Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff3d1ff6-1305-3da9-9063-120857defc21.roa
File:                     ff3d1ff6-1305-3da9-9063-120857defc21.roa (raw, json)
Hash identifier:          8adE/mfh4XDA9RzrOIgRlyTiktqwwee2k5+7P6DZtbw=
Subject key identifier:   04:AA:93:1D:E2:72:E6:83:0D:86:4E:B2:0D:E0:73:50:1E:11:86:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B7B220AE628FB129DF3E925C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff3d1ff6-1305-3da9-9063-120857defc21.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     6167
IP address blocks:        97.188.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:22:0a:e6:28:fb:12:9d:f3:e9:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=b330812d-6a6b-44a2-b251-a74e075ac209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:54:5c:6b:94:2a:61:02:e6:a0:97:61:d5:
                    97:6d:77:90:f8:8d:ba:c7:e0:86:8f:6d:f4:c2:d0:
                    1d:2c:a5:cd:6b:35:b0:b9:9e:a6:cd:1a:5b:bf:17:
                    8e:a8:2a:84:bf:1b:7c:ac:30:5c:ce:41:83:fc:e2:
                    b0:66:c0:6f:ba:02:77:2d:b8:db:a6:77:90:59:68:
                    8a:81:4c:94:c4:39:29:10:92:6f:79:c2:18:80:42:
                    91:00:2d:79:2d:90:16:d2:5e:67:b3:89:41:b4:08:
                    bd:30:1f:95:ff:2f:d2:f3:54:55:19:c8:3a:3d:67:
                    a3:d0:22:a4:d5:c4:ac:a2:32:04:c2:b4:15:35:17:
                    d6:1e:70:b7:40:56:1f:98:9d:19:2a:17:56:28:c9:
                    7f:df:c5:ba:3d:1f:7f:ea:b8:d1:5a:8b:37:ee:15:
                    5b:ca:43:ef:24:54:85:1e:01:6a:4c:29:2f:f9:69:
                    c5:ba:fc:4b:97:f5:73:f3:ef:b6:2f:3f:2b:ce:83:
                    ab:25:e5:d9:df:d0:47:43:1a:a7:84:1f:e0:5f:86:
                    2f:8d:4a:12:2a:2d:ef:a9:2d:ac:09:cd:36:a6:d8:
                    38:ba:6d:00:67:92:1b:06:fa:46:b9:b4:e6:01:6c:
                    48:dc:0b:36:bf:7b:58:ec:70:f5:00:f2:87:8d:b8:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AA:93:1D:E2:72:E6:83:0D:86:4E:B2:0D:E0:73:50:1E:11:86:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff3d1ff6-1305-3da9-9063-120857defc21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.188.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c7:25:95:a6:31:3a:34:3c:51:5f:e9:a5:22:00:e3:16:e6:
         35:76:e7:f8:72:33:21:9e:9a:fd:22:f5:ba:57:f2:c0:ce:4a:
         be:1b:3b:df:48:2b:25:70:28:ea:2e:2b:21:66:26:1c:a8:d5:
         9d:17:d8:de:be:f6:29:e2:44:fa:27:68:f1:f4:c4:ed:08:d5:
         30:d9:68:ff:13:b3:9d:b7:03:28:4e:5a:d2:8a:ee:5a:9b:3b:
         4d:e2:e1:d0:fe:e3:d0:e8:87:de:9a:dd:26:e2:bc:de:10:d7:
         08:4d:7c:4e:19:9f:bf:da:38:0a:fd:d7:11:dd:0b:18:8d:ce:
         e8:3b:5b:8c:ff:43:18:0c:04:6d:5e:18:85:cf:ef:b3:d3:4c:
         b5:7d:a7:d2:63:80:95:b1:6f:6f:91:c0:7c:19:46:48:fc:9b:
         3f:83:58:96:c1:57:fc:64:59:ac:a1:2f:fa:37:98:ad:7f:a3:
         c0:c1:b5:0a:18:df:87:28:3a:d8:71:13:87:01:d2:b8:3a:2a:
         c8:ee:4e:eb:c6:84:75:11:ca:b2:8e:5c:b5:d1:12:6f:57:1d:
         4e:2e:8c:7c:99:54:41:7f:89:81:0d:f5:61:58:f4:7f:91:c8:
         cf:27:88:30:2a:4c:55:a7:5d:6e:b2:fc:74:54:48:c9:55:f7:
         a8:a4:47:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgrmKPsSnfPpJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk
YjMzMDgxMmQtNmE2Yi00NGEyLWIyNTEtYTc0ZTA3NWFjMjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg5UXGuUKmEC5qCXYdWXbXeQ+I26x+CGj230
wtAdLKXNazWwuZ6mzRpbvxeOqCqEvxt8rDBczkGD/OKwZsBvugJ3LbjbpneQWWiK
gUyUxDkpEJJvecIYgEKRAC15LZAW0l5ns4lBtAi9MB+V/y/S81RVGcg6PWej0CKk
1cSsojIEwrQVNRfWHnC3QFYfmJ0ZKhdWKMl/38W6PR9/6rjRWos37hVbykPvJFSF
HgFqTCkv+WnFuvxLl/Vz8++2Lz8rzoOrJeXZ39BHQxqnhB/gX4YvjUoSKi3vqS2s
Cc02ptg4um0AZ5IbBvpGubTmAWxI3As2v3tY7HD1APKHjbhBjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASqkx3icuaDDYZOsg3gc1AeEYZ1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmYzZDFmZjYtMTMwNS0z
ZGE5LTkwNjMtMTIwODU3ZGVmYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYbygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILHJZWmMTo0PFFf6aUiAOMW5jV25/hyMyGemv0i9bpX8sDOSr4bO99I
KyVwKOouKyFmJhyo1Z0X2N6+9iniRPonaPH0xO0I1TDZaP8Ts523AyhOWtKK7lqb
O03i4dD+49Doh96a3SbivN4Q1whNfE4Zn7/aOAr91xHdCxiNzug7W4z/QxgMBG1e
GIXP77PTTLV9p9JjgJWxb2+RwHwZRkj8mz+DWJbBV/xkWayhL/o3mK1/o8DBtQoY
34coOthxE4cB0rg6KsjuTuvGhHURyrKOXLXREm9XHU4ujHyZVEF/iYEN9WFY9H+R
yM8niDAqTFWnXW6y/HRUSMlV96ikR/g=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:50:17 2025 by rpki-client