Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa
File:                     0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa (raw, json)
Hash identifier:          rKUwIKw2VtpX1c+eoMR5fJMYlGSFcpNhop+ULfe6TMI=
Subject key identifier:   DD:3C:F7:77:EA:9A:E4:98:17:27:99:51:15:AF:2A:2B:6A:7F:6D:F6
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F43285847AE36B34E5D5461DB0FB99DC0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     36103
IP address blocks:        97.75.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b3:4e:5d:54:61:db:0f:b9:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=1154d03d-63f7-46d1-af49-4febeb71e238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:36:4d:f7:48:40:45:12:fb:2c:88:ce:db:
                    f5:c8:ac:65:ec:68:10:dc:c0:39:6c:cc:e2:4c:24:
                    9a:29:ba:f7:ad:56:65:e8:04:cb:bc:8e:94:9a:16:
                    ab:67:f7:00:70:7b:78:f8:8c:a1:64:09:da:bf:09:
                    6b:80:61:a4:ed:6a:cf:7b:fa:9d:ce:75:64:12:fb:
                    dd:1a:53:d0:8a:7e:b9:78:26:42:ba:7c:6f:e8:06:
                    30:41:b5:f4:49:ad:23:b2:61:ac:f6:49:6f:90:9f:
                    ae:51:33:51:36:9e:67:d5:9c:d0:c1:1b:00:87:8e:
                    2b:50:12:ef:5c:4a:8a:09:18:a2:9b:a0:1a:59:0f:
                    7f:e8:9a:36:6e:c0:9d:9c:f2:56:d8:68:fb:a2:bf:
                    c9:31:12:c5:b3:9b:44:0f:7b:58:63:2a:a1:73:39:
                    5d:d6:e7:bc:b2:ec:cd:a4:24:76:fa:ae:91:dc:6a:
                    97:52:75:82:3d:d2:89:4a:04:03:8e:65:ad:cc:11:
                    19:70:6c:d0:6b:36:e4:24:a0:66:94:68:16:49:c0:
                    a6:3f:47:22:81:b6:47:ca:73:83:38:5c:4c:7e:53:
                    1a:d8:4f:03:d3:ed:84:c6:3a:88:d7:af:14:09:53:
                    e0:76:7a:03:c2:1f:5a:28:3d:d7:f6:2f:c4:a1:3c:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3C:F7:77:EA:9A:E4:98:17:27:99:51:15:AF:2A:2B:6A:7F:6D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/0a9be9ea-b7fd-3cee-aeb9-94c2c6860d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.75.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:86:d5:e0:d1:b4:97:a6:e9:49:82:de:93:5a:fb:19:2c:e0:
         37:14:aa:6c:0c:83:ca:74:9c:1b:78:28:33:c2:09:8f:8c:3e:
         12:72:1c:dc:ea:bb:05:8a:5d:e3:21:68:c7:04:79:82:6b:e9:
         a5:82:cd:96:f1:56:c1:69:1a:11:4b:b7:14:b2:91:bc:bc:b1:
         ae:f2:8f:a8:ff:36:a2:70:14:9c:2b:ef:e5:ff:b7:6b:50:be:
         9e:e7:b4:ee:e3:7c:1e:d9:9f:08:f8:1c:f8:65:e3:0d:42:ce:
         44:e2:b9:3e:45:15:e7:14:ca:1d:b4:ee:c2:7f:37:88:a1:58:
         10:4d:1d:5a:ba:f1:35:d6:26:38:3b:0c:5c:d5:61:9d:a1:9b:
         cf:88:45:05:d3:9f:3c:ea:b9:ae:df:a7:ae:9a:f7:5a:6e:f1:
         7f:00:46:e5:2b:46:02:c0:bc:6e:2e:b5:78:ce:bb:0d:af:b4:
         a9:6c:04:27:af:d3:8a:61:f8:a3:f9:bb:08:66:be:d4:9f:3b:
         16:07:80:2d:6b:10:fb:fa:c2:0b:26:d1:8c:36:20:43:71:b1:
         ce:20:d6:fe:cd:ac:cb:b2:80:b5:ba:48:ad:71:bf:b1:e2:9f:
         58:4f:8b:9d:63:fb:a9:9f:07:07:a6:3a:61:f9:44:81:d1:aa:
         79:7a:a9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org