Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/26bfcb33-9f47-34be-b996-c43f92cab47d.roa
File:                     26bfcb33-9f47-34be-b996-c43f92cab47d.roa (raw, json)
Hash identifier:          kmw1PbSwhERSF+QjDPhzcn1MIqQ/b7FVVwTn9aEQd1Q=
Subject key identifier:   92:F7:07:45:B8:B1:9E:F4:7F:E5:E1:B8:13:2C:0E:1E:DF:BD:C6:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584957F4106C7DDCEF3CEB0F8000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/26bfcb33-9f47-34be-b996-c43f92cab47d.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        97.228.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:10:6c:7d:dc:ef:3c:eb:0f:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=d205ddde-9065-4e71-abb3-b034fb591d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:af:5a:32:17:06:c8:4b:e6:f2:53:22:03:
                    1b:9d:46:05:49:bb:20:2d:9b:30:1b:4a:95:33:1b:
                    5a:b3:a5:ce:11:b4:c4:e5:48:4c:26:53:68:b2:27:
                    76:95:84:0b:5c:18:bd:e2:e8:f9:62:7a:e2:e6:c2:
                    ad:6b:2b:3c:dd:e5:6d:1b:14:8d:66:bb:57:ef:11:
                    0b:3e:5b:03:bb:34:04:3f:7f:e9:2c:aa:b7:cd:50:
                    d6:a5:33:bd:d7:4e:d8:08:a2:61:11:a5:e0:74:48:
                    95:a3:6d:fb:4e:9a:f0:38:3b:dc:a4:b4:06:4f:e9:
                    e2:d7:52:d9:e4:06:64:5a:34:4f:d3:05:3f:cf:36:
                    0f:13:6f:0f:9f:35:6e:74:9e:ea:c2:f1:7c:7a:d9:
                    f8:b2:99:e3:db:3b:42:54:c7:95:96:15:08:ee:cd:
                    76:d4:18:04:7d:54:99:d3:40:a9:fc:20:a5:35:99:
                    64:30:f3:70:e2:2a:e1:bd:d1:2c:f0:a9:59:e8:3e:
                    24:fd:cc:69:ef:e1:0f:0f:55:4d:7b:8b:52:f6:09:
                    c8:34:6e:5e:46:39:14:d3:c0:72:d5:18:8a:bf:3d:
                    d2:9c:fa:27:eb:f5:63:37:f3:0a:d9:55:c2:8c:7f:
                    9c:77:f5:c9:1f:48:21:0a:29:90:f7:f6:90:ef:d3:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F7:07:45:B8:B1:9E:F4:7F:E5:E1:B8:13:2C:0E:1E:DF:BD:C6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/26bfcb33-9f47-34be-b996-c43f92cab47d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.228.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ff:82:b0:92:b6:6e:a6:51:d6:f3:05:d2:46:7c:26:e1:50:
         3a:e0:1a:61:c8:ba:86:ea:3f:68:2d:46:4b:6d:f6:a7:c5:60:
         ee:be:25:33:fc:23:c5:e4:1e:02:a8:2a:5e:19:42:ae:bc:6c:
         b1:8e:e6:9c:71:ac:78:1f:2f:e1:8d:6b:4a:9a:fc:be:2f:90:
         50:d6:9e:0c:ad:34:9c:4d:31:14:bc:19:80:3f:1c:77:b8:4c:
         03:d3:22:cb:0d:e4:93:64:d1:fc:18:1e:2d:d5:a0:34:97:88:
         eb:65:39:98:0e:f5:5b:22:9d:99:d1:63:96:53:d3:2b:bd:4f:
         91:27:59:00:4e:58:f0:cc:fb:dc:0f:7a:41:5b:96:d1:80:cb:
         18:66:b3:e7:e9:84:e5:b6:4b:02:6c:ca:bd:26:2b:f9:90:6f:
         fd:5b:52:42:51:c1:a5:a8:fc:d8:2f:71:7f:15:18:74:6a:c3:
         24:10:4c:db:4e:bf:04:1a:79:19:7b:bb:15:f9:1b:b3:8b:51:
         5d:b8:8a:16:22:6b:cb:e3:60:fa:c6:2c:b0:f0:ed:0b:e1:f0:
         3b:a1:4a:fa:68:56:77:b4:7f:0e:b5:20:75:7c:b1:59:3e:a4:
         4f:c7:b0:10:12:1b:76:9c:bd:5e:9a:c1:eb:5f:58:e2:5b:70:
         e2:1e:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:49 2025 by rpki-client