Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4f5a61-02dd-3a9c-8068-b0c56f98a216.roa
File:                     3b4f5a61-02dd-3a9c-8068-b0c56f98a216.roa (raw, json)
Hash identifier:          YhIBpomGHrEFmp1qYPv2B4+LJTZum692OaE4/64UfS0=
Subject key identifier:   1F:12:21:0A:E3:29:F6:7D:51:84:B6:35:41:4B:9C:F8:74:5D:7B:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBCFFD1B8912C71D369500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4f5a61-02dd-3a9c-8068-b0c56f98a216.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        97.212.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:cf:fd:1b:89:12:c7:1d:36:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=42964afe-a6ce-4822-a25f-b63834a59b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:c3:72:4d:e1:49:fe:62:98:57:67:2f:8a:
                    2c:5f:bb:fb:5d:59:80:1b:f1:32:0d:dd:35:00:4e:
                    cf:5f:0b:a5:00:d9:0e:a5:24:06:c1:56:fd:87:58:
                    14:d6:a8:c8:e1:b1:81:3a:22:92:dd:b6:3c:da:89:
                    3d:18:ca:f7:c6:f6:96:38:f4:41:e8:52:0d:07:21:
                    0a:e0:f3:f4:9d:5c:47:14:02:c0:34:53:da:10:55:
                    07:50:47:ee:a7:8b:29:ac:09:d4:d7:ab:27:51:9d:
                    a4:29:f6:23:e9:35:96:d2:8c:d1:70:00:6b:4d:c9:
                    78:6c:18:13:45:00:9b:09:c4:e7:e9:c1:4b:11:56:
                    a6:38:91:66:5a:83:87:24:9b:96:c7:9f:bb:64:d4:
                    af:da:8c:e8:a9:cb:ed:d9:ae:67:76:14:20:c7:76:
                    2b:98:c1:62:59:75:60:2c:ea:07:54:01:4a:ac:a5:
                    c1:68:41:7d:e3:92:60:2f:22:0c:27:d2:2d:cb:20:
                    ea:82:bd:97:33:47:19:3d:a8:0e:25:c6:c6:16:56:
                    20:e0:a9:58:2f:98:4d:db:e7:12:88:df:25:fc:2a:
                    3c:2c:a9:a4:4c:e6:5c:32:a1:3d:1a:d0:cf:73:00:
                    30:ea:f7:0a:24:fa:eb:45:e1:a0:de:4e:41:21:68:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:12:21:0A:E3:29:F6:7D:51:84:B6:35:41:4B:9C:F8:74:5D:7B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4f5a61-02dd-3a9c-8068-b0c56f98a216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.212.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:62:a6:ea:39:72:4e:2e:83:70:df:d1:33:a6:80:99:78:d1:
         b8:ab:67:6c:a2:af:8c:96:c6:38:df:bd:8c:8b:6c:f8:28:04:
         ce:43:77:a2:21:ed:54:33:94:16:de:c4:44:44:71:c5:c0:b5:
         5c:bb:36:0c:fe:bf:9e:43:2c:c6:1a:c1:11:37:ad:13:cf:65:
         36:d1:bc:4b:3c:2d:fd:ec:13:8f:ab:e7:91:ba:a8:e1:b0:46:
         0b:2e:f7:86:a6:1d:15:12:e1:45:9c:46:7b:62:50:fc:52:f6:
         14:7d:11:46:76:e9:f1:36:64:c7:fe:d4:24:ea:4d:1f:b4:1e:
         0f:e8:ab:86:ba:58:d8:e1:4e:21:4c:2b:3d:08:d6:75:1a:5e:
         61:ce:a7:1d:f1:9e:2f:23:a0:50:9f:cc:05:a8:1c:a6:69:9e:
         6a:14:66:eb:72:08:b3:4f:47:d8:a2:11:bb:d4:43:ee:b9:84:
         b2:b3:3c:5d:2b:ef:ce:e5:63:51:24:dc:54:48:5d:55:12:d4:
         24:72:d0:eb:34:69:0d:fc:8f:28:38:05:d3:1f:29:79:53:82:
         c4:80:f4:7f:b6:a7:cd:88:a0:8a:7c:b2:df:01:ea:71:dc:fe:
         ee:9a:cf:77:12:9a:1c:f9:03:42:1e:4e:61:27:bc:d5:65:19:
         4e:74:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:22:19 2024 by rpki-client on console-ams.rpki-client.org