Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b362dc45-76c8-3252-a335-9eb9e59d3b0f.roa
File:                     b362dc45-76c8-3252-a335-9eb9e59d3b0f.roa (raw, json)
Hash identifier:          mBsh8T7lEFVcvYMPx3As5QEBLVfVdztOYrwqpv+34Ww=
Subject key identifier:   6E:4B:FC:CA:C4:74:02:05:72:C5:F8:68:68:AF:7F:D0:32:F9:B0:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE9A54D2B805B10443C780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b362dc45-76c8-3252-a335-9eb9e59d3b0f.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        97.211.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:9a:54:d2:b8:05:b1:04:43:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=1e8107ae-65e1-4f99-8591-2ee4e98a6197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7f:55:3e:16:56:20:e5:01:d6:e4:f5:24:50:
                    34:c6:cb:55:26:81:af:cd:96:07:e2:ae:50:a5:d8:
                    d6:cd:4d:08:10:21:1e:26:c1:dd:a6:4f:84:f9:43:
                    1d:68:50:bc:1e:78:89:12:c9:f5:76:86:f8:6f:ed:
                    45:a2:2c:67:f3:6a:ab:8d:ec:17:a9:02:7a:0a:32:
                    63:2b:75:a2:68:8c:9f:58:18:46:06:e8:82:e0:69:
                    b1:89:b7:90:2d:a8:90:e1:30:37:b8:64:97:ac:52:
                    79:8f:0c:62:6a:11:b1:bf:c9:9c:89:da:19:d5:65:
                    3d:ec:14:b2:4e:e2:e7:07:49:c6:10:51:8b:63:19:
                    ae:73:49:3e:63:26:c2:9b:18:84:05:dc:53:e6:14:
                    ff:3f:2d:f0:17:73:8f:80:92:09:1f:2d:56:2d:a9:
                    10:77:10:55:f7:61:ab:93:03:41:7f:c1:06:d9:8c:
                    1a:c8:9f:82:e9:61:c6:d4:78:e4:71:ba:2d:03:31:
                    be:37:f2:ad:24:71:03:48:45:cb:f4:89:1e:fd:52:
                    1c:44:0a:bb:a4:c7:d6:0e:17:08:83:53:a7:27:c3:
                    1e:7c:8e:15:86:58:c7:cd:71:b3:8a:c0:75:6b:e5:
                    ff:d7:71:92:d9:e9:de:ca:a8:12:82:16:56:0b:7d:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4B:FC:CA:C4:74:02:05:72:C5:F8:68:68:AF:7F:D0:32:F9:B0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b362dc45-76c8-3252-a335-9eb9e59d3b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.211.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:56:dd:e8:6a:c7:71:b6:50:f0:a4:67:92:58:19:9e:90:
         7d:2b:a9:d5:0e:16:eb:c5:cb:5a:d2:bc:d8:62:6f:4a:2a:db:
         7a:a0:25:ea:8d:ef:1d:e9:87:74:78:77:f4:23:54:ca:eb:a3:
         82:9e:d9:1e:2e:45:85:0a:19:a1:20:28:36:82:94:0d:2e:c0:
         15:80:03:a6:2b:a6:6b:17:41:12:33:57:2a:a2:5d:b8:cb:54:
         fb:29:cb:54:19:0e:a3:39:c2:cd:70:c2:ae:3c:ec:7e:58:b8:
         97:18:96:30:c0:06:a4:56:3e:cc:72:51:4c:a7:4e:a8:dc:95:
         3c:4e:f9:94:33:c2:b1:32:a3:1a:f4:38:04:15:c6:49:74:a5:
         a0:72:f8:bf:e0:65:61:62:d3:24:2b:74:f4:bc:fd:31:51:1c:
         14:8a:e6:60:b0:33:bc:8c:56:d5:32:c0:15:ed:93:6a:ef:6e:
         32:f3:c7:e6:2c:c1:60:46:f1:50:42:b8:08:41:3c:51:21:49:
         b9:f8:12:c7:70:f2:a0:10:7c:2e:91:68:f7:05:00:c5:67:1c:
         a8:18:3d:d0:fc:3f:84:93:a8:3d:ef:19:9a:c6:f0:28:dc:b5:
         f5:c6:2c:66:d6:05:a5:4d:91:81:1d:e0:9d:23:4b:1b:6b:41:
         40:a5:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:05:45 2025 by rpki-client