Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d199bc14-73c0-30ff-9435-86a1f7d0811d.roa
File:                     d199bc14-73c0-30ff-9435-86a1f7d0811d.roa (raw, json)
Hash identifier:          /AZxcic4R7+xc03OHpJt4vLQuSoWUH63kXdKCVurvSo=
Subject key identifier:   0C:7E:FC:CE:F9:40:0C:2E:6E:43:84:37:D0:04:DC:F5:54:75:48:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196A52AA0EB6ECDCCB29840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d199bc14-73c0-30ff-9435-86a1f7d0811d.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        97.138.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:a5:2a:a0:eb:6e:cd:cc:b2:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4c81bf73-97d6-4794-b30c-aa34f35d1c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:c5:33:7d:3b:a6:a3:48:57:13:66:91:70:
                    02:dc:aa:36:3f:56:21:74:99:52:ef:01:07:00:f1:
                    dc:fa:a2:fa:13:bb:36:2d:04:05:c1:e1:43:a3:9f:
                    68:13:ef:bd:2e:e3:88:31:a8:46:22:33:0c:2c:90:
                    8a:32:a8:58:3d:c1:c5:f1:11:b8:07:f1:1a:af:f7:
                    28:7d:d7:9a:87:d7:f3:dc:9a:c8:49:52:8d:2d:ca:
                    70:d3:51:32:f3:3d:83:c8:f7:c9:85:0c:24:0d:de:
                    fe:21:ee:aa:bf:9b:77:d7:10:ba:0d:4d:14:d6:62:
                    5c:09:41:92:e5:50:70:fb:78:f4:7f:28:26:8a:e8:
                    47:51:69:38:8a:0e:48:42:0a:0e:54:dc:69:f6:6a:
                    df:64:06:3d:0a:2f:57:92:64:42:76:11:28:ee:9f:
                    8f:79:df:c8:76:56:32:91:05:82:14:ba:b4:1c:99:
                    62:9c:19:b9:6d:c2:36:f0:22:8a:7e:c5:7f:23:41:
                    9f:71:7d:df:bd:1f:ce:6b:c3:08:13:94:c0:a3:17:
                    db:64:8a:6a:49:c9:f6:c2:e8:8e:58:d2:7f:e8:c8:
                    20:35:81:90:d7:9c:de:4d:ea:e3:57:ad:5e:b2:df:
                    d4:a6:95:23:b7:64:6a:75:cd:ed:ad:0e:9a:57:04:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7E:FC:CE:F9:40:0C:2E:6E:43:84:37:D0:04:DC:F5:54:75:48:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d199bc14-73c0-30ff-9435-86a1f7d0811d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.138.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:d7:c9:2c:a3:ee:c8:e4:51:c6:62:72:1a:30:56:9e:ba:
         99:20:8f:a7:2b:2c:c3:ae:72:19:2a:dd:87:8e:ea:45:ad:84:
         7b:88:57:19:d2:fb:8a:82:ea:39:17:cf:dc:60:84:6f:87:a0:
         1d:fd:e9:0e:6e:09:7e:53:f0:2b:60:f0:1c:bd:ce:9b:ff:68:
         b0:25:f2:ef:f9:df:59:e1:07:e4:93:8f:71:d7:e0:88:6a:3c:
         2c:fd:53:44:e9:be:8e:5d:6c:1e:83:13:52:61:a3:62:38:64:
         6e:e8:5e:07:d3:e8:2e:92:1e:6e:f0:11:cc:4b:ed:4e:32:f4:
         1e:f8:15:97:0e:bf:9d:7a:3a:e3:10:cf:5f:d4:f6:72:fc:92:
         d8:1d:40:aa:78:f7:54:4f:27:61:57:9e:d7:71:d3:c3:48:df:
         a2:89:ff:c3:b1:39:4c:c3:09:74:12:dc:2e:09:98:4c:00:c3:
         b7:c9:74:7c:00:00:94:45:f4:07:0f:c9:b7:8d:66:f9:25:82:
         a1:79:b2:33:f9:cc:bf:d5:30:c9:16:5d:20:81:73:f5:4e:bd:
         94:15:74:d6:f1:2a:7f:c2:75:9b:5a:35:b2:25:6b:0e:fc:d1:
         6d:c3:5c:1d:85:b9:5b:69:a9:a3:22:e9:ea:de:8f:91:d1:08:
         56:71:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:35 2025 by rpki-client