Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5bac686-9016-351f-bebb-d30663e4a5c6.roa
File:                     e5bac686-9016-351f-bebb-d30663e4a5c6.roa (raw, json)
Hash identifier:          8rPQzb5IIrWWxgNIDk4dsxXWWRrHLFiLlA2x2tjKnKA=
Subject key identifier:   8B:15:E1:72:78:CF:50:DF:12:D3:E0:0E:7B:99:A5:0C:BC:E8:28:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAE00D11CDA801C61D1080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5bac686-9016-351f-bebb-d30663e4a5c6.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        97.154.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:e0:0d:11:cd:a8:01:c6:1d:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=acaf4915-8c09-4c49-869b-c1a6c94df0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:dc:88:22:3a:c0:2a:67:eb:7e:36:83:f7:
                    98:65:30:34:23:e4:84:3f:eb:b4:d2:54:4f:98:fc:
                    59:46:af:d3:66:56:fd:83:33:c5:0a:e9:e0:81:da:
                    4a:a8:aa:a9:6c:23:23:75:86:fb:b4:b2:fc:14:06:
                    d2:57:a1:cf:e5:74:13:ea:49:3a:73:6e:51:9b:9e:
                    ac:f5:03:90:86:bd:7a:5b:48:e3:50:27:39:06:39:
                    b3:5f:58:77:05:dc:13:28:5d:28:da:0b:fd:66:da:
                    83:8d:73:aa:53:b3:05:e8:5f:06:e9:1f:f7:a3:14:
                    ce:6f:59:69:50:18:1e:3b:3f:15:6c:b8:0f:e3:f2:
                    53:67:f1:7b:90:53:7f:c4:1d:4b:45:3a:20:b9:a3:
                    5d:cc:56:62:d1:f2:48:8a:46:c5:56:5d:ab:1f:4e:
                    d2:71:cc:d8:0e:01:6a:33:50:7d:6c:62:60:32:1b:
                    3d:2c:fc:c3:ab:91:a6:c2:61:b3:48:19:22:7d:5d:
                    73:6f:71:e6:b7:e4:81:65:e6:9e:7f:ec:77:fc:34:
                    c6:e8:d3:64:74:9b:c5:44:e5:ac:51:5b:6f:db:d3:
                    fa:ad:60:f6:06:f7:9e:75:46:7b:8a:be:bb:82:4b:
                    80:c0:65:f5:06:59:db:5d:26:51:eb:60:98:b9:35:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:E1:72:78:CF:50:DF:12:D3:E0:0E:7B:99:A5:0C:BC:E8:28:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5bac686-9016-351f-bebb-d30663e4a5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5d:e9:44:36:07:04:2e:31:d4:1f:6c:69:90:ba:15:36:52:
         e5:86:cb:57:19:ee:39:6a:5f:45:07:2a:8f:6b:f2:0d:ac:46:
         71:fc:03:1e:49:de:7c:73:f4:53:78:03:57:67:97:62:e7:2c:
         cb:07:62:4c:43:67:b8:d0:f3:dd:62:a8:cd:65:cd:fe:b0:6f:
         ad:66:bb:5f:6a:cf:36:ae:17:7f:fd:02:d6:12:09:7f:f7:23:
         fc:84:e3:8a:21:83:96:c7:16:83:a5:b7:d9:47:23:8f:94:e9:
         7d:24:1d:b3:62:e1:75:2a:b5:a6:7f:85:0f:4a:de:69:b6:36:
         5a:3a:85:56:1b:d6:e9:e3:0d:95:1e:63:27:41:10:ff:bc:84:
         f9:5f:cc:db:53:53:dc:1b:d2:8b:7c:ac:49:a7:48:85:cb:1e:
         d1:3e:af:25:25:d0:5e:ef:0b:1b:33:de:10:12:59:bb:31:d3:
         2f:0a:f5:a9:d2:2a:6e:fd:5b:31:81:4d:68:57:33:4d:c1:05:
         ca:0d:51:ac:7f:7d:1c:9e:ce:49:91:8f:0f:af:4e:85:ec:d4:
         cc:f6:09:68:7a:94:4c:db:12:fc:97:53:19:f0:ee:04:af:ed:
         32:44:c3:11:52:cd:50:20:47:03:7d:bb:36:50:6a:2f:80:f2:
         4a:7b:22:db
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoA2uANEc2oAcYdEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YWNhZjQ5MTUtOGMwOS00YzQ5LTg2OWItYzFhNmM5NGRmMGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszLciCI6wCpn6342g/eYZTA0I+SEP+u00lRP
mPxZRq/TZlb9gzPFCunggdpKqKqpbCMjdYb7tLL8FAbSV6HP5XQT6kk6c25Rm56s
9QOQhr16W0jjUCc5BjmzX1h3BdwTKF0o2gv9ZtqDjXOqU7MF6F8G6R/3oxTOb1lp
UBgeOz8VbLgP4/JTZ/F7kFN/xB1LRToguaNdzFZi0fJIikbFVl2rH07ScczYDgFq
M1B9bGJgMhs9LPzDq5GmwmGzSBkifV1zb3Hmt+SBZeaef+x3/DTG6NNkdJvFROWs
UVtv29P6rWD2BveedUZ7ir67gkuAwGX1BlnbXSZR62CYuTVizwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIsV4XJ4z1DfEtPgDnuZpQy86CgpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTViYWM2ODYtOTAxNi0z
NTFmLWJlYmItZDMwNjYzZTRhNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYZowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZV3pRDYHBC4x1B9saZC6FTZS5YbLVxnuOWpfRQcqj2vyDaxGcfwDHkne
fHP0U3gDV2eXYucsywdiTENnuNDz3WKozWXN/rBvrWa7X2rPNq4Xf/0C1hIJf/cj
/ITjiiGDlscWg6W32Ucjj5TpfSQds2LhdSq1pn+FD0reabY2WjqFVhvW6eMNlR5j
J0EQ/7yE+V/M21NT3BvSi3ysSadIhcse0T6vJSXQXu8LGzPeEBJZuzHTLwr1qdIq
bv1bMYFNaFczTcEFyg1RrH99HJ7OSZGPD69OhezUzPYJaHqUTNsS/JdTGfDuBK/t
MkTDEVLNUCBHA327NlBqL4DySnsi2w==
-----END CERTIFICATE-----
Generated at Sun Jun 1 03:48:02 2025 by rpki-client