Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39024a7e-74e8-362c-a3e6-e16f619519f8.roa
File:                     39024a7e-74e8-362c-a3e6-e16f619519f8.roa (raw, json)
Hash identifier:          CVI/P51+eoXVz8GMdZxmwLyj32jkx8617nXLpfw/5Zc=
Subject key identifier:   D3:6D:6F:92:6C:3C:1D:9E:01:26:50:C0:42:7D:9C:C2:09:83:BE:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D639CD6D060783A907CFC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39024a7e-74e8-362c-a3e6-e16f619519f8.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.138.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:39:cd:6d:06:07:83:a9:07:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=58e28cb4-264b-47d8-a19c-cee703cffbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:60:d5:d2:c4:dc:1c:ce:d7:0c:9a:85:12:
                    d4:35:05:51:83:51:e6:6d:80:de:35:3c:d8:3d:18:
                    62:af:f5:d8:99:b6:a5:1d:90:70:4b:cb:6a:d9:01:
                    22:05:96:45:3e:f9:a2:ce:d3:92:68:d1:d7:36:62:
                    4d:f1:95:64:01:2e:20:3a:dd:a1:97:f9:22:6f:8c:
                    31:fd:ea:36:f6:4e:50:ee:f2:3f:3a:36:48:b9:f4:
                    0d:87:8f:f9:02:c1:4f:20:f7:e5:69:f6:b9:ca:10:
                    bd:a4:04:9d:df:d9:29:03:bc:b1:ea:a1:b7:44:9d:
                    eb:47:6d:4a:6b:e3:37:4a:20:1e:cd:dd:dd:bc:98:
                    78:66:f3:82:d5:5e:3a:79:ec:dc:e5:7c:2f:76:16:
                    d2:45:68:cc:74:fd:16:95:fe:83:42:07:f1:e3:a1:
                    53:eb:9a:1d:86:64:57:45:89:ce:2a:2b:0f:95:88:
                    e2:f1:d4:93:1d:bf:46:1e:02:96:ed:96:39:a9:63:
                    0e:d9:7a:1a:37:17:2a:c5:11:77:4c:7d:7f:38:97:
                    0b:4c:06:2f:fa:36:28:4f:d9:42:a4:0c:a3:d4:3b:
                    8c:7d:88:9d:ad:17:20:cb:38:d4:da:59:d6:51:54:
                    a1:ea:81:cc:65:7f:98:d9:f8:97:d4:ed:45:45:80:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6D:6F:92:6C:3C:1D:9E:01:26:50:C0:42:7D:9C:C2:09:83:BE:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39024a7e-74e8-362c-a3e6-e16f619519f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.138.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:74:47:18:79:35:11:f6:a7:22:1a:b6:27:f4:a5:a4:28:e0:
         9b:58:d0:ec:23:1d:a5:f9:88:60:27:c4:23:fe:71:19:15:b0:
         24:c2:45:d6:17:f0:1f:37:90:62:d7:8e:71:09:2b:01:6c:df:
         39:b7:23:f7:94:b8:14:76:af:57:3c:64:24:d9:87:f2:0b:6b:
         21:19:88:9b:36:a7:a2:67:be:f8:ce:91:4a:62:ba:2b:84:e3:
         7b:bc:c8:c1:ea:08:4f:36:4b:23:fd:3e:e2:7d:92:32:00:3b:
         1d:ec:3e:e5:d9:b2:9f:b0:e1:2e:3d:1a:93:77:46:88:56:d1:
         02:44:8a:dc:50:03:0f:c5:21:31:3e:cc:8b:f7:e9:80:28:fa:
         10:83:bc:17:26:0d:87:cc:d5:26:9c:89:92:ec:2e:69:9d:dd:
         6a:98:60:9b:00:45:89:c2:13:cc:20:34:c2:10:0d:0d:14:41:
         9c:57:74:93:c9:5d:47:b2:86:a2:ab:cc:e8:de:5c:e7:40:49:
         fa:dc:88:58:aa:54:7c:3c:4a:dc:06:73:0a:95:2a:c8:72:9b:
         15:48:6a:e5:11:01:43:80:2c:cf:ae:1e:62:99:df:6d:cf:21:
         54:9d:17:65:9c:3c:38:0d:53:be:75:39:0d:2e:05:c2:ed:1d:
         33:10:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:25 2024 by rpki-client on console-fra.rpki-client.org