Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a768f429-e2a8-3c7d-9808-be0382121ad4.roa
File:                     a768f429-e2a8-3c7d-9808-be0382121ad4.roa (raw, json)
Hash identifier:          jb84W+FyZKJzFNeTIKBiyu6+RjEW62wJuyA5nwoCUy8=
Subject key identifier:   41:42:D0:1F:7A:79:2B:03:B8:89:23:B0:52:AC:1B:2B:84:41:50:C5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D6337CDD64E86699EF6B70
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a768f429-e2a8-3c7d-9808-be0382121ad4.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.37.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:33:7c:dd:64:e8:66:99:ef:6b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=5f65f088-1526-4a50-a4db-058e53eabf29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:db:63:63:42:8f:66:c5:3d:1d:10:63:23:
                    0b:b1:aa:bc:3f:d8:15:d7:1e:19:32:16:a7:28:10:
                    3f:a7:9b:0c:74:82:eb:07:45:6c:03:28:ef:c6:f5:
                    5f:b2:72:1a:72:0a:b8:b1:9c:01:05:b4:ef:c6:4d:
                    4f:94:ab:b6:1f:eb:c3:9a:ca:26:f9:29:de:82:34:
                    e4:6d:da:0a:8a:b8:29:86:be:5c:82:76:a2:3b:6b:
                    04:c6:fb:54:33:b8:b9:b3:a5:1b:fa:fa:ee:1b:23:
                    75:2e:d2:3f:8d:3e:06:dd:ac:3c:8f:12:90:1d:52:
                    ec:5a:38:5f:7d:13:be:8a:82:4c:ff:67:cd:9b:e2:
                    26:35:a3:6c:90:4b:fc:42:72:47:9e:1c:d4:57:76:
                    c3:3f:2d:0e:37:40:3f:d0:48:bf:84:52:8d:53:4c:
                    69:e0:69:24:ae:fe:c3:82:a5:be:7f:f9:82:4b:0e:
                    33:7d:9c:13:e5:9d:62:b7:44:03:31:ca:0a:51:c9:
                    7b:bd:96:6f:a8:8c:f3:8a:0a:43:01:44:86:b5:6e:
                    c5:76:2e:e2:7c:ff:e8:33:2d:55:bc:bc:7b:62:04:
                    e1:0f:85:29:ab:55:74:de:86:f0:b3:16:ee:23:8e:
                    f3:41:c6:d6:ea:e0:cb:58:17:c3:ca:5f:10:b4:3b:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:42:D0:1F:7A:79:2B:03:B8:89:23:B0:52:AC:1B:2B:84:41:50:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a768f429-e2a8-3c7d-9808-be0382121ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.37.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:67:7e:27:8f:d6:8a:10:d2:f4:29:77:44:2e:e8:e8:f7:5e:
         55:9c:f6:21:2c:be:9d:bf:cd:96:67:bc:83:68:e7:4d:b6:bf:
         93:90:bd:36:a2:4f:4f:e6:a5:50:64:e5:df:61:b6:9e:91:2c:
         ad:0b:ed:7c:e6:aa:f9:3b:68:a3:26:43:f1:73:7a:47:7b:7c:
         b1:58:76:d5:de:5b:19:71:97:c3:d5:ea:01:ca:9d:e0:0f:f7:
         92:c9:d4:35:0a:d4:e1:97:01:05:24:07:22:59:93:3c:53:5a:
         db:e8:fd:8f:a7:4a:2d:33:1c:19:4d:3f:94:ff:83:cc:db:cf:
         f2:2f:35:94:9e:78:62:ed:75:c2:cd:14:48:8c:2c:7d:4c:c7:
         77:a1:d4:33:ec:f0:62:31:6e:38:e1:da:25:e1:6d:14:17:d5:
         e6:28:76:52:72:ae:6c:b9:77:e1:32:d2:fc:bb:c5:c7:35:9f:
         9f:e9:f1:d2:2f:49:5a:dd:07:ea:19:d4:16:62:35:ba:ff:84:
         78:26:09:0d:48:ae:2b:be:f3:17:d8:69:ce:cf:9a:84:8e:4c:
         94:6d:0d:db:e0:12:17:ac:03:68:c0:05:05:33:be:95:90:bf:
         87:5d:6d:48:c1:cd:a6:4e:81:a2:4a:25:52:ed:e5:60:09:3f:
         38:68:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:42 2024 by rpki-client on console-ams.rpki-client.org