Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3720832-caf9-3e3b-99c2-09f29ebc26c6.roa
File:                     e3720832-caf9-3e3b-99c2-09f29ebc26c6.roa (raw, json)
Hash identifier:          erHvbH0SGVeFInvFcXBkYIga2HvfiyqCp8ybRH+GijQ=
Subject key identifier:   18:22:66:C0:22:47:47:F4:4F:64:AA:2C:CF:81:76:50:42:F5:2C:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAE071DD95492CA47761C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3720832-caf9-3e3b-99c2-09f29ebc26c6.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.176.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:e0:71:dd:95:49:2c:a4:77:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=87183138-bcc5-4fca-a4c7-9d07f364222e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:9b:55:0b:1c:f3:f7:5c:5d:23:08:2d:11:
                    59:37:ff:e0:ed:a1:34:e2:49:b2:46:62:ac:94:f9:
                    dd:e6:d2:fd:70:99:17:39:73:0b:ba:b8:c5:63:bc:
                    18:11:7c:80:ac:f2:40:7e:d0:af:a2:9a:b1:10:29:
                    62:6d:d6:37:37:49:8a:0e:d2:8d:c0:88:90:ea:d8:
                    36:dd:d9:7d:67:f5:a3:32:26:ae:15:bc:ab:1e:e8:
                    e2:b6:16:a1:a3:4d:63:f5:64:9a:f4:5b:2e:94:c5:
                    ce:6f:6a:19:5a:b5:01:e4:0f:69:ee:b4:8b:a3:19:
                    16:03:75:9f:7e:b3:7b:ae:64:0c:76:f7:43:72:f1:
                    88:0e:9b:04:b3:e6:d9:d9:29:68:48:a8:26:68:64:
                    d9:36:c2:3a:53:1a:cd:b5:ca:57:0d:38:31:bf:8b:
                    8e:47:98:4e:1f:eb:79:fe:d1:17:cd:52:75:35:0c:
                    7f:0f:8d:e7:5a:05:a2:89:76:ff:6f:2a:78:02:e2:
                    1c:5d:2f:72:cb:3c:22:49:2a:d5:d8:8c:3d:03:d6:
                    ac:d9:cc:b9:0a:0f:72:42:33:a5:c5:82:d7:fc:9c:
                    aa:6b:fd:4e:b8:8f:d3:95:1f:52:5f:20:38:b6:ee:
                    6d:4c:18:b9:b3:41:d1:66:5b:c1:e0:96:a8:81:27:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:22:66:C0:22:47:47:F4:4F:64:AA:2C:CF:81:76:50:42:F5:2C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3720832-caf9-3e3b-99c2-09f29ebc26c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.176.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6a:66:c0:5f:d5:f9:ff:ca:24:39:3a:a6:3b:d2:92:fb:56:
         3d:48:b3:2e:dd:a3:f6:3c:bd:28:9c:c5:39:bb:be:c2:90:b6:
         e4:68:a6:84:74:32:b3:a3:cf:39:7e:6c:06:7c:a7:42:7d:4a:
         4f:93:bc:d5:14:31:28:2a:fd:15:ed:3a:1c:14:41:d6:b8:92:
         5b:ad:1b:20:a2:db:11:1a:ff:4e:01:42:77:72:04:05:97:20:
         b0:a7:d3:fa:b7:fc:a2:cf:2a:23:6e:d1:b3:1b:ad:47:a8:1f:
         37:14:0a:74:23:58:ae:42:40:4d:32:12:59:aa:62:5a:2e:ab:
         6c:d4:68:5a:86:cb:d8:ee:00:49:a4:7e:6a:e7:39:ae:90:38:
         c9:bf:5a:6c:45:05:3f:ad:4c:34:a3:fd:96:c6:2e:66:51:f0:
         98:ee:82:a8:ab:96:c1:d5:03:1e:3b:54:30:4e:49:a5:00:5f:
         75:5e:78:64:40:62:f2:d1:b0:fd:d7:e3:31:e9:a2:98:1d:1b:
         a9:db:74:6f:41:f1:64:11:90:4d:31:ef:34:6f:44:0b:d1:96:
         4f:33:22:04:e8:f4:23:c5:af:e0:fb:cc:86:ce:12:49:56:e0:
         be:c2:66:49:f5:b4:ad:94:d3:00:bc:86:f2:d9:30:e0:6d:04:
         60:8a:3a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:16:00 2025 by rpki-client