Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfe3ac80-9ba2-3d8c-b9a7-2446dd6c0e85.roa
File:                     cfe3ac80-9ba2-3d8c-b9a7-2446dd6c0e85.roa (raw, json)
Hash identifier:          PB2umzY2J9u+KYJnrmGDZHuC9chUj6jtI65vbHDjCO0=
Subject key identifier:   37:AE:53:32:7E:55:AB:D4:9E:C1:6A:F8:3A:1B:82:76:EB:5E:46:7C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A42757E812013A6C5B93AD6A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfe3ac80-9ba2-3d8c-b9a7-2446dd6c0e85.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     6167
IP address blocks:        97.205.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:7e:81:20:13:a6:c5:b9:3a:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=78dbae03-47cc-4d0f-9771-d1f224c64f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:4f:45:eb:4d:e7:b2:4a:75:15:40:c2:5e:
                    3f:10:d4:35:68:a0:31:1d:dc:d9:7d:5c:c3:65:e4:
                    54:b5:8b:0b:93:f8:6c:bd:19:2b:07:81:f2:c6:81:
                    8f:fe:89:52:bc:36:d2:55:89:d0:db:70:e6:95:71:
                    f4:34:e6:e7:42:e9:2b:12:b9:12:00:75:23:46:b5:
                    81:52:b3:f1:60:e3:65:ba:e4:13:88:15:48:5b:46:
                    41:c9:4d:24:f6:82:d3:e6:e7:35:66:65:54:18:42:
                    12:e6:e9:e1:72:d5:88:ad:0d:af:01:47:43:00:9d:
                    9d:5c:5e:b9:39:bf:0b:6a:e1:c3:1f:19:85:31:ca:
                    32:28:10:a9:0a:42:91:c7:86:a2:7c:4e:b0:98:f5:
                    53:f2:a8:bd:0a:fe:07:4a:d3:39:d0:9e:22:f7:7a:
                    c0:2d:51:d3:95:ab:32:fc:90:da:f9:09:6e:d4:59:
                    3c:08:e2:18:0a:3a:49:c9:93:30:3b:b6:9e:55:78:
                    3d:83:40:58:02:c4:69:dc:ac:00:fc:4e:c0:98:ee:
                    6a:66:46:5f:ce:3d:2f:a3:4e:a4:52:b3:c2:81:46:
                    6b:df:c6:d7:2b:d4:bd:30:13:12:14:2f:77:d7:53:
                    d7:93:b8:21:4e:af:ee:87:23:9a:79:01:52:9e:dd:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AE:53:32:7E:55:AB:D4:9E:C1:6A:F8:3A:1B:82:76:EB:5E:46:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfe3ac80-9ba2-3d8c-b9a7-2446dd6c0e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:35:6a:01:28:4c:ce:93:1c:d9:77:01:a9:ce:2a:08:0b:18:
         3d:bc:c5:6d:c8:46:18:e9:a7:c2:63:39:23:7e:6b:2f:1e:67:
         ab:6a:c5:2a:10:2e:01:f2:4a:9c:99:15:1d:07:4d:88:d1:4e:
         2d:80:34:42:2a:e1:83:8a:7d:20:71:f8:ee:89:79:72:3a:52:
         66:c8:5f:f8:97:d6:18:00:bd:91:73:e4:2b:55:76:ee:0e:25:
         10:a6:f0:80:85:70:69:22:aa:38:ac:66:3e:0f:ee:15:e5:c8:
         fb:b3:70:d5:93:7e:9a:8c:89:42:d2:68:36:43:22:56:95:d0:
         8f:9c:f0:32:4d:e6:f1:1f:42:1e:6c:0b:b3:55:2d:8d:00:80:
         8c:16:e8:d3:23:99:c6:39:92:5f:d6:51:ce:3a:bc:7d:e3:6a:
         85:3d:b5:97:a8:05:17:f7:f9:b7:15:b2:82:5f:a5:84:ae:a5:
         f8:7c:c6:12:03:40:c1:a8:7e:70:cd:3a:80:82:9e:e7:26:5c:
         ab:eb:0f:70:b2:1a:8a:a7:c6:22:d3:e5:83:84:f5:e2:e6:98:
         21:b5:d7:b3:40:46:32:11:c7:e4:b5:13:6c:69:6b:b4:da:63:
         a1:29:23:30:3e:2a:15:0b:fa:b3:af:0f:26:c8:86:49:d8:34:
         5f:5f:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:37:14 2025 by rpki-client