Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1607b737-f2bd-3dd0-8bb5-fa377be6ce63.roa
File:                     1607b737-f2bd-3dd0-8bb5-fa377be6ce63.roa (raw, json)
Hash identifier:          Ffe+tkdvftvfFQUKGLcQYenBzNlPKqQvRbI15wyZFsg=
Subject key identifier:   6C:92:81:96:3A:15:F2:49:DD:37:D5:58:09:1A:FD:1B:D4:18:58:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D64A23B78EA910C0F337B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1607b737-f2bd-3dd0-8bb5-fa377be6ce63.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.0.0.0/10 maxlen: 10

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:4a:23:b7:8e:a9:10:c0:f3:37:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=673de5f2-c451-4eef-8108-0cbbff7cbb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:4d:99:b3:37:11:ed:b4:73:9e:49:8a:a7:
                    ca:4a:4b:d1:b9:50:cb:a1:21:3a:21:56:1c:2a:f3:
                    44:0c:80:14:a6:27:e4:b7:52:fa:bc:4d:5f:4a:65:
                    f0:b2:86:e5:ae:f1:49:9c:9d:e3:ff:81:f1:98:87:
                    ff:c5:cc:3e:2e:82:13:cc:02:45:e6:18:6d:6b:f0:
                    2d:4c:3c:c6:45:dd:82:c4:88:23:12:bf:ac:80:37:
                    3c:6a:34:23:74:39:fb:6e:68:6f:b0:d7:60:86:bf:
                    d7:75:7d:e4:1b:fd:ad:7d:ce:6a:f3:82:fd:27:d6:
                    49:e6:41:a1:26:38:fd:97:7a:01:fc:29:68:f4:4c:
                    fb:e8:ae:25:6b:46:26:ae:e3:a7:a9:09:9f:69:7d:
                    da:74:55:2f:00:fd:3f:db:44:97:3a:04:07:c8:aa:
                    88:36:ac:76:6c:31:d4:98:83:68:fd:d6:21:67:a7:
                    48:44:13:61:26:11:1e:9e:94:f3:42:53:ef:06:7e:
                    c4:ab:99:af:c7:b8:56:b7:bc:d8:68:db:f6:ab:94:
                    52:11:6b:f2:19:88:ef:2e:ca:0e:36:20:8f:c4:b9:
                    9b:13:4f:27:fa:59:46:0b:e2:db:03:94:c3:a3:89:
                    af:59:82:1d:ff:f4:71:93:53:71:0b:49:4a:df:17:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:92:81:96:3A:15:F2:49:DD:37:D5:58:09:1A:FD:1B:D4:18:58:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1607b737-f2bd-3dd0-8bb5-fa377be6ce63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.0.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:7e:3e:c0:79:b5:ec:87:e9:55:21:1c:4d:05:3c:9f:8c:
         40:0a:cc:b5:6d:50:a3:b6:d8:44:c4:d3:09:b3:46:f9:ed:95:
         38:aa:00:d2:01:f3:5a:84:cd:c3:08:d1:2c:06:de:98:70:2b:
         b5:2a:10:53:6a:48:80:88:73:16:bc:60:34:e4:a4:e0:f4:1f:
         a8:85:7c:04:0e:e4:a0:fb:00:a5:b2:84:f7:88:c7:da:0f:cd:
         46:87:54:02:d1:af:a8:20:25:80:ee:21:06:36:e9:f3:84:33:
         ec:17:cc:1e:f8:c9:c0:4c:65:d7:b3:15:eb:20:2b:fd:40:ad:
         82:ca:1f:62:df:a0:74:8f:18:52:e6:dd:20:b5:a9:23:77:e1:
         0c:57:d2:85:3f:90:4b:de:9b:86:30:ed:7a:12:c0:9a:62:8f:
         62:8c:9f:89:dd:eb:63:28:3c:f9:4b:1c:75:96:98:86:f5:96:
         eb:44:4e:8b:31:79:c6:38:2d:75:64:5d:3e:c0:7d:e3:d4:49:
         29:7d:34:25:3e:77:a9:9b:87:95:e4:12:81:43:9d:33:f4:9a:
         cc:c7:fe:d1:78:72:8b:08:db:c9:6f:0a:ab:ac:31:ff:1b:25:
         56:cc:17:92:b3:d6:fb:0f:7b:0d:8e:11:58:5d:00:3f:6f:c1:
         2d:87:b0:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdi1kojt46pEMDzN7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
NjczZGU1ZjItYzQ1MS00ZWVmLTgxMDgtMGNiYmZmN2NiYjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoBNmbM3Ee20c55JiqfKSkvRuVDLoSE6IVYc
KvNEDIAUpifkt1L6vE1fSmXwsoblrvFJnJ3j/4HxmIf/xcw+LoITzAJF5hhta/At
TDzGRd2CxIgjEr+sgDc8ajQjdDn7bmhvsNdghr/XdX3kG/2tfc5q84L9J9ZJ5kGh
Jjj9l3oB/Clo9Ez76K4la0YmruOnqQmfaX3adFUvAP0/20SXOgQHyKqINqx2bDHU
mINo/dYhZ6dIRBNhJhEenpTzQlPvBn7Eq5mvx7hWt7zYaNv2q5RSEWvyGYjvLsoO
NiCPxLmbE08n+llGC+LbA5TDo4mvWYId//Rxk1NxC0lK3xen/wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGySgZY6FfJJ3TfVWAka/RvUGFhFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTYwN2I3MzctZjJiZC0z
ZGQwLThiYjUtZmEzNzdiZTZjZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGYQAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgPd+PsB5teyH6VUhHE0FPJ+MQArMtW1Qo7bYRMTTCbNG+e2VOKoA0gHz
WoTNwwjRLAbemHArtSoQU2pIgIhzFrxgNOSk4PQfqIV8BA7koPsApbKE94jH2g/N
RodUAtGvqCAlgO4hBjbp84Qz7BfMHvjJwExl17MV6yAr/UCtgsofYt+gdI8YUubd
ILWpI3fhDFfShT+QS96bhjDtehLAmmKPYoyfid3rYyg8+UscdZaYhvWW60ROizF5
xjgtdWRdPsB949RJKX00JT53qZuHleQSgUOdM/SazMf+0XhyiwjbyW8Kq6wx/xsl
VswXkrPW+w97DY4RWF0AP2/BLYewaA==
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:05 2024 by rpki-client on console-ams.rpki-client.org