Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e3ca2bb-d097-3556-a762-a2ea9184042b.roa
File:                     4e3ca2bb-d097-3556-a762-a2ea9184042b.roa (raw, json)
Hash identifier:          tFjL4AaqODzNAWC3SC93ifkfL80RO9hoUV7aS6y7N7o=
Subject key identifier:   B0:D8:EA:F7:31:4A:F6:4C:37:0A:F7:71:DB:FC:5B:C3:5B:1E:61:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE9A473853770257F11250
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e3ca2bb-d097-3556-a762-a2ea9184042b.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        97.211.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:9a:47:38:53:77:02:57:f1:12:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=cbb3b65f-f2a3-430a-b5b0-99b666833d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:de:f7:6d:29:e4:ed:d9:05:62:90:99:fb:
                    a7:38:7b:d2:b7:f4:7a:8c:22:7f:89:97:3f:7b:96:
                    5c:8f:fe:14:a4:74:93:ec:c5:8f:2d:57:b3:5e:f7:
                    6b:4d:7f:21:ee:43:2b:b5:80:69:bd:cd:ad:17:93:
                    03:8d:be:37:73:af:2c:e3:8d:da:94:ef:ad:06:48:
                    0e:0b:0c:34:30:31:42:29:3d:41:49:60:31:12:fd:
                    65:69:31:33:c5:0a:50:c3:23:8b:31:4d:1c:7b:50:
                    57:51:39:b1:1a:ba:e3:65:5f:2d:c1:61:e3:6a:7b:
                    4c:dd:68:4f:05:a8:c1:c4:3c:d2:25:5e:3e:3f:59:
                    69:a9:e7:45:7a:57:d4:3e:65:c8:c4:30:71:42:89:
                    0c:8a:0a:42:b3:ca:af:d3:78:55:ec:b5:94:7e:b6:
                    3c:df:4d:ae:d3:06:ef:10:73:bd:97:2d:9f:af:12:
                    df:d9:c1:ed:47:ee:75:a4:00:9f:b2:6e:d8:2b:27:
                    bb:d1:b0:43:5c:16:70:dd:55:b4:71:86:99:86:18:
                    47:5d:a8:58:9b:57:c1:49:86:97:03:d4:8b:84:77:
                    c4:b2:c4:69:b1:6c:41:a9:e9:6a:df:4a:a8:0f:7c:
                    39:51:02:d8:6c:76:2e:e6:05:9e:f8:47:ab:b4:5e:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D8:EA:F7:31:4A:F6:4C:37:0A:F7:71:DB:FC:5B:C3:5B:1E:61:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e3ca2bb-d097-3556-a762-a2ea9184042b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.211.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7d:71:a8:a8:90:ad:f3:37:b2:e1:e4:c7:ee:92:ba:d8:a2:
         80:fc:3b:a2:2b:87:34:ba:9f:62:6b:ef:14:58:f5:a7:38:82:
         aa:6b:37:71:31:cf:ab:e0:e2:f2:c8:ab:91:f1:66:89:ff:08:
         fc:e6:a6:14:19:32:92:05:ba:42:8d:bf:17:7c:96:3d:32:a2:
         e8:12:9e:93:fb:13:24:b6:d3:0e:0f:c5:58:6f:4a:38:de:a7:
         d9:96:40:4e:fd:86:a9:e7:0b:6a:7f:17:75:19:a6:42:eb:4b:
         eb:39:ce:19:c8:4b:06:a5:99:97:38:5b:00:f1:18:7b:48:c7:
         74:eb:31:b6:08:e0:88:56:e2:d7:fd:f8:c7:5f:b3:d5:a7:86:
         ad:ff:67:6b:7a:ac:50:04:1e:ec:68:15:3e:b8:d9:f3:95:e5:
         fe:f3:05:11:2a:15:18:00:ef:39:f2:2b:c0:4f:4b:86:e5:46:
         fa:06:ba:0e:f8:4e:58:a4:19:8e:ce:20:6f:00:bd:63:8f:e7:
         65:15:3b:a4:49:26:81:f7:44:3d:d0:5e:8f:93:2c:22:9a:df:
         0e:4d:82:83:a1:d6:55:60:1a:07:53:80:cc:98:87:88:2c:87:
         f7:58:b8:35:d4:75:af:91:d8:6d:1e:0f:df:36:21:08:7c:76:
         76:de:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:21 2025 by rpki-client