Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdef86b3-3001-3b29-b8f8-d900f8cab4c6.roa
File:                     bdef86b3-3001-3b29-b8f8-d900f8cab4c6.roa (raw, json)
Hash identifier:          cHX/PwWooWKjW//WDDxWqRwFREqS9jsWI/ffBv+ezPI=
Subject key identifier:   60:B0:2B:51:2F:B7:E2:DB:97:EE:70:0C:9B:18:12:62:C6:E4:24:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ADECBD89EA6A83490AA94E080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdef86b3-3001-3b29-b8f8-d900f8cab4c6.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        97.231.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d8:9e:a6:a8:34:90:aa:94:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=1c7da9e0-f066-451c-a5c0-dd78f96820d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:55:85:20:f3:18:0f:4a:90:2e:36:93:60:dd:
                    6e:e2:d5:0a:7a:0c:51:b0:e8:f5:68:7a:ce:12:0d:
                    35:93:b4:3d:ac:75:c3:1d:22:01:e8:da:aa:f5:57:
                    57:13:bd:27:9d:8c:65:cf:7a:00:c5:7a:f2:3a:79:
                    1d:8e:db:b7:08:76:60:8b:7d:d1:bc:22:02:56:17:
                    ca:75:21:ee:fa:d0:8c:a9:b8:0f:6c:08:8a:c6:1d:
                    c0:c9:7d:56:be:84:3a:7d:9b:99:a4:f6:62:54:ad:
                    e1:d6:f5:e4:6f:0a:49:c5:fb:aa:36:21:27:5a:a1:
                    7a:84:06:16:b3:7e:ef:7e:7a:49:c7:e8:3d:73:13:
                    17:bd:93:b5:0b:1c:50:3f:87:85:8d:da:f5:2b:79:
                    a9:4d:a4:65:10:03:dc:d1:85:0f:ae:16:21:ca:f2:
                    93:d2:7c:cb:30:c9:30:26:9e:4e:8c:65:fb:e7:84:
                    d5:01:3b:ae:a4:5c:87:61:37:f4:a5:53:96:c9:2e:
                    95:91:9e:9b:7f:7a:c4:f1:c6:36:8c:ad:f8:75:fd:
                    e1:5d:3a:d8:9e:21:1c:f7:d8:ee:84:a3:14:9d:f5:
                    d3:ed:db:7d:0c:c8:8d:d2:fc:1a:2a:4d:fd:69:38:
                    87:47:fc:89:6a:3b:23:f2:c2:b8:3a:e8:84:b9:fe:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B0:2B:51:2F:B7:E2:DB:97:EE:70:0C:9B:18:12:62:C6:E4:24:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdef86b3-3001-3b29-b8f8-d900f8cab4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.231.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:30:46:39:47:0e:d2:32:82:8c:da:69:65:a0:ee:f0:fc:bc:
         13:0b:6e:4a:fa:62:d9:ed:fe:b5:89:e7:49:75:ed:03:f6:56:
         44:74:2e:de:0e:92:f6:41:87:5a:a1:91:c7:19:d7:f9:0b:2d:
         8b:23:82:cf:f0:54:91:2e:0b:f2:42:54:b8:52:68:50:99:3b:
         bf:1a:cb:a2:45:86:ed:66:d0:cf:23:4a:6c:36:9a:44:38:b1:
         62:9d:86:ce:fc:39:39:f3:f8:1c:a8:15:b5:34:26:57:db:b4:
         91:a3:23:b2:01:69:b6:af:67:11:6f:b4:02:a6:b8:ce:9b:74:
         51:ec:be:b8:1e:f4:a1:84:9a:fd:8d:33:b5:1f:e2:96:d0:2d:
         d1:ff:a8:fa:0e:b6:43:ac:f5:a1:bd:34:3b:ee:ec:59:0c:c6:
         34:e1:a0:e9:e7:3b:ef:01:5e:61:14:dd:c5:d5:71:59:67:12:
         07:36:6c:10:c6:c6:d2:f0:f1:0c:4a:c1:6d:24:fd:81:f6:8e:
         38:cb:c7:c5:9a:10:36:14:29:9d:3a:aa:af:c5:2c:64:8f:44:
         90:f3:9a:61:37:a5:27:cc:b4:b7:21:ee:75:e1:50:78:c1:3d:
         ae:a7:2f:ac:fa:d6:9d:ba:73:f4:95:42:d2:7b:23:60:fa:a4:
         60:e4:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:35 2025 by rpki-client