Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f39f114a-b32e-391c-a73f-3bdf431675b1.roa
File:                     f39f114a-b32e-391c-a73f-3bdf431675b1.roa (raw, json)
Hash identifier:          3xejhyUpUwqZwARrA4r9VxeAhQZU4gKqHyMO6iRfGss=
Subject key identifier:   EC:BC:6C:68:0D:F7:DF:AD:2E:36:B1:88:3F:3E:D1:7C:74:E5:BD:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218433E899535F86A234FAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f39f114a-b32e-391c-a73f-3bdf431675b1.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.187.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:33:e8:99:53:5f:86:a2:34:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=48d7b2dc-ef15-4acb-be4c-331e95d83201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:14:86:22:14:1c:44:ea:8c:b6:74:23:06:
                    6b:cf:35:3e:21:a6:c6:f8:5b:ad:e3:02:a3:b4:e4:
                    47:18:77:44:0d:14:ea:f5:d4:7f:65:32:5e:45:aa:
                    b8:7a:0c:96:52:31:3e:03:0d:4a:ec:fa:4d:d2:40:
                    3b:49:22:93:63:89:83:3e:04:1e:a4:e3:63:a4:57:
                    ef:2b:c9:a3:f4:2f:b9:6a:26:ef:d9:a9:40:d1:da:
                    be:74:52:c2:16:15:19:64:db:c1:de:d4:1f:2c:94:
                    36:17:12:54:49:b2:18:b8:f1:7e:4f:e5:a8:97:2b:
                    ec:30:b7:fd:a2:70:b6:51:e4:47:62:7c:64:ca:db:
                    2a:cd:bb:89:ba:00:4f:af:ca:68:74:e0:4c:20:c5:
                    4b:95:66:27:1b:34:01:9f:7e:b5:cd:dc:0c:ed:95:
                    b2:1d:08:aa:0a:7c:67:be:db:78:f3:c8:82:f5:e5:
                    b4:29:51:82:3d:d3:65:43:87:ed:dc:ae:5f:cd:c9:
                    d1:2a:62:6b:48:7d:b2:1c:d0:56:e6:3d:31:f9:54:
                    50:a1:c6:ad:ed:45:43:9d:38:c7:b2:86:9c:68:c6:
                    c6:63:e4:ee:20:d9:c1:ab:e4:64:0f:cd:37:de:66:
                    12:3e:53:9b:00:24:3c:09:1b:60:62:9a:af:b3:ef:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BC:6C:68:0D:F7:DF:AD:2E:36:B1:88:3F:3E:D1:7C:74:E5:BD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f39f114a-b32e-391c-a73f-3bdf431675b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.187.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:0b:26:9f:c1:bd:db:11:dc:92:23:0f:54:e0:09:f3:dc:
         ef:f2:d6:e8:22:15:c9:f7:ec:fb:ec:ca:4e:e5:78:78:b8:4f:
         73:2a:a4:c5:dd:46:ab:84:a3:fa:13:b7:04:96:3b:91:11:0c:
         69:4b:cc:43:95:e3:fa:57:c9:2d:78:47:33:b3:29:b8:18:0a:
         b1:95:eb:70:87:30:4e:d1:9b:50:a1:41:b6:36:be:37:22:b9:
         93:36:be:f2:10:0f:0a:e3:66:1c:0f:2e:37:1b:3c:8e:0d:8d:
         01:47:97:1b:cd:b0:29:08:e5:8f:fd:4e:a1:1e:f5:b3:2c:36:
         b8:64:5d:b1:18:d2:33:74:ca:08:dd:6b:15:df:8e:a7:f5:b7:
         ad:38:f7:25:be:e3:9b:76:7b:cc:87:7d:67:fb:2e:75:67:cd:
         8b:03:e5:9f:78:ae:bd:0f:a8:7b:11:2b:3e:4b:97:fc:ab:a5:
         ee:04:79:cf:c1:a2:e4:5b:af:d3:42:06:a0:28:49:b4:0a:59:
         ca:ce:d7:87:69:68:92:0f:3e:17:94:6b:9d:11:df:40:8b:ce:
         9c:da:0c:07:cd:14:e8:23:05:60:3f:67:01:6f:66:e8:41:97:
         a7:37:cb:45:16:ee:79:47:a8:94:e0:9f:5a:8d:a4:fc:30:82:
         59:ec:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:03 2025 by rpki-client