Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36e61e89-cd2e-301f-8ac3-a1bcc1a81bc7.roa
File:                     36e61e89-cd2e-301f-8ac3-a1bcc1a81bc7.roa (raw, json)
Hash identifier:          enNDRY0xWYr82e+eldUEfbMOO6SkHot/kBfJok+W6Lo=
Subject key identifier:   8D:97:92:3B:7A:3C:EC:91:19:D2:A9:57:E1:DC:9E:15:7A:5F:81:EF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218421BA20E724BE03DD5840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36e61e89-cd2e-301f-8ac3-a1bcc1a81bc7.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.132.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:21:ba:20:e7:24:be:03:dd:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=f070e9e2-7988-4e0f-85f2-9575014c19eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:9c:b2:fb:f0:ca:2a:aa:c7:49:c8:33:03:
                    a8:ca:a5:48:ca:28:c2:ce:3d:51:ec:9c:cb:9b:74:
                    1a:07:ce:a9:6e:d5:d2:7e:18:1d:86:df:81:4c:68:
                    f8:50:e1:bc:f5:0c:03:68:40:11:39:8e:ec:69:f0:
                    03:70:ae:02:91:e4:6a:47:4c:a3:f8:c8:88:26:62:
                    0c:e6:3d:39:55:69:2f:bb:5e:0d:6d:42:32:d8:79:
                    bc:94:b3:e3:53:4a:8b:24:85:33:69:a0:29:ab:61:
                    e4:80:3f:6b:c1:ed:cc:37:f3:14:ef:d4:03:ff:07:
                    38:df:87:d8:a1:95:c5:0c:ab:a2:4d:fa:ba:6f:1f:
                    b9:5f:b6:92:eb:58:7c:11:40:1d:92:1f:ca:e4:61:
                    67:73:2b:b3:d5:88:d3:8a:d9:5e:c9:cf:25:d4:45:
                    3e:73:f9:34:af:56:43:2b:ad:0f:54:ab:74:2d:85:
                    31:fd:12:5f:d0:a3:4f:d9:9d:41:8e:0d:82:39:8b:
                    09:6b:18:a2:97:ee:1e:49:25:78:1e:9d:eb:54:ed:
                    dd:a9:40:17:81:7d:53:0e:76:6e:06:90:9e:e8:3d:
                    99:e1:7d:39:c2:06:98:1d:4a:0a:cf:b1:0c:7e:1a:
                    99:cf:3c:23:1a:cb:fa:62:34:9e:45:ab:6e:8f:6d:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:97:92:3B:7A:3C:EC:91:19:D2:A9:57:E1:DC:9E:15:7A:5F:81:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36e61e89-cd2e-301f-8ac3-a1bcc1a81bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.132.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3e:93:ee:78:7e:82:19:13:9c:34:8c:a6:62:4f:e2:37:48:
         e4:e1:53:c4:35:b7:c5:d7:95:58:90:88:a1:03:08:c7:ef:26:
         99:01:34:01:bf:ed:ff:3c:85:dc:49:84:52:3f:19:7c:2b:1f:
         69:7d:bb:27:bf:af:c9:17:e1:e7:63:67:54:8b:ad:a5:b7:cb:
         78:eb:b2:0d:32:96:64:17:69:ac:4f:94:e1:f0:e3:09:df:4f:
         ec:b4:ed:ea:b7:9d:4d:3f:98:2c:b8:a5:38:b5:0f:50:43:d1:
         e4:13:7a:9b:6d:12:73:7a:48:27:64:a3:31:e1:00:30:b7:b3:
         69:0b:cf:33:79:41:05:ad:4b:13:88:ad:68:29:5d:f5:fc:20:
         83:1b:09:59:b5:64:87:7e:92:7d:1d:a2:32:8d:06:2d:3d:14:
         ed:ac:8a:c5:b8:36:97:b1:27:6e:f0:64:d7:37:b2:a1:26:59:
         65:8d:1f:2b:57:0b:27:ac:b6:66:18:02:1e:48:83:73:95:e6:
         44:ee:23:70:ec:60:e0:76:52:e3:25:d3:d6:43:98:e2:dd:ce:
         39:98:b7:a9:d6:dc:f2:c7:fa:3a:eb:37:a7:90:b3:6c:ba:47:
         7b:da:f0:b9:3c:de:a4:cd:c4:f2:02:23:68:c1:f1:3d:8d:6f:
         68:67:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:00 2025 by rpki-client