Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6459d10-83e1-3f14-a090-a7f78e613abb.roa
File:                     d6459d10-83e1-3f14-a090-a7f78e613abb.roa (raw, json)
Hash identifier:          QlxT25v1TSKRdVMbLPgbtrWtK5ej5gbImYqDiIn1TmU=
Subject key identifier:   7C:C8:BC:4A:65:C5:DE:08:E2:3C:5A:27:35:54:5A:C7:0D:6C:2D:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858496054201D11FBD84A83E29DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6459d10-83e1-3f14-a090-a7f78e613abb.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        97.227.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:20:1d:11:fb:d8:4a:83:e2:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=db5e4093-bf8c-4c0e-a386-2d7c152e746c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:95:77:fe:16:ca:34:ee:53:35:19:be:3f:
                    c1:a1:54:2b:19:b4:e7:3e:1b:8c:2c:77:d5:f3:30:
                    26:15:8c:59:31:9c:6c:1e:51:01:61:0a:45:ca:c1:
                    c8:a8:35:7a:ff:4a:cf:bc:fc:b5:32:60:fa:ed:11:
                    49:9d:8a:c8:cd:09:2c:7c:ba:24:bf:4d:19:df:e7:
                    f4:84:bc:3e:21:c9:05:33:20:62:3c:71:f8:ba:02:
                    84:26:88:f2:dc:c8:71:d2:82:35:63:fb:da:06:61:
                    99:5c:44:63:b0:33:c6:30:b9:e1:4b:ac:9d:88:78:
                    05:2e:10:ae:6b:d7:16:51:a5:15:a6:9c:30:23:83:
                    b6:8f:d8:40:68:6e:93:64:c1:df:ad:2f:6e:b1:81:
                    3a:93:10:91:b7:26:a1:09:7f:d7:4e:ba:38:44:3a:
                    60:1d:e0:bc:48:72:24:fa:11:89:e1:17:2f:78:57:
                    75:f0:03:b2:4b:7c:04:3a:fb:b3:d5:54:cb:42:1c:
                    81:56:ad:f3:d5:e1:b9:91:1e:c2:89:ff:3d:62:b2:
                    a6:68:15:de:67:71:76:df:37:67:0b:46:32:30:33:
                    33:77:b7:19:47:4c:85:42:2b:91:17:14:94:20:a0:
                    0f:cd:3a:e7:de:13:80:5b:db:26:c9:de:6e:cc:c0:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C8:BC:4A:65:C5:DE:08:E2:3C:5A:27:35:54:5A:C7:0D:6C:2D:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6459d10-83e1-3f14-a090-a7f78e613abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.227.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:5f:f5:62:dc:22:11:e3:77:cb:e2:b2:18:c2:fb:1c:ff:
         55:83:d3:fa:fd:3a:92:b2:c7:6b:54:ed:be:28:6f:e5:25:66:
         5a:a8:e8:ff:c9:e4:ee:b9:8c:e6:a3:96:d7:6c:a9:64:66:54:
         8a:f1:35:51:70:22:8d:d4:ef:8c:78:f3:88:81:16:32:ec:06:
         28:c5:1f:51:6c:f6:49:b5:eb:a3:9c:30:51:ef:de:50:b2:f2:
         d3:31:0c:00:4a:a3:1f:3b:35:53:37:57:81:8c:ae:f7:ef:bd:
         15:d1:ec:5a:dd:bc:7b:f1:c6:36:ca:67:84:ae:a0:e2:dd:fb:
         d6:70:6e:ad:be:9c:15:6e:b4:2d:ea:0c:db:a6:88:f2:f8:32:
         31:72:0d:11:39:d8:85:4f:7b:c0:bd:bf:79:37:59:91:64:52:
         03:d6:1f:21:e6:81:c4:40:63:da:c1:b6:26:aa:d9:14:e8:09:
         f2:a8:92:1f:af:ec:b7:28:1b:9e:d1:05:23:c4:a4:57:5f:69:
         3f:e1:7b:07:6b:ab:8c:5f:dc:21:e4:0e:30:db:b0:9f:db:8d:
         a4:2d:e9:38:25:4f:35:b5:e4:84:46:19:b5:d9:f1:be:f3:a5:
         60:3f:9a:ba:ec:b8:68:f3:b1:2c:72:41:f9:0a:d0:d9:af:8f:
         a4:d4:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:15 2025 by rpki-client