Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3571c2d1-aaf6-3036-876f-0f8f5d5dc14a.roa
File:                     3571c2d1-aaf6-3036-876f-0f8f5d5dc14a.roa (raw, json)
Hash identifier:          JZWiQr1LMVnRA8MHaF97Gxwm1xXG7yxvJt4c6COppUA=
Subject key identifier:   5D:62:36:01:07:00:01:7D:61:EE:B5:9A:A4:B5:9A:DA:7E:59:F7:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBD07A609CF7E0BAAA1E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3571c2d1-aaf6-3036-876f-0f8f5d5dc14a.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        97.212.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:d0:7a:60:9c:f7:e0:ba:aa:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=f43dce3d-0264-4adf-8db6-1bee4fad02a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:03:6a:5d:af:4a:6b:0e:d1:56:ad:c2:28:
                    8e:d1:e0:11:a4:34:74:c0:b9:16:16:f0:9a:fd:0f:
                    de:33:45:54:23:1f:9f:d5:ec:a9:fc:b7:29:46:d4:
                    28:63:1f:8f:0c:c4:04:64:44:5b:55:f7:bc:69:f4:
                    37:ab:b9:1a:25:08:be:0c:b2:5e:a7:4e:9b:ed:09:
                    94:be:66:4f:96:9f:e3:b1:c3:50:82:4f:61:a5:96:
                    26:68:3f:92:f3:93:bb:29:73:6d:eb:11:6e:d6:83:
                    0a:36:ba:f4:b2:3a:ef:d5:f9:57:85:b7:14:87:07:
                    42:82:c2:6e:7d:60:a0:f0:fd:fe:b9:97:e9:46:3d:
                    8c:dd:9f:c3:38:2e:45:31:d1:6a:35:3d:8f:5a:9c:
                    76:c7:b8:42:df:f8:31:ff:85:8b:a0:10:0a:bc:43:
                    f3:c4:51:4c:f2:27:ab:16:7c:c6:0d:92:54:e6:6c:
                    ed:87:38:46:76:f0:d5:b1:9b:1a:02:15:00:5c:0a:
                    4f:c7:e4:6d:8a:40:9a:bd:d6:ea:78:eb:09:85:0f:
                    e7:29:a1:17:4b:b1:49:49:76:a2:c4:4b:41:5c:46:
                    0b:dd:83:eb:48:13:de:20:17:89:15:ec:fb:d0:ac:
                    1d:cc:da:2e:9a:c2:a2:61:5b:34:eb:2c:fe:4b:63:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:36:01:07:00:01:7D:61:EE:B5:9A:A4:B5:9A:DA:7E:59:F7:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3571c2d1-aaf6-3036-876f-0f8f5d5dc14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.212.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:af:7d:52:ab:15:15:8b:65:df:75:3b:5e:68:40:65:67:0e:
         03:23:97:e3:33:9d:85:36:f3:13:bc:01:28:18:98:cf:cd:a1:
         2d:85:f2:e0:89:78:1c:8f:60:2c:98:74:ab:3f:1e:c7:37:ae:
         a3:06:ed:6a:12:06:c1:23:5a:50:4e:62:ad:19:6a:25:dc:69:
         5a:39:ec:f3:57:df:34:a3:53:50:46:56:4e:b9:ae:a4:33:66:
         66:6c:e2:b3:da:de:d0:9a:4e:79:f7:ea:61:05:0f:6b:98:1c:
         e9:19:bc:f8:be:c7:c8:e2:6a:ef:37:0a:ea:c1:b5:3f:30:67:
         0d:80:67:ed:ac:63:57:14:de:ae:bd:71:a7:23:1b:e1:7b:52:
         25:19:a3:02:7d:53:93:e9:de:7a:3d:ed:6b:54:e2:b0:fd:04:
         82:9a:3f:39:58:f1:11:db:52:21:01:a2:dc:5f:59:0a:74:e5:
         cc:d0:38:99:0a:fb:f6:02:8b:c3:62:9a:dd:e0:c5:1d:e5:b9:
         3b:2e:76:18:64:38:50:ae:b0:23:11:ba:49:87:38:e7:61:1e:
         71:ae:21:dc:12:a7:a3:97:75:0d:50:fc:71:6e:b8:44:98:60:
         a9:4b:58:02:84:f1:37:5b:38:64:47:5a:68:62:67:d3:75:30:
         d8:e5:e3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:38 2024 by rpki-client on console-fra.rpki-client.org