Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/80dd9aeb-8efd-38e6-b976-73d3e2aabd04.roa
File:                     80dd9aeb-8efd-38e6-b976-73d3e2aabd04.roa (raw, json)
Hash identifier:          D0h/Vvbw+owotUu9LOOfyhskuk8c9JESoFkBs9VCFwI=
Subject key identifier:   BF:EF:3E:9F:F8:8E:94:35:A9:C7:4B:AF:18:5D:A3:CE:0F:36:7F:CE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D192A7DAE307460CA78A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/80dd9aeb-8efd-38e6-b976-73d3e2aabd04.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        97.89.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:92:a7:da:e3:07:46:0c:a7:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=6748f958-f09e-4bc4-a07b-ab880cb7b425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:5f:bd:da:6f:f2:99:2a:a4:6d:38:78:14:
                    c2:aa:7b:f2:c5:3e:82:df:f0:a9:99:7b:b0:dc:69:
                    15:73:62:1c:21:52:0b:b8:0e:49:d1:5f:99:55:b6:
                    97:bc:bf:a4:3c:ce:03:55:b0:4b:5e:ba:b9:cf:da:
                    df:aa:cf:01:70:1a:5e:e8:71:88:7c:e5:0e:3d:10:
                    50:8d:3d:24:04:cc:5e:a5:88:51:41:9d:ad:b2:08:
                    00:9c:a6:db:3d:12:5a:3f:82:05:c7:27:d8:11:3e:
                    3f:37:9d:1f:99:f0:3c:ab:26:6e:82:8d:af:47:b4:
                    c1:ae:e1:02:07:a8:b6:33:c5:63:48:58:68:29:f5:
                    1e:fc:97:ca:31:8f:d1:ac:67:fa:ef:e6:c6:1f:22:
                    d6:ca:c6:33:a3:3b:fd:ce:30:c9:f4:47:7d:91:43:
                    90:87:ce:31:da:8a:1d:03:90:4b:ce:76:8f:98:29:
                    77:a5:9d:e0:3a:bc:a5:5d:eb:4e:56:27:80:b5:2a:
                    0a:ba:39:4d:60:ca:ed:63:f0:39:4e:6f:e4:90:74:
                    f6:00:42:e1:30:ef:b4:4c:61:95:f5:51:36:29:18:
                    dc:66:f1:6a:35:dd:59:80:d0:11:4a:e5:b6:c5:30:
                    b6:21:7f:21:a1:c3:8c:b4:a3:48:d0:a1:8e:75:d6:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EF:3E:9F:F8:8E:94:35:A9:C7:4B:AF:18:5D:A3:CE:0F:36:7F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/80dd9aeb-8efd-38e6-b976-73d3e2aabd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.89.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:4f:43:01:4a:d6:bd:52:9a:cf:a3:37:43:ff:99:7f:f0:
         28:22:e2:34:c4:7c:11:73:21:f3:83:60:69:1f:14:4b:34:dd:
         8c:16:e6:40:74:60:4c:b8:20:2a:67:f6:90:a6:51:26:05:e6:
         f5:b9:7d:46:9f:9e:aa:f4:07:ef:d8:30:97:ff:a0:59:3b:5f:
         e0:50:ce:0d:cb:a3:5e:ec:c1:bb:b8:b5:0f:3e:d7:e4:be:bc:
         3d:47:82:0e:69:72:8e:86:9f:45:74:b3:26:9d:5e:29:c5:67:
         d4:12:61:5e:3b:6f:f5:2d:96:fe:c9:04:9b:f1:d7:df:e2:80:
         81:d8:a1:bb:b3:a0:49:ec:e0:a2:fb:c6:ab:ba:52:7e:c1:02:
         8c:ae:bf:80:6e:0d:cc:d1:7b:ce:69:89:0f:4f:39:8e:00:d6:
         84:57:31:a9:8c:f4:0e:73:51:b0:31:5b:de:6e:c3:95:09:65:
         9f:4c:f2:44:70:64:60:9c:1a:1b:e7:fe:1a:7a:b3:dc:32:d4:
         52:8d:56:aa:c5:c0:71:25:fa:a0:95:19:f0:67:ca:3f:d6:ad:
         de:d8:9f:64:25:7b:a1:1c:a9:2e:fd:73:af:43:3e:43:f4:b2:
         f3:e9:6e:e8:f0:46:26:92:0a:64:b9:cf:be:d0:40:01:99:97:
         a9:f4:3f:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0ZKn2uMHRgynigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
Njc0OGY5NTgtZjA5ZS00YmM0LWEwN2ItYWI4ODBjYjdiNDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrFfvdpv8pkqpG04eBTCqnvyxT6C3/CpmXuw
3GkVc2IcIVILuA5J0V+ZVbaXvL+kPM4DVbBLXrq5z9rfqs8BcBpe6HGIfOUOPRBQ
jT0kBMxepYhRQZ2tsggAnKbbPRJaP4IFxyfYET4/N50fmfA8qyZugo2vR7TBruEC
B6i2M8VjSFhoKfUe/JfKMY/RrGf67+bGHyLWysYzozv9zjDJ9Ed9kUOQh84x2ood
A5BLznaPmCl3pZ3gOrylXetOVieAtSoKujlNYMrtY/A5Tm/kkHT2AELhMO+0TGGV
9VE2KRjcZvFqNd1ZgNARSuW2xTC2IX8hocOMtKNI0KGOddYdDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/vPp/4jpQ1qcdLrxhdo84PNn/OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODBkZDlhZWItOGVmZC0z
OGU2LWI5NzYtNzNkM2UyYWFiZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYVnAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyzT0MBSta9UprPozdD/5l/8Cgi4jTEfBFzIfODYGkfFEs03YwW5kB0
YEy4ICpn9pCmUSYF5vW5fUafnqr0B+/YMJf/oFk7X+BQzg3Lo17swbu4tQ8+1+S+
vD1Hgg5pco6Gn0V0syadXinFZ9QSYV47b/Utlv7JBJvx19/igIHYobuzoEns4KL7
xqu6Un7BAoyuv4BuDczRe85piQ9POY4A1oRXMamM9A5zUbAxW95uw5UJZZ9M8kRw
ZGCcGhvn/hp6s9wy1FKNVqrFwHEl+qCVGfBnyj/Wrd7Yn2Qle6EcqS79c69DPkP0
svPpbujwRiaSCmS5z77QQAGZl6n0P4E=
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:22:58 2025 by rpki-client