Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67af5530-a444-39ba-b2d5-efa0381fe50c.roa
File:                     67af5530-a444-39ba-b2d5-efa0381fe50c.roa (raw, json)
Hash identifier:          fDJXeLqPoKyjMlPDpVWauh1SNwljvwerjEgQ1EIJWtE=
Subject key identifier:   1F:9D:18:BA:03:F3:FE:DE:D7:D1:EC:D1:C2:EE:D0:0C:6E:F8:16:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D63A0F927EB59EDF2AB900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67af5530-a444-39ba-b2d5-efa0381fe50c.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.138.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:3a:0f:92:7e:b5:9e:df:2a:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=48db9ebd-cc11-4475-aedb-ae8f0c946a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:a5:66:ac:40:75:5f:60:11:e9:df:6e:34:
                    2c:ad:75:53:31:17:ad:99:03:dd:b7:25:69:c8:b6:
                    a5:fd:26:42:37:b1:3f:25:13:30:d4:ed:cb:a9:57:
                    f6:96:52:d7:92:97:99:86:f8:3c:41:eb:59:4d:3c:
                    43:28:41:36:3c:d2:15:bd:d8:86:87:a4:fa:f2:15:
                    ce:57:90:2c:a4:50:b3:6c:cf:87:3a:8e:70:db:e8:
                    53:f6:9a:c2:c6:29:28:8a:c4:fa:34:65:a2:e4:cc:
                    c4:7e:ad:c0:8c:2a:6b:d9:b6:9e:a5:90:30:d0:a5:
                    17:84:f1:49:b5:66:53:d7:80:92:06:ae:f8:c9:97:
                    10:13:af:a2:c2:61:7e:13:01:0c:5e:0f:e1:12:e9:
                    db:46:46:c0:75:1c:b1:e4:d5:4b:08:7e:0c:a6:f0:
                    8d:58:9a:48:37:0d:1e:e6:15:4f:02:b9:3f:16:24:
                    25:ec:45:ab:50:a4:74:c1:5a:35:a4:f6:95:4a:ed:
                    46:16:49:e4:65:89:4d:98:58:a5:f5:fd:38:7c:b0:
                    67:7e:85:14:1f:fb:4c:7b:6c:ff:cd:ec:0d:d7:9d:
                    64:79:70:89:3b:26:e9:44:0f:75:5d:74:1f:dc:17:
                    18:fe:14:4e:6d:ac:3d:7d:ea:a2:bb:12:b8:c0:88:
                    00:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9D:18:BA:03:F3:FE:DE:D7:D1:EC:D1:C2:EE:D0:0C:6E:F8:16:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67af5530-a444-39ba-b2d5-efa0381fe50c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.138.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:43:d2:eb:8a:8d:e5:a2:39:a2:9b:b6:19:7e:e0:2d:6f:3d:
         5c:13:4a:a4:3b:72:65:12:e9:97:4a:31:46:f1:65:1c:4b:90:
         51:2c:3a:b7:a4:18:e3:b0:d3:80:56:04:a5:17:65:8e:0d:84:
         a9:9a:d6:04:a4:c7:8c:43:2b:75:4a:5b:9a:66:34:37:e3:2a:
         51:06:23:ba:23:93:13:c3:c0:37:59:a5:f9:59:9e:d0:f3:44:
         a7:68:4c:0e:1e:fe:c1:bb:0d:a1:c5:6e:1b:fb:8e:e0:de:17:
         f1:e0:30:d0:e3:a6:09:82:3c:e4:8a:4e:ea:18:2b:48:ce:b0:
         d9:df:a7:7c:b3:40:71:65:b3:77:83:46:ee:6c:bf:e6:a5:f2:
         a6:a7:54:44:d1:92:31:9a:e4:1a:1c:bc:be:66:9d:ae:58:02:
         6a:78:e4:e7:30:7a:cf:0a:56:1c:54:2c:37:8b:85:09:e6:36:
         0e:8c:12:e0:04:a4:02:70:ae:2d:e9:67:23:78:ca:88:f5:cf:
         e5:b0:ab:0d:16:cf:8f:87:8a:94:2c:21:af:fc:eb:cf:27:b5:
         44:b7:91:5c:16:b0:47:c3:78:df:99:da:ec:63:57:8f:82:cd:
         ba:04:eb:9e:14:3b:4b:24:bb:cc:4e:ab:ce:73:94:91:71:d4:
         73:0c:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:17:53 2024 by rpki-client on console-fra.rpki-client.org