63:5e:1d:64:2c:3a:da:8e:7e:c9:4c:e5:9b:b6:
         be:2c:a9:d3:66:d3:8e:38:d9:0b:3e:2e:ad:e8:82:63:e8:da:
         fb:ad:0b:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdEIELjirr9I9thAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQyMjE5MDg1OVoXDTI1MDcyMTE5MDg1OVowLzEtMCsGA1UEAxMk
MzRhZjg5MDAtZTIxNi00NTU1LThiMzQtMDI0YTRjZjJiYjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPRUuSMkPgHCYcvFvp5bwvm7LaxSTeM/BZRg
DglXIcD9nOridw5j4oFj6cicCWYFomRmGW4oi+f1Fo0onDjB88SwcPL3QB0Vs4CD
KBAhotmTYSG3hTSleZqxIMkOFwR3wWPzDVZaKlPdupPcQEFEcfqHGhpuffC2Qb2u
aqW/lYBGljWn9aso6Am8fNzNOSOPbqmLHmdr9giW0AcAlINm9ReczyE7oxOc8SOJ
MGKaGcLyj2o+R2IhAAvBL8VVr24cN73XKq0hfB9UiTwJs6J/8Dp/vZKiwIvLbOfS
Z+I0kzUBYlkW2qQp+iF9PR0YKleXa9fUoRd6UaDE9KyHgY+9vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+cci7DYM+RiyXcFp3VHZ32uqi0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODE1ZGRmY2ItNWM3ZS0z
Mzc0LWIxMzctMWRiMjJhYzY1NmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYfoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILfYQoBVwAQ0uuz60Mqbvx5ItTj06/xXT1TRM24IfkapZKeGze2pYlH
JVUiwp0o3703LNz8MeV0e2lS1hMHUSuCjXj0nZNhELBe+aOe17TKMA6DPZ3vJPOV
MN0vTbd9m2rLmHjEJwgw7R7ZSbrqYACv+l/SQt/jHXWoyUxOgzUlld5/6h+OBFLw
eZhWBGdwjYbH2y7r7Fvhn6nzqEeV1ApzYEechKA0P4bXz1YpQ5eMvTy7KfS6srZQ
w5KNpUd7+F8DcsfOwTAEjiZKrabjx6+SjXsMxweUsOBTsGFjXh1kLDrajn7JTOWb
tr4sqdNm04442Qs+Lq3ogmPo2vutCwk=
-----END CERTIFICATE-----
Generated at Tue May 13 23:11:17 2025 by rpki-client