Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa
File:                     67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa (raw, json)
Hash identifier:          ZiDUmT8rEsqMRinPEsMObKFXKYB9GYbEVMGX1WwuFYw=
Subject key identifier:   99:D8:91:0E:B5:7F:26:BA:5A:14:05:5C:F1:FA:D3:35:DE:0E:BE:A0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848CF4636E31D4FA737148BE8B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa
Signing time:             Sat 08 Feb 2025 02:00:38 +0000
ROA not before:           Sat 08 Feb 2025 02:00:38 +0000
ROA not after:            Fri 09 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        97.213.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cf:46:36:e3:1d:4f:a7:37:14:8b:e8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  8 02:00:38 2025 GMT
            Not After : May  9 01:00:38 2025 GMT
        Subject: CN=3a4f2d67-7739-4709-afe7-e9f9219789b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:20:5a:a5:fd:80:ce:6b:9b:aa:ea:bc:2f:
                    9d:c4:ce:6d:89:cc:59:b5:63:d4:3f:b5:1f:3d:b7:
                    e1:d6:8e:e1:3c:f7:11:7d:1b:3b:6a:d0:ae:69:c4:
                    5d:80:33:5d:d7:20:af:6d:4c:27:e3:30:09:d0:c7:
                    fb:cd:40:9f:b1:46:78:d1:64:86:e7:26:0d:e5:73:
                    64:34:bd:53:de:9e:04:dc:69:56:77:bb:4f:ba:30:
                    4e:c7:48:54:e7:73:43:34:3d:fa:c8:3c:a5:8f:35:
                    36:d0:cd:3a:ed:12:92:99:2b:06:cf:75:9b:d9:2b:
                    b3:4c:75:72:4d:c6:3a:d3:36:c8:5c:e7:5e:82:df:
                    fb:cd:57:26:04:40:37:4f:c0:8b:ed:48:18:d9:21:
                    e8:9c:e8:ed:c8:93:38:b8:16:90:83:66:1f:3b:a0:
                    bd:42:1f:f0:2e:f5:64:25:48:33:58:05:20:65:ac:
                    6b:7d:36:f5:77:83:f5:db:4f:f4:c5:2d:19:9e:e4:
                    8d:ec:de:3d:ff:e9:8e:60:c2:a5:5f:f1:01:01:ba:
                    d1:96:1b:f9:fb:a5:0e:04:52:09:90:d2:f4:fd:43:
                    80:df:6e:4e:f3:ea:ba:a3:50:45:2f:26:ee:57:f1:
                    05:e3:6c:25:e3:08:1f:b2:ee:39:81:20:0a:f4:e1:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D8:91:0E:B5:7F:26:BA:5A:14:05:5C:F1:FA:D3:35:DE:0E:BE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67231f1a-eb8c-3079-a14e-d85b0cbd96ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.213.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ab:52:47:e0:af:48:30:41:92:04:dd:4a:7f:a4:dc:41:03:
         13:92:58:2e:66:85:58:52:97:81:8d:58:31:7e:b2:8f:fa:c5:
         93:f3:c7:27:5f:1e:89:4f:ad:7b:ed:70:9b:e1:7c:fd:f2:84:
         38:21:ce:83:5b:8a:bc:6f:11:09:3e:3e:e0:41:bd:7d:ec:b4:
         5b:28:bb:15:b4:db:3b:48:31:a1:c1:88:ce:f4:08:45:74:89:
         67:36:8d:be:ab:e9:5c:d4:25:c9:82:a4:6c:ec:31:b5:43:ae:
         11:6b:70:30:33:57:35:9f:41:3a:30:22:cb:60:bf:be:51:7a:
         07:41:4c:c1:13:ad:95:58:3b:14:65:72:5e:fb:4a:c3:07:cb:
         6a:db:7e:86:49:1b:7b:5a:5c:95:c6:f1:f9:c5:09:e2:e8:a9:
         71:3e:a3:0e:7a:b3:4c:38:6a:41:c3:0d:96:80:0d:36:27:a9:
         88:6b:06:36:eb:58:42:97:ea:eb:2b:e6:99:dd:94:df:13:3d:
         96:8c:e6:3f:66:f8:69:0f:ed:8b:30:07:d8:8d:fa:b8:d4:49:
         2e:e3:22:72:ea:77:10:a7:5e:3f:a5:3c:42:58:a8:c8:87:8a:
         09:ff:5c:e8:01:9a:1e:78:15:a5:6b:a8:e8:8f:07:c9:86:87:
         96:62:75:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjPRjbjHU+nNxSL6LAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwODAyMDAzOFoXDTI1MDUwOTAxMDAzOFowLzEtMCsGA1UEAxMk
M2E0ZjJkNjctNzczOS00NzA5LWFmZTctZTlmOTIxOTc4OWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq0gWqX9gM5rm6rqvC+dxM5ticxZtWPUP7Uf
Pbfh1o7hPPcRfRs7atCuacRdgDNd1yCvbUwn4zAJ0Mf7zUCfsUZ40WSG5yYN5XNk
NL1T3p4E3GlWd7tPujBOx0hU53NDND36yDyljzU20M067RKSmSsGz3Wb2SuzTHVy
TcY60zbIXOdegt/7zVcmBEA3T8CL7UgY2SHonOjtyJM4uBaQg2YfO6C9Qh/wLvVk
JUgzWAUgZaxrfTb1d4P120/0xS0ZnuSN7N49/+mOYMKlX/EBAbrRlhv5+6UOBFIJ
kNL0/UOA325O8+q6o1BFLybuV/EF42wl4wgfsu45gSAK9OFLtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnYkQ61fya6WhQFXPH60zXeDr6gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjcyMzFmMWEtZWI4Yy0z
MDc5LWExNGUtZDg1YjBjYmQ5NmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdX8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqrUkfgr0gwQZIE3Up/pNxBAxOSWC5mhVhSl4GNWDF+so/6xZPzxydf
HolPrXvtcJvhfP3yhDghzoNbirxvEQk+PuBBvX3stFsouxW02ztIMaHBiM70CEV0
iWc2jb6r6VzUJcmCpGzsMbVDrhFrcDAzVzWfQTowIstgv75RegdBTMETrZVYOxRl
cl77SsMHy2rbfoZJG3taXJXG8fnFCeLoqXE+ow56s0w4akHDDZaADTYnqYhrBjbr
WEKX6usr5pndlN8TPZaM5j9m+GkP7YswB9iN+rjUSS7jInLqdxCnXj+lPEJYqMiH
ign/XOgBmh54FaVrqOiPB8mGh5ZidXU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:32 2025 by rpki-client