Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a0d52b7-d0e3-3186-bcf6-c3d86e13679b.roa
File:                     1a0d52b7-d0e3-3186-bcf6-c3d86e13679b.roa (raw, json)
Hash identifier:          AIpVr+9BIKMXkF8ixEyAJzBKTS/L7+QIyViBqDerRA4=
Subject key identifier:   AC:69:AE:EC:01:E7:6D:93:2A:17:15:5A:80:5B:9F:3D:EE:40:65:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218422DDC880F3B5E5316180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a0d52b7-d0e3-3186-bcf6-c3d86e13679b.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.135.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:22:dd:c8:80:f3:b5:e5:31:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=253aa7ac-2b69-415d-98be-64bf2d08d475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:b5:ba:bf:1e:8f:4d:2a:aa:f0:c6:4e:f5:
                    cb:42:24:d9:82:dd:31:9d:70:1d:92:c8:86:4f:c9:
                    22:40:d5:1c:21:38:0f:51:9d:02:df:f8:b8:2d:c2:
                    c2:1a:98:2c:0b:31:96:eb:3f:3d:bd:dd:4f:c5:2f:
                    da:63:35:7b:08:1b:40:80:37:06:df:51:e2:94:56:
                    9b:56:c4:b9:d9:72:56:03:4d:b3:f3:e1:50:e1:f4:
                    77:74:af:07:15:c0:11:6d:87:e7:8a:40:ed:22:20:
                    0d:10:79:bb:8e:ac:b7:3c:47:c8:00:f2:13:d1:c0:
                    b8:9e:e3:ad:1e:78:72:45:b6:29:a3:63:75:62:d1:
                    0b:54:64:2e:bf:0e:d2:04:4f:1f:60:8a:9c:db:ca:
                    e2:34:b9:66:6e:db:f0:c5:9f:dd:62:db:58:77:74:
                    2e:54:be:1a:1c:5d:e5:56:15:96:31:a0:43:2b:77:
                    c8:50:04:3d:9b:cd:45:62:63:1b:5a:cf:58:42:10:
                    e6:76:12:d6:71:da:28:60:ed:a3:33:3e:61:f3:a4:
                    b7:b0:78:20:4f:92:20:5e:04:22:74:75:6c:02:7f:
                    5a:9a:6f:99:30:ca:89:7c:c1:a5:13:cf:e1:50:0f:
                    2a:aa:f9:55:ec:40:a2:fb:5d:85:ab:4d:f6:1f:4a:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:AE:EC:01:E7:6D:93:2A:17:15:5A:80:5B:9F:3D:EE:40:65:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a0d52b7-d0e3-3186-bcf6-c3d86e13679b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.135.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:46:2b:62:f0:f3:c2:bc:6a:10:9c:9e:08:9a:35:af:a8:3c:
         9a:40:71:01:2a:1c:e4:6c:99:04:d5:12:4d:92:9d:31:e9:fa:
         77:35:12:24:2f:bd:02:fb:6d:fc:1d:16:43:cb:3d:ae:24:f9:
         4e:3e:75:86:b9:af:76:91:2b:66:7f:57:3e:de:94:22:a8:2e:
         f5:b6:25:76:fa:61:6d:02:7a:5d:ff:fa:a7:b0:f2:bf:5b:b9:
         f9:4a:76:f8:6d:2a:18:fb:86:13:b3:6c:f2:12:bd:f4:34:80:
         d5:3c:18:6d:a8:2d:8f:86:ec:7b:56:1f:01:5d:36:d3:69:cc:
         a0:97:e5:9c:c2:c6:6f:3c:11:c3:ae:cd:6c:ec:8a:fd:db:8b:
         97:01:78:ea:72:1f:76:40:9f:27:6e:f8:b8:07:5e:da:c3:f8:
         7c:e6:ec:45:18:83:96:93:ad:30:7a:2e:2e:9b:94:8a:74:42:
         6e:f9:83:a5:2d:d4:c6:99:a0:1a:53:c3:91:6c:51:30:cc:9a:
         da:38:ec:36:4f:d4:40:d9:43:e1:9a:51:4e:1b:56:6f:7c:d3:
         87:62:8c:8e:90:08:96:dc:dd:1a:db:30:03:c6:11:ec:fc:ac:
         15:2d:61:85:3d:85:82:e9:a2:7e:74:75:be:da:2c:3a:f7:35:
         8f:08:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:05 2025 by rpki-client