Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7bba679-3cd2-35ee-8a62-25e894b346cd.roa
File:                     b7bba679-3cd2-35ee-8a62-25e894b346cd.roa (raw, json)
Hash identifier:          qfikl2mOor+re3IDfGFI3L0xFPE+fU0dwzHLgTxtXGo=
Subject key identifier:   B5:78:A1:BA:27:73:29:89:17:36:79:AA:C1:8E:D5:D5:9D:89:0C:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196A5C63C06D96E2209ED00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7bba679-3cd2-35ee-8a62-25e894b346cd.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        97.140.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:a5:c6:3c:06:d9:6e:22:09:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f0386f8d-b9c6-496b-8bca-3f64a05cdd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:30:46:7a:8d:03:86:ec:dd:81:c3:44:e5:
                    de:bb:ec:79:a3:4c:d4:5a:2d:9e:0e:49:51:da:db:
                    f1:a0:eb:4b:aa:f3:86:82:80:4e:47:92:19:33:a0:
                    5b:00:96:44:29:77:5b:e7:67:9b:12:81:8b:dc:c6:
                    e8:50:5a:09:ba:d0:20:58:95:36:4e:9d:a9:20:d4:
                    38:2c:00:97:d5:1e:8d:d7:8b:ab:ac:e1:bb:a7:12:
                    17:33:a6:ad:4d:f0:b8:16:84:40:5b:8c:71:b3:89:
                    7f:25:7f:c0:60:1c:b6:f6:04:fa:75:6b:b6:cf:79:
                    34:df:78:e9:1d:4c:35:60:12:35:23:40:98:31:b4:
                    54:39:c3:a9:d4:99:62:43:12:b4:e3:37:ee:ec:d2:
                    27:e5:e4:96:6f:ee:ae:bb:2b:0f:56:e7:ba:9f:46:
                    81:de:37:b0:27:42:11:6b:1f:42:4a:ea:6d:8e:54:
                    98:0c:4f:49:0e:31:6d:c5:8a:d8:f1:04:78:77:e0:
                    72:4f:0b:c7:ff:68:d6:ca:2e:e3:68:cc:78:e1:2c:
                    35:76:f1:e5:1e:19:f1:10:f8:e5:b4:1b:74:f1:10:
                    ce:9b:b9:e4:b1:1a:1e:6e:99:93:78:e1:fa:00:12:
                    74:4b:eb:6b:01:89:1c:88:55:61:37:87:c5:78:44:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:A1:BA:27:73:29:89:17:36:79:AA:C1:8E:D5:D5:9D:89:0C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7bba679-3cd2-35ee-8a62-25e894b346cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:4a:c5:b5:bb:a7:a0:a0:27:2a:0a:b2:ca:3c:6c:69:82:
         ae:50:78:64:7a:0f:7f:c6:9e:2d:9a:5f:39:a2:98:dc:d8:7b:
         4c:b3:1c:a2:ab:34:92:03:3d:b3:fb:d3:e8:8b:ff:0d:c5:87:
         ba:ca:6e:45:d9:f7:76:14:a6:fb:71:b5:6b:ed:60:ac:8c:5f:
         e2:ab:a1:de:a2:1b:8a:0a:be:ff:31:b3:2f:9c:53:1b:0b:c2:
         4b:9e:f3:d5:37:a7:24:0e:a9:21:3e:e4:4b:b7:b7:6f:c4:3a:
         e5:47:e3:aa:50:ab:ee:d2:5c:e1:54:22:26:19:15:c4:70:2f:
         a9:bc:62:26:69:33:4f:c4:17:7a:85:eb:43:eb:fb:f7:0a:4c:
         f0:f1:6c:07:3c:37:97:de:69:9e:e2:6a:71:76:8e:1e:fb:67:
         a8:c4:ba:d4:d5:7c:42:4f:4f:30:3b:5b:05:7b:a0:a3:c5:1c:
         fa:0f:c7:10:38:a8:03:81:68:a6:82:be:bb:f9:db:a9:84:c9:
         74:07:1b:20:b3:26:b8:c4:00:d1:3b:80:61:5b:d8:e5:b1:cb:
         c9:a4:2d:ce:c2:9a:d0:8a:73:06:2c:ee:58:25:24:bc:b3:3d:
         5d:a8:66:ed:19:45:8e:93:20:3d:59:95:c3:99:5a:f3:74:54:
         f2:58:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:05 2025 by rpki-client