Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eab4b64-09c9-3060-abae-743e6441f6c3.roa
File:                     3eab4b64-09c9-3060-abae-743e6441f6c3.roa (raw, json)
Hash identifier:          DKXajHzHqqbayQ/I2mx3vAZ6CTUgIb/wZQiCiw+odns=
Subject key identifier:   2A:FD:BA:59:90:45:A4:D3:9C:B0:3F:4A:1D:09:3D:AF:36:17:8C:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A712899EC9CDA2F83013CAC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eab4b64-09c9-3060-abae-743e6441f6c3.roa
Signing time:             Mon 07 Jul 2025 18:28:55 +0000
ROA not before:           Mon 07 Jul 2025 18:28:55 +0000
ROA not after:            Sun 05 Oct 2025 18:28:55 +0000
asID:                     6167
IP address blocks:        97.215.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:28:99:ec:9c:da:2f:83:01:3c:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  7 18:28:55 2025 GMT
            Not After : Oct  5 18:28:55 2025 GMT
        Subject: CN=d938bd6a-9cd7-4e4f-8bce-c22510e1ec35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:a3:79:f1:51:ec:3b:27:56:22:9d:8a:23:
                    bc:b8:e2:f3:6e:fe:07:f7:e7:5a:07:ca:1a:2e:65:
                    23:1e:5b:3f:dc:62:a0:fb:7b:d7:ba:1c:d4:f7:20:
                    16:0f:41:57:fc:db:93:76:11:73:c8:86:3e:3f:fd:
                    f8:cf:2e:e6:39:16:5d:bc:a0:3a:2f:11:cd:27:83:
                    8b:bb:54:c7:ee:cd:7f:ae:36:c0:6c:70:c8:ee:bd:
                    5f:b2:f1:5c:bc:25:6d:77:df:b6:10:e7:0f:0e:af:
                    ba:83:f6:8b:22:2b:01:f6:0c:76:98:0d:dc:bc:82:
                    fb:07:36:99:23:dd:84:4b:5a:b5:cf:ad:aa:91:a6:
                    9f:c0:c4:30:93:11:c4:a4:77:cc:f9:f2:00:8c:95:
                    1c:72:8b:27:bb:cf:09:4b:12:bd:cd:c8:73:14:c2:
                    68:6e:75:c3:42:a9:90:f4:03:e3:8b:0d:f7:43:a9:
                    26:e1:e5:59:5f:8f:00:31:7b:8f:62:8e:4e:17:78:
                    9f:a8:9b:85:5f:25:82:2c:68:39:bd:30:d3:72:d9:
                    2c:53:a2:65:01:91:bb:27:a5:1e:52:ce:1f:97:26:
                    d0:b2:48:7c:4b:b9:a3:09:59:d5:4e:1e:5f:12:47:
                    63:34:24:2d:db:b8:64:4a:02:33:ed:23:34:2f:29:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FD:BA:59:90:45:A4:D3:9C:B0:3F:4A:1D:09:3D:AF:36:17:8C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3eab4b64-09c9-3060-abae-743e6441f6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:16:21:ba:89:e4:d4:25:e6:93:89:c5:ab:f3:2a:d5:94:
         bb:d4:6b:13:50:f1:7d:38:1c:97:87:00:cb:df:0d:b8:30:41:
         d7:ff:2f:11:3a:6a:25:0e:10:ad:9b:5f:71:4a:14:9e:2f:8f:
         b2:27:b6:ed:ac:e7:fe:5f:4f:c8:33:d4:13:f8:e1:5f:3d:65:
         f9:52:4e:7c:39:93:65:16:56:6b:87:b0:ff:4b:34:4e:31:48:
         49:6b:9f:86:7b:3c:94:5c:73:3e:d2:47:be:43:f2:77:97:f1:
         35:1d:40:24:b2:05:ca:0a:8d:d9:d2:37:e2:91:a7:9d:3d:0e:
         e5:5f:b3:b4:c4:87:99:85:15:fa:8b:3f:0c:e0:43:8a:9b:8c:
         a3:e2:af:21:98:bb:f5:39:b9:c1:10:d6:64:06:15:a1:23:68:
         29:f1:7d:f7:4f:0d:f2:04:af:9c:37:b4:ce:38:c6:69:e9:f2:
         bd:e9:44:89:22:16:62:2a:b7:41:e9:87:e1:48:d9:72:d6:44:
         be:2f:76:10:73:fd:d0:7e:49:7e:3b:2a:b3:ff:31:97:2e:36:
         4f:f5:43:3c:65:51:ee:c1:a2:75:e1:45:0d:d8:b9:8d:34:9a:
         3e:cd:a7:b8:39:24:6e:89:57:5e:b8:fa:a3:4c:1a:cd:47:93:
         89:c7:2a:3f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpxKJnsnNovgwE8rIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwNzE4Mjg1NVoXDTI1MTAwNTE4Mjg1NVowLzEtMCsGA1UEAxMk
ZDkzOGJkNmEtOWNkNy00ZTRmLThiY2UtYzIyNTEwZTFlYzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSyjefFR7DsnViKdiiO8uOLzbv4H9+daB8oa
LmUjHls/3GKg+3vXuhzU9yAWD0FX/NuTdhFzyIY+P/34zy7mORZdvKA6LxHNJ4OL
u1TH7s1/rjbAbHDI7r1fsvFcvCVtd9+2EOcPDq+6g/aLIisB9gx2mA3cvIL7BzaZ
I92ES1q1z62qkaafwMQwkxHEpHfM+fIAjJUccosnu88JSxK9zchzFMJobnXDQqmQ
9APjiw33Q6km4eVZX48AMXuPYo5OF3ifqJuFXyWCLGg5vTDTctksU6JlAZG7J6Ue
Us4flybQskh8S7mjCVnVTh5fEkdjNCQt27hkSgIz7SM0LynasQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCr9ulmQRaTTnLA/Sh0JPa82F4zkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VhYjRiNjQtMDljOS0z
MDYwLWFiYWUtNzQzZTY0NDFmNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYdcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADCcWIbqJ5NQl5pOJxavzKtWUu9RrE1DxfTgcl4cAy98NuDBB1/8vETpq
JQ4QrZtfcUoUni+Psie27azn/l9PyDPUE/jhXz1l+VJOfDmTZRZWa4ew/0s0TjFI
SWufhns8lFxzPtJHvkPyd5fxNR1AJLIFygqN2dI34pGnnT0O5V+ztMSHmYUV+os/
DOBDipuMo+KvIZi79Tm5wRDWZAYVoSNoKfF9908N8gSvnDe0zjjGaenyvelEiSIW
Yiq3QemH4UjZctZEvi92EHP90H5Jfjsqs/8xly42T/VDPGVR7sGideFFDdi5jTSa
Ps2nuDkkbolXXrj6o0wazUeTiccqPw==
-----END CERTIFICATE-----
Generated at Wed Jul 9 21:05:21 2025 by rpki-client