Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbc432eb-2aae-311b-8842-310c871ca0f0.roa
File:                     fbc432eb-2aae-311b-8842-310c871ca0f0.roa (raw, json)
Hash identifier:          7t8CZeFjXjRfx3VKM3LNhRwMZcGBTbDyrdPWrwMGkwU=
Subject key identifier:   41:DA:4F:33:4A:75:6D:26:6E:74:27:73:E2:92:79:9D:2B:42:77:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196A33C3A4DFA2C64DC7580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbc432eb-2aae-311b-8842-310c871ca0f0.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        97.133.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:a3:3c:3a:4d:fa:2c:64:dc:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b75dad6a-a973-4b2d-a51b-7987f6d44b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:ed:ab:81:d6:e6:fc:55:48:b4:56:6d:1b:
                    51:90:cb:0f:2d:e1:6b:c2:55:ff:fc:88:cf:d4:6d:
                    27:66:45:29:c7:ea:34:68:84:87:76:78:4a:c4:05:
                    f9:a9:6f:e0:de:84:2e:a0:bd:fe:60:25:ba:32:3e:
                    f0:ce:88:92:a9:58:51:1a:9a:47:ea:f9:6f:06:94:
                    65:6c:20:0a:a6:2b:86:c5:60:da:80:ca:f2:87:fa:
                    54:1e:4c:33:68:27:b4:7a:c7:fc:af:59:a6:ee:7f:
                    8d:b4:23:b5:9e:e1:6f:29:02:c5:d1:65:62:35:6b:
                    58:58:26:6d:4c:b7:2b:bb:11:40:e1:ae:21:0a:a9:
                    73:67:34:8c:e9:8d:28:3f:17:81:0a:0a:bf:13:86:
                    f2:83:fc:d2:75:b9:01:4a:ec:b2:04:81:b8:0d:1d:
                    cc:3f:be:ab:e1:e1:58:22:8a:6f:3b:a2:9e:59:22:
                    de:1f:6f:2c:8f:90:d0:69:3a:a6:4e:63:f9:a5:fa:
                    da:9d:e2:fd:56:ce:41:be:27:92:0f:8d:df:b4:39:
                    88:28:b4:2a:bf:90:63:22:b7:97:45:9a:65:6e:ab:
                    14:1c:62:ed:28:46:b5:e2:3e:73:ff:cc:4e:33:a3:
                    c7:06:2e:32:d3:bd:0d:d6:71:ba:8a:ba:75:57:02:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DA:4F:33:4A:75:6D:26:6E:74:27:73:E2:92:79:9D:2B:42:77:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbc432eb-2aae-311b-8842-310c871ca0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.133.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:79:4f:5c:2d:e6:41:e5:12:bd:72:a8:43:30:83:f9:b6:84:
         71:b5:d6:70:c1:47:7b:27:45:8a:84:1b:42:36:6e:66:99:64:
         8c:0c:b7:a3:8d:32:2e:f6:76:e0:ce:29:e5:ea:88:65:86:c9:
         0b:a7:62:6a:80:a5:d7:c5:2c:4a:41:fd:d0:25:51:a7:3e:7e:
         6f:03:35:68:b3:c4:2a:31:ed:ae:fb:65:62:b8:56:71:85:29:
         1a:5e:1e:a8:00:6f:41:31:c3:c1:ba:f1:d2:ab:33:42:98:87:
         02:c1:5f:3f:f4:3d:a5:34:ee:e9:92:01:6f:f1:c4:82:de:3c:
         17:bc:64:29:ee:1b:5d:a9:80:83:50:40:5a:ae:6e:4a:6d:b9:
         06:b1:70:93:f4:de:07:46:10:bb:44:6a:95:5b:64:bc:7d:ba:
         18:b8:2f:70:eb:ef:11:fc:47:9e:ea:09:77:cf:01:21:bc:da:
         9c:ce:45:70:99:33:76:d5:eb:9c:63:93:29:81:df:58:21:20:
         f9:a4:6e:95:4a:65:6b:e3:02:2c:fd:e1:cc:f3:8c:79:9c:ca:
         68:42:00:eb:d9:f2:48:09:01:a7:81:78:13:d3:77:a9:93:c1:
         7b:23:97:1a:6a:20:f6:4b:f4:67:bb:49:2f:d5:f1:37:cf:2a:
         cd:95:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:09 2025 by rpki-client