Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc770f1e-e439-3f5e-97f5-4f4c9489bb09.roa
File:                     dc770f1e-e439-3f5e-97f5-4f4c9489bb09.roa (raw, json)
Hash identifier:          4+kCgD+q/1oWTWjWpznXeadX/I05UJxFEemVin/Qbpk=
Subject key identifier:   8F:27:0D:D4:FA:25:D2:4E:74:C9:E2:32:26:27:5C:B0:01:5B:86:06
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DADBCD9D6F5DDF8AB72C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc770f1e-e439-3f5e-97f5-4f4c9489bb09.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.128.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:db:cd:9d:6f:5d:df:8a:b7:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=d127e272-2b17-4ad7-99af-4b61d3153aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:47:3c:d0:54:af:f5:97:0a:cf:9c:b8:7b:
                    7b:ed:66:b9:4b:7b:11:b3:82:69:65:56:e5:93:93:
                    82:9f:79:ba:fe:e7:7d:7c:d9:bd:e9:4d:44:91:6e:
                    3a:19:3f:0b:5e:11:a7:14:cc:04:2c:a9:66:1e:c8:
                    75:ed:33:09:c7:c2:58:1d:21:bb:d6:be:e7:c6:52:
                    d8:df:d7:08:f6:15:9f:5a:d4:59:5f:62:b2:aa:2f:
                    03:3d:8a:2f:56:2e:1d:d3:bc:8a:0e:ec:bf:74:e4:
                    02:6f:5d:88:47:38:37:fc:9f:ac:59:d0:d5:54:2c:
                    b5:f0:70:6d:ee:0f:6e:c2:01:5a:20:42:96:23:a7:
                    0e:fa:0a:13:a7:d9:4f:6e:f0:10:c7:cf:e5:5d:58:
                    23:5a:09:f2:72:ae:15:85:ef:30:80:8f:80:4c:fc:
                    a8:22:18:fd:37:eb:4b:3b:86:8f:1c:86:10:cf:d1:
                    aa:61:0a:eb:ff:51:f9:8e:2e:fe:53:c2:a8:f0:40:
                    75:a0:e0:ea:a6:a5:21:e0:d1:1e:17:d4:99:a6:9d:
                    85:28:00:0c:37:5f:87:4b:57:03:7a:29:6b:dd:b5:
                    fa:d8:c3:ec:2c:66:3d:94:67:f8:a2:85:7e:f1:79:
                    d8:6b:76:77:08:14:0c:1e:1b:2d:68:be:dd:32:e4:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:27:0D:D4:FA:25:D2:4E:74:C9:E2:32:26:27:5C:B0:01:5B:86:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc770f1e-e439-3f5e-97f5-4f4c9489bb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.128.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:47:05:55:8a:a1:79:7c:5e:ee:b4:51:8d:b4:85:9d:e0:47:
         69:41:7e:92:61:8f:a7:c9:50:60:4f:19:bd:37:a1:35:38:f8:
         73:99:b6:91:a7:ab:0f:47:92:59:a8:c2:d0:0f:f4:3c:87:6f:
         08:1a:67:f0:b3:ef:ea:2e:3f:cd:30:41:6d:92:62:cb:3c:a9:
         3d:a2:81:2a:d8:b9:67:b9:b2:bb:8a:6e:ee:1d:4e:7d:c1:f8:
         09:2a:eb:79:60:98:0d:34:e8:41:1c:e6:8a:fa:81:a2:0c:67:
         d2:11:e0:80:bb:5d:c1:ee:d0:25:b2:a6:5d:8f:bd:b8:cc:10:
         e6:fa:36:5a:8f:65:cd:a5:43:ea:80:f4:e5:dc:6e:38:30:8c:
         e8:00:59:eb:79:63:48:ba:69:c7:15:e0:9a:37:c5:20:0f:b0:
         05:83:31:df:c3:5f:e5:35:b7:84:84:11:99:2b:88:81:7d:d3:
         61:34:87:6f:51:83:3d:ca:51:c7:c0:9d:8e:61:11:ee:0b:86:
         29:bb:a1:4b:09:8b:22:2f:41:00:2b:7f:05:77:84:dc:a8:86:
         96:16:09:8a:e0:64:3e:02:ae:9f:27:e3:48:d5:42:5e:9d:87:
         39:dd:ac:f0:72:30:7f:f4:3b:0f:bf:29:a2:f5:31:9b:2b:e2:
         49:25:b3:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2tvNnW9d34q3LAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZDEyN2UyNzItMmIxNy00YWQ3LTk5YWYtNGI2MWQzMTUzYWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cFHPNBUr/WXCs+cuHt77Wa5S3sRs4JpZVbl
k5OCn3m6/ud9fNm96U1EkW46GT8LXhGnFMwELKlmHsh17TMJx8JYHSG71r7nxlLY
39cI9hWfWtRZX2Kyqi8DPYovVi4d07yKDuy/dOQCb12IRzg3/J+sWdDVVCy18HBt
7g9uwgFaIEKWI6cO+goTp9lPbvAQx8/lXVgjWgnycq4Vhe8wgI+ATPyoIhj9N+tL
O4aPHIYQz9GqYQrr/1H5ji7+U8Ko8EB1oODqpqUh4NEeF9SZpp2FKAAMN1+HS1cD
eilr3bX62MPsLGY9lGf4ooV+8XnYa3Z3CBQMHhstaL7dMuTS/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8nDdT6JdJOdMniMiYnXLABW4YGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGM3NzBmMWUtZTQzOS0z
ZjVlLTk3ZjUtNGY0Yzk0ODliYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYYCgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJHBVWKoXl8Xu60UY20hZ3gR2lBfpJhj6fJUGBPGb03oTU4+HOZtpGn
qw9HklmowtAP9DyHbwgaZ/Cz7+ouP80wQW2SYss8qT2igSrYuWe5sruKbu4dTn3B
+Akq63lgmA006EEc5or6gaIMZ9IR4IC7XcHu0CWypl2PvbjMEOb6NlqPZc2lQ+qA
9OXcbjgwjOgAWet5Y0i6accV4Jo3xSAPsAWDMd/DX+U1t4SEEZkriIF902E0h29R
gz3KUcfAnY5hEe4Lhim7oUsJiyIvQQArfwV3hNyohpYWCYrgZD4Crp8n40jVQl6d
hzndrPByMH/0Ow+/KaL1MZsr4kkls58=
-----END CERTIFICATE-----
Generated at Tue Jul 1 04:06:36 2025 by rpki-client