Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2bb4e842-a828-3b6e-9c6e-457c07742b13.roa
File:                     2bb4e842-a828-3b6e-9c6e-457c07742b13.roa (raw, json)
Hash identifier:          BQxSz2mytHKfcdXIDuSyENu1VfhMIAEBkBVR2DbsZi4=
Subject key identifier:   F0:AD:EE:77:32:02:CC:DB:F4:94:45:63:5D:71:90:D2:1F:CD:0A:7D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D2117688D66EA2D8503B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2bb4e842-a828-3b6e-9c6e-457c07742b13.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        97.90.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d2:11:76:88:d6:6e:a2:d8:50:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=c7adb732-85c7-49ce-bdff-e8d26a213212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:1a:7b:3b:93:7d:56:fd:f1:65:8a:2a:45:
                    fb:f1:c8:cc:aa:63:aa:10:c3:e8:a4:f9:ab:ba:57:
                    17:18:58:5f:4e:b9:ac:a7:08:a8:70:49:a5:6f:98:
                    68:77:e3:3b:21:be:60:be:95:f1:99:8e:8e:25:1b:
                    cd:21:bb:90:be:4b:bb:e6:d0:9d:02:f1:30:c8:ca:
                    c7:e0:6f:38:97:88:e4:52:88:3a:da:39:dc:68:93:
                    5f:4d:47:8e:a2:dd:46:1c:e3:bc:82:e3:6d:d2:94:
                    78:6e:44:53:46:78:94:6c:b4:42:65:08:3d:e9:b8:
                    41:c9:0b:84:19:be:30:d5:1a:62:03:c9:ed:32:b7:
                    9b:3e:0a:99:79:ce:e8:bb:55:cd:3e:6c:b8:eb:83:
                    79:4a:d4:66:87:9a:04:36:ff:b6:be:27:65:d6:73:
                    b7:fb:89:c9:61:b4:b6:ba:7c:49:42:27:ac:66:cf:
                    d4:18:fe:08:96:dd:2d:3e:12:88:42:a2:98:e3:75:
                    8e:32:5a:66:b3:b7:5a:8f:5d:14:93:98:a3:8b:14:
                    8c:18:6c:5b:4a:be:39:73:0b:aa:41:4a:41:77:d2:
                    3a:82:cf:12:60:8a:7c:41:63:96:cb:ea:87:3d:eb:
                    df:cf:1f:bc:04:7e:ff:1e:8d:0c:6d:bb:83:3d:04:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AD:EE:77:32:02:CC:DB:F4:94:45:63:5D:71:90:D2:1F:CD:0A:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2bb4e842-a828-3b6e-9c6e-457c07742b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.90.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b7:b9:41:b7:b9:48:47:52:8d:e1:67:ab:a4:2e:fa:54:b6:
         2d:a8:aa:9b:be:1b:56:ba:16:77:a0:65:0a:4f:e1:66:ac:37:
         5d:38:0f:ab:a1:ce:24:be:bc:e2:8c:cb:39:86:69:e8:f2:e3:
         28:18:31:d6:cd:36:6f:18:24:30:b6:36:12:4d:33:36:5a:55:
         58:de:ed:51:82:a9:ab:0f:05:7c:b6:21:9c:cb:0f:b2:be:31:
         23:dd:c3:e7:c5:53:22:3e:49:49:96:02:a6:35:c4:6f:5b:09:
         ca:ac:e7:f6:82:78:5c:c0:a5:de:ae:67:66:36:8b:bc:c3:08:
         a5:9b:63:6e:3e:fd:45:30:6a:e2:d7:69:ed:1d:6a:81:83:26:
         63:98:f3:f0:39:1e:9e:eb:cf:0f:9e:d0:f3:94:2a:aa:aa:a5:
         11:d4:35:86:23:d6:90:e1:f9:be:e5:c9:0e:a8:84:f6:a9:b6:
         d2:17:5a:43:a1:ea:47:35:4e:ed:f1:56:f1:db:b7:38:ef:f9:
         66:bd:4f:7f:df:b9:bd:d9:35:c9:a0:d2:40:f0:b7:6c:39:3e:
         dc:20:18:77:71:1f:36:1f:2f:12:ae:28:89:e1:49:ef:3a:36:
         e3:00:c0:f6:bf:48:cf:0a:bf:e0:e9:f2:d4:8f:66:23:28:40:
         7b:b8:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:40 2025 by rpki-client