Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d52a7b41-3c9a-36f9-b4b5-2dda1d1c97c8.roa
File:                     d52a7b41-3c9a-36f9-b4b5-2dda1d1c97c8.roa (raw, json)
Hash identifier:          P6a0jZQBGnIXDDrrf7z6X9sqOG4YES90Q11v8U5hKQI=
Subject key identifier:   DE:30:BE:CA:F1:33:CD:48:4B:F5:7E:87:E6:AB:54:18:60:46:63:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A61F37ABFA0C02E9E419200D
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d52a7b41-3c9a-36f9-b4b5-2dda1d1c97c8.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        97.213.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:37:ab:fa:0c:02:e9:e4:19:20:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=4313d8ef-a819-4bd8-94d4-68a7428af4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:9b:71:e8:1e:d4:6a:c9:42:9f:9b:98:46:
                    8d:de:10:bc:df:5a:42:e8:9b:68:c1:fe:89:1b:5c:
                    74:93:b7:ae:4d:ed:8f:56:74:8d:43:74:60:1f:2c:
                    e6:4e:41:b7:7e:0c:df:56:0e:33:cc:de:fa:36:1d:
                    84:8c:06:a1:8e:13:9d:1d:b4:6b:04:79:70:ab:60:
                    65:13:30:3b:bb:09:db:1c:5f:98:b8:1f:57:2e:14:
                    47:2d:35:83:0b:59:b1:0c:77:52:9a:a1:04:40:2a:
                    8c:22:08:b2:7e:e5:40:2e:56:47:da:fb:4c:b4:3b:
                    f7:aa:19:ad:6b:67:b1:1e:93:bc:28:c5:2d:8e:de:
                    8e:0f:3f:28:87:43:fb:de:5f:e5:ca:f2:2f:c5:8e:
                    4a:02:1c:8b:08:82:73:67:13:4f:c0:9f:eb:a4:07:
                    70:ed:6c:13:02:cc:bf:af:b0:de:4f:4d:07:90:dc:
                    cd:2f:e6:66:92:dd:f9:5d:08:1c:ca:69:fb:ed:9c:
                    88:6f:07:a8:43:f6:4e:63:1b:64:1d:a0:e0:59:43:
                    2c:db:d2:a2:31:76:fd:45:bc:e2:c2:62:96:b9:b8:
                    38:fb:d6:3a:5c:fd:fb:8c:31:b2:cf:3e:c0:10:37:
                    d1:ba:87:35:e5:ca:05:53:9a:be:5b:34:76:f5:70:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:30:BE:CA:F1:33:CD:48:4B:F5:7E:87:E6:AB:54:18:60:46:63:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d52a7b41-3c9a-36f9-b4b5-2dda1d1c97c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:da:ca:8a:4e:9d:35:2a:13:09:12:c8:20:09:4f:b3:5f:
         22:2e:f1:e1:9e:66:9c:fb:ea:d0:82:7a:dc:a1:4e:6b:85:06:
         6c:62:7a:8e:e9:6f:9b:66:20:ad:c2:ed:4c:aa:02:30:28:d8:
         87:5e:bd:9e:45:38:68:66:2d:9b:02:26:8f:b3:06:f7:68:f8:
         86:37:75:d2:d7:2e:70:70:76:6e:b0:e4:02:bd:1c:e9:f2:0a:
         52:3d:b2:0b:3b:3b:2e:cf:1e:1c:3a:d2:12:70:64:2b:31:00:
         c4:fe:10:39:dd:3d:0c:61:61:03:c5:0d:8c:49:b7:1d:1e:f5:
         aa:fc:36:6a:b1:31:37:7b:d7:9c:75:1c:a9:21:ac:0f:8b:9c:
         0a:0d:08:bb:1c:7e:91:42:a9:1f:50:c4:50:a0:8b:22:48:fc:
         80:b0:c4:4a:62:f1:ee:4b:82:ed:c8:9f:17:e4:2d:40:78:9a:
         f4:e9:c4:1e:5f:22:bd:f0:85:82:a2:e0:83:00:b4:f3:21:fb:
         5c:22:9a:db:1a:68:41:2d:98:b4:86:fc:c9:56:e3:70:f8:ff:
         65:22:00:b7:40:e9:03:f7:6b:21:71:dc:69:e0:a8:63:49:9b:
         87:fd:6f:ef:26:85:93:1d:1b:22:21:d3:49:1c:4e:ad:12:5c:
         29:54:a6:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzer+gwC6eQZIA0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
NDMxM2Q4ZWYtYTgxOS00YmQ4LTk0ZDQtNjhhNzQyOGFmNGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwGbcege1GrJQp+bmEaN3hC831pC6Jtowf6J
G1x0k7euTe2PVnSNQ3RgHyzmTkG3fgzfVg4zzN76Nh2EjAahjhOdHbRrBHlwq2Bl
EzA7uwnbHF+YuB9XLhRHLTWDC1mxDHdSmqEEQCqMIgiyfuVALlZH2vtMtDv3qhmt
a2exHpO8KMUtjt6ODz8oh0P73l/lyvIvxY5KAhyLCIJzZxNPwJ/rpAdw7WwTAsy/
r7DeT00HkNzNL+Zmkt35XQgcymn77ZyIbweoQ/ZOYxtkHaDgWUMs29KiMXb9Rbzi
wmKWubg4+9Y6XP37jDGyzz7AEDfRuoc15coFU5q+WzR29XAqbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4wvsrxM81IS/V+h+arVBhgRmMzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUyYTdiNDEtM2M5YS0z
NmY5LWI0YjUtMmRkYTFkMWM5N2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRM2sqKTp01KhMJEsggCU+zXyIu8eGeZpz76tCCetyhTmuFBmxieo7p
b5tmIK3C7UyqAjAo2IdevZ5FOGhmLZsCJo+zBvdo+IY3ddLXLnBwdm6w5AK9HOny
ClI9sgs7Oy7PHhw60hJwZCsxAMT+EDndPQxhYQPFDYxJtx0e9ar8NmqxMTd715x1
HKkhrA+LnAoNCLscfpFCqR9QxFCgiyJI/ICwxEpi8e5Lgu3InxfkLUB4mvTpxB5f
Ir3whYKi4IMAtPMh+1wimtsaaEEtmLSG/MlW43D4/2UiALdA6QP3ayFx3GngqGNJ
m4f9b+8mhZMdGyIh00kcTq0SXClUpow=
-----END CERTIFICATE-----
Generated at Mon May 5 12:26:00 2025 by rpki-client