Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfe3ac80-9ba2-3d8c-b9a7-2446dd6c0e85.roa
File:                     cfe3ac80-9ba2-3d8c-b9a7-2446dd6c0e85.roa (raw, json)
Hash identifier:          xKuMhCfuwXUkssRNSKq0NmGgcIj82AruCltr53ZMJ/g=
Subject key identifier:   D6:24:7C:9B:66:3D:E8:12:0F:88:FE:0F:EC:D6:97:34:68:EE:30:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584962604332A75D9343B2D2D700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfe3ac80-9ba2-3d8c-b9a7-2446dd6c0e85.roa
Signing time:             Tue 01 Apr 2025 18:37:00 +0000
ROA not before:           Tue 01 Apr 2025 18:37:00 +0000
ROA not after:            Mon 30 Jun 2025 18:37:00 +0000
asID:                     6167
IP address blocks:        97.205.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:62:60:43:32:a7:5d:93:43:b2:d2:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  1 18:37:00 2025 GMT
            Not After : Jun 30 18:37:00 2025 GMT
        Subject: CN=fd703be1-716a-4fc3-8e5f-38a9aad40a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:5e:f2:0a:72:a9:8f:82:56:a2:a0:32:2f:
                    8d:56:3e:68:79:9d:16:6a:fb:1d:b7:64:a1:70:03:
                    6c:48:9b:7c:60:1f:8b:f6:a1:92:7a:ee:b8:ba:c0:
                    8c:0f:0f:51:2d:87:6c:ac:0a:f4:c5:3a:96:4b:de:
                    1f:33:f3:19:a4:1a:2b:a2:33:cc:4b:52:8e:88:ab:
                    76:c4:75:6f:67:ac:bf:fc:aa:0f:33:00:41:3b:7c:
                    ae:95:29:c7:05:14:ac:73:df:fd:e8:c6:32:a9:75:
                    18:58:dc:f1:0a:4d:65:cb:94:85:60:06:83:04:ac:
                    d2:30:e7:11:17:fe:6c:39:d7:dc:cb:ae:29:10:97:
                    7d:cf:88:f5:03:e9:5f:9f:43:a7:da:8e:97:6e:f7:
                    2c:52:0e:d0:2d:ac:cd:38:d9:f1:1c:fb:27:23:0f:
                    5d:9f:09:f1:4a:ca:5a:d4:1f:2d:84:3f:8d:a6:e7:
                    9b:56:7a:c2:6a:d1:ec:a4:d1:05:88:29:4b:ac:22:
                    b5:69:19:79:de:d7:4e:a2:e3:66:ac:11:b6:41:a8:
                    39:d1:f7:49:a6:b9:91:f7:1d:bd:e9:a2:86:98:c7:
                    4a:14:90:27:15:8a:d5:80:c4:7b:41:df:ab:fd:f6:
                    b3:c4:a0:bd:a8:ef:ca:58:3d:86:ce:be:13:4c:fe:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:24:7C:9B:66:3D:E8:12:0F:88:FE:0F:EC:D6:97:34:68:EE:30:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfe3ac80-9ba2-3d8c-b9a7-2446dd6c0e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:10:92:04:80:ac:23:17:45:c8:f0:df:4a:e1:81:64:cd:31:
         f5:ca:62:4d:49:cf:11:c2:b6:79:51:92:d0:52:2a:3a:97:90:
         66:f7:91:7c:4f:0a:f6:4b:73:2a:87:8e:ce:a2:af:17:f1:71:
         fd:02:ee:86:98:b2:e4:6a:83:bc:df:b0:ad:59:25:8e:40:29:
         45:87:ec:dd:fb:96:f9:62:fc:13:a7:b0:be:59:2b:94:d9:87:
         c8:21:c2:0c:38:7c:d0:7e:af:52:97:45:a7:e1:8b:8e:e4:9b:
         8e:a6:af:38:31:c2:5a:b0:44:5e:47:98:9e:b8:28:97:ae:4b:
         43:ee:99:b3:44:50:11:68:28:0c:51:ea:62:07:f4:7d:55:ec:
         4d:11:ec:1e:c5:a3:22:dc:f3:57:d2:f1:96:ef:66:d8:45:e5:
         82:b1:94:8e:0e:71:22:bc:0c:b6:2f:a5:df:dc:09:38:21:10:
         2d:f0:a3:cf:2a:77:15:13:da:d5:ae:34:66:d8:75:42:84:c1:
         47:93:8f:cd:a3:23:ad:f4:d6:eb:b3:b7:d3:6f:f5:89:f8:8a:
         22:43:79:7d:83:8b:9b:ca:8a:75:9a:4a:d7:bd:6b:0e:36:04:
         8b:d6:cc:48:72:01:ca:b8:84:6c:0f:de:01:cc:56:da:ff:45:
         37:c2:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:34 2025 by rpki-client