Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/302ac87b-69a4-314b-95d5-087db4644322.roa
File:                     302ac87b-69a4-314b-95d5-087db4644322.roa (raw, json)
Hash identifier:          +2YWgIbCNzs4U7jTH48z4/RYBDVOHSajWDTOSky7VUA=
Subject key identifier:   5D:9A:B6:74:EB:E9:8F:DE:93:12:AD:45:CC:82:22:12:8B:8A:B9:4B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D63A3838D4B11C9595BFC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/302ac87b-69a4-314b-95d5-087db4644322.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.138.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:3a:38:38:d4:b1:1c:95:95:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=f0ad5644-8541-44cb-a5c8-e9d747a3ce50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:69:58:6b:fa:df:50:b7:97:ac:b5:ae:9d:
                    87:5e:b3:57:19:4e:85:f6:d3:52:3e:66:87:a5:70:
                    74:ef:85:14:0a:41:cf:8b:e7:5e:c0:1c:f7:a2:30:
                    8e:be:99:45:4f:0e:4c:fc:fb:52:fa:a6:88:6f:75:
                    44:91:44:52:a6:5b:e5:cf:3b:e1:8a:cb:c4:b0:3f:
                    ac:cd:91:a5:e1:b9:e5:00:1b:95:fc:fd:5d:ef:5c:
                    5a:06:f0:da:e4:9e:85:8b:7d:92:4d:c8:92:63:79:
                    d8:71:eb:fe:f6:a2:58:0e:87:22:69:0f:db:f4:61:
                    38:5f:28:03:40:cd:02:56:99:4f:57:d8:15:5d:15:
                    1f:9e:20:8d:54:5b:25:45:8c:7b:51:22:dc:86:7f:
                    e0:91:70:9d:3e:da:0d:3c:98:dc:87:7f:a7:e7:8e:
                    69:86:80:d3:b4:41:3b:66:d8:b4:8f:4c:63:4b:0f:
                    10:f2:c4:b4:fb:71:18:1f:a5:56:27:11:8e:5a:ee:
                    6c:f8:4e:81:cb:10:39:6d:52:c3:e6:77:94:f6:b0:
                    0c:46:47:6e:0d:ef:fa:70:ff:33:47:5c:da:f8:45:
                    8e:f6:28:82:0a:60:04:1a:34:62:d0:df:50:0d:ec:
                    82:48:09:30:f2:b3:2c:4f:29:f4:26:78:ad:84:1e:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:B6:74:EB:E9:8F:DE:93:12:AD:45:CC:82:22:12:8B:8A:B9:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/302ac87b-69a4-314b-95d5-087db4644322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.138.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:da:43:c4:86:a3:bb:14:a8:32:41:ec:c7:ce:af:d5:1c:37:
         b8:34:55:90:98:83:80:d9:94:a0:d8:f5:6c:62:20:fb:29:7a:
         90:4f:37:3f:4d:e6:ef:59:f0:23:69:65:f9:9c:74:bf:b6:5f:
         e1:d0:27:71:a9:b1:8c:6a:f4:3d:96:a4:02:bf:9e:46:f1:3a:
         b2:31:5e:e5:26:38:8c:a1:7c:24:f5:f7:53:b1:7b:1f:ed:7a:
         eb:55:07:d6:e2:1b:b3:4b:f3:e0:31:3c:18:8e:a4:12:b2:b7:
         d6:8c:70:c0:19:f8:53:88:0e:20:53:a0:9d:cf:14:46:0f:cf:
         78:b6:6e:d0:14:42:dc:79:94:bc:ea:14:93:b9:ce:ec:d9:97:
         33:60:64:77:88:34:c2:50:d4:a3:ed:4e:6f:4a:89:c9:c1:bb:
         10:ce:e9:ee:0b:8c:9c:e2:f0:f4:3a:d9:73:dd:91:26:99:83:
         9e:cd:02:1a:77:a8:20:8b:73:c8:55:86:a4:70:23:cb:28:ce:
         77:71:d3:50:f0:e2:81:3a:fc:fe:52:3a:7b:81:c9:bf:4d:83:
         7a:47:2c:22:32:b8:01:3f:65:e5:60:b8:3f:37:da:1d:05:fb:
         bf:f7:0d:69:02:11:7f:6d:7f:cb:73:2f:aa:89:82:ff:84:2f:
         8c:ae:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:36 2024 by rpki-client on console-fra.rpki-client.org