Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b935f54-a6b7-3f61-8adb-bce43ad4b075.roa
File:                     2b935f54-a6b7-3f61-8adb-bce43ad4b075.roa (raw, json)
Hash identifier:          mB4SPPZM2NpASt/cIDRGNpSywvHppkGWo6zc0UihbwA=
Subject key identifier:   03:21:50:91:3C:2B:8D:E0:59:0A:BE:30:AC:1B:92:98:49:74:CF:AD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E2F875ADD7F24EC3DD40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b935f54-a6b7-3f61-8adb-bce43ad4b075.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        97.69.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e2:f8:75:ad:d7:f2:4e:c3:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=3d739765-6e52-4398-b672-00120e4497e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:30:b0:85:30:fc:6e:19:1b:97:6c:cb:d8:
                    3f:bd:de:d0:c6:5d:b6:14:3a:8f:7c:00:31:63:9e:
                    df:8d:27:ae:88:6d:a8:d4:54:a9:87:59:f5:93:9c:
                    18:99:8f:b7:de:12:dc:3d:c2:9c:84:be:ec:2d:5b:
                    f7:d9:48:35:53:cf:09:d5:5e:25:38:8d:ae:b4:1f:
                    2e:52:99:e6:b6:c6:8b:5f:ed:e9:5c:82:cc:ed:12:
                    91:10:44:68:20:34:6c:56:0d:44:5e:8f:22:4d:e3:
                    23:cb:df:d0:a2:6b:27:25:4d:00:ce:71:f4:1d:4c:
                    2f:d6:c6:25:58:c0:32:49:2c:64:2c:aa:23:1a:17:
                    c4:a1:55:c0:83:e6:ef:ac:32:e4:99:22:b3:58:a7:
                    ce:65:99:df:99:f1:4d:21:0c:53:92:72:ad:68:e8:
                    40:d3:87:d7:87:3e:8f:d6:a7:93:1c:a3:75:79:73:
                    97:84:d8:b5:4e:51:a5:71:a8:80:3e:e5:62:a2:46:
                    c8:f4:5b:c6:0d:28:f5:59:4e:14:c1:c5:b0:48:bf:
                    ee:20:ac:3e:5e:d0:34:e9:41:19:53:88:34:d1:d2:
                    3e:ea:f1:75:7c:f4:a5:fa:07:d7:8a:33:7a:d6:fe:
                    08:fc:e9:77:18:f6:3e:81:b2:66:9c:da:fe:48:59:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:21:50:91:3C:2B:8D:E0:59:0A:BE:30:AC:1B:92:98:49:74:CF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2b935f54-a6b7-3f61-8adb-bce43ad4b075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:a0:43:e8:59:ba:3a:7f:45:02:fb:d4:1e:f8:e8:c0:b1:
         38:8f:5f:bf:c0:25:ba:e9:30:98:e7:4f:b1:ca:03:be:23:81:
         99:b9:23:7f:f9:34:f2:d1:56:77:ea:6f:87:bb:5f:99:3f:8b:
         62:43:0f:c8:c7:0e:be:78:07:64:50:c4:33:61:0c:f4:17:21:
         e3:3a:ae:df:cd:28:b2:67:b4:c3:c8:d2:f9:11:45:b5:75:ce:
         bc:b4:e9:1c:35:2e:00:6f:eb:db:f1:e0:df:e9:d8:97:08:0c:
         96:36:91:76:5d:63:d5:b9:d7:93:42:8b:af:1b:c9:3c:0b:80:
         4c:c3:66:6c:04:e9:fc:cc:fa:21:de:fb:26:a4:f7:69:ed:98:
         88:10:d9:39:b9:8e:1f:83:4b:12:bf:0c:89:76:06:bb:c5:a7:
         e3:82:f5:47:fd:25:8b:b3:d7:53:d0:1b:d2:aa:bc:b6:92:8d:
         95:bc:c7:64:d5:bc:68:9a:f9:e2:11:ec:e7:e9:9f:1a:a3:2d:
         e9:30:37:77:9d:13:b3:50:71:a6:fe:92:73:c3:56:05:93:07:
         88:19:86:a1:70:18:31:ad:d6:89:85:bc:f5:ec:2b:7f:7d:7e:
         82:a1:90:04:14:69:d5:49:7a:b8:40:f5:26:55:0e:5e:ab:53:
         95:be:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org