Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6e6e82a4-4fa7-31bf-b8d7-fa11f11d9975.roa
File:                     6e6e82a4-4fa7-31bf-b8d7-fa11f11d9975.roa (raw, json)
Hash identifier:          RhTfI6qVwWKmvpFa9DAZrAU2/9FKg8E8Lnpoefbq/qg=
Subject key identifier:   CF:37:31:D7:97:BA:6C:F0:07:4C:1B:37:D2:5E:46:6F:D9:D4:67:36
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D191266EAB00BB45861000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6e6e82a4-4fa7-31bf-b8d7-fa11f11d9975.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        97.85.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:91:26:6e:ab:00:bb:45:86:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a858768b-f275-4c0b-bf00-4ee38577a8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ff:4f:2a:ed:7a:22:13:dc:3c:6e:52:f8:92:
                    0d:7d:b3:ae:41:86:62:09:3e:b8:af:54:34:3e:6d:
                    42:c8:6a:27:8c:e7:66:0b:dc:e0:7e:72:8f:a6:07:
                    06:07:82:c7:c2:54:0e:46:49:a6:76:7d:41:09:1f:
                    21:ca:24:55:26:e4:7b:7e:e0:81:54:9e:e4:ae:7c:
                    6f:56:b8:fa:b0:6f:9e:4b:c4:69:8a:7b:fb:87:39:
                    cf:93:b1:7b:a3:66:f0:db:57:96:c2:f7:f9:b8:fb:
                    c4:8e:87:77:75:96:31:c7:3c:b4:50:ec:04:33:16:
                    83:0f:92:d2:ff:b2:e3:ac:0e:86:83:3b:71:96:9e:
                    f0:1c:a0:11:3b:ec:f0:1e:fa:99:d3:28:05:ca:1f:
                    7d:72:9d:b4:e1:cb:46:21:3c:e6:52:69:cb:8a:d9:
                    00:f4:34:2f:60:7e:1d:e4:2b:d9:66:ce:da:2f:ab:
                    8e:d8:4b:35:7d:49:20:54:a0:8b:c4:e4:96:a9:d0:
                    94:32:ea:24:5d:de:53:9c:3c:2d:74:e6:4b:0e:b4:
                    3c:4f:03:a3:88:80:62:73:9d:d0:ef:b8:63:88:a1:
                    d6:a8:d6:70:49:01:95:da:c5:cb:45:1e:ce:d3:fa:
                    52:fa:cf:52:fe:49:4c:58:2a:15:8d:0f:a8:df:6d:
                    dd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:31:D7:97:BA:6C:F0:07:4C:1B:37:D2:5E:46:6F:D9:D4:67:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6e6e82a4-4fa7-31bf-b8d7-fa11f11d9975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.85.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:ee:03:1e:72:7e:a4:81:58:5b:26:2b:1c:4a:00:fb:7f:
         5d:ce:52:9c:fa:12:8b:4e:da:53:23:12:43:9b:81:94:45:ab:
         b4:67:3f:d3:13:17:3c:c9:14:c0:a5:d1:f3:58:59:bd:d8:38:
         4c:61:d6:66:69:09:6c:90:42:f9:2d:df:21:99:dc:b9:16:ba:
         2c:b3:aa:d9:18:be:f7:3d:23:09:10:00:51:fb:98:68:04:2b:
         8d:00:03:e9:b0:b8:9a:6a:76:67:9c:24:fb:0f:b2:43:96:59:
         df:e4:81:e4:a9:12:0d:fa:64:d6:2e:fd:6d:d9:22:f4:cf:03:
         a8:74:1e:7b:3f:01:45:de:2c:8c:74:19:38:81:6e:b5:44:a7:
         5d:eb:19:98:50:62:5f:14:4a:d3:e2:f0:e8:1b:8e:a1:fb:3c:
         e4:d1:94:00:52:1d:ab:f8:43:08:f3:9d:3a:96:04:08:33:7d:
         80:5f:c0:61:87:1f:e6:25:43:fa:d7:0f:2e:69:45:f3:c6:94:
         63:51:33:1b:4e:1e:e9:37:97:72:88:75:db:ac:af:ef:00:53:
         07:93:50:5e:3a:c2:cc:56:15:48:3a:ed:ef:7b:6a:72:44:d9:
         f2:53:d3:0b:b0:74:47:80:6c:34:ed:f2:fb:d0:fc:1d:d2:16:
         b2:cb:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:45:22 2025 by rpki-client