Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/afa197ad-d1ca-3573-b8be-5651a7b00dc3.roa
File:                     afa197ad-d1ca-3573-b8be-5651a7b00dc3.roa (raw, json)
Hash identifier:          l9QlpFtozLz90EVizy9X8JemEqcEnKW5u4FWO5qEX/0=
Subject key identifier:   C3:97:75:06:4C:DB:2C:B2:F4:E3:54:5E:F7:32:48:59:E7:F8:42:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D63B53B838A2A2CD305170
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/afa197ad-d1ca-3573-b8be-5651a7b00dc3.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.150.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:3b:53:b8:38:a2:a2:cd:30:51:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=efa11474-4ae8-460c-90b5-3ee5330ea386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:eb:60:03:25:de:49:09:87:c9:b3:07:91:
                    6d:39:a8:b8:58:dd:73:7e:02:a2:89:fd:1d:96:97:
                    62:2f:27:3b:91:9a:a8:d3:3c:14:93:29:1d:df:63:
                    d1:88:e6:ac:ab:75:de:ff:e5:f4:8c:1b:1b:d7:c0:
                    a4:26:95:89:fe:70:39:c8:2c:bd:24:6c:71:39:ef:
                    f9:df:81:cb:71:2a:86:67:28:05:3a:00:b7:04:c0:
                    1a:b2:68:07:de:94:90:7e:4e:cc:96:31:61:c0:85:
                    83:6d:f7:1b:5e:a0:c2:0f:5d:ad:d8:82:f7:35:fc:
                    1e:d3:ab:69:45:64:94:93:3d:fb:dc:bd:87:e9:bf:
                    17:c3:1d:ef:33:c1:09:cd:49:58:d0:18:89:2a:98:
                    0c:ea:38:3a:54:91:1b:dc:22:7e:8a:81:a0:bc:ec:
                    34:27:05:30:77:8f:a2:22:62:a6:d7:f9:70:d1:b0:
                    0e:3b:88:b3:13:c0:71:49:5d:a7:0c:2c:d6:f7:4c:
                    84:29:53:88:d4:48:8d:eb:ea:6a:b7:e2:4e:52:b4:
                    3a:84:7d:d0:e7:63:bd:0f:fb:d3:04:dd:f9:e7:a8:
                    57:ca:02:90:af:4c:b3:0e:e4:d3:e4:2c:df:8d:5a:
                    d8:df:4c:24:16:87:93:6c:75:f0:d1:fb:43:2a:86:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:97:75:06:4C:DB:2C:B2:F4:E3:54:5E:F7:32:48:59:E7:F8:42:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/afa197ad-d1ca-3573-b8be-5651a7b00dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.150.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4e:bb:cf:7b:c6:77:90:0f:08:a0:5b:66:03:20:20:5e:ec:
         f2:0a:f1:25:44:71:8e:6a:3f:90:04:9b:90:cb:82:b2:2f:f3:
         37:04:4e:17:77:0e:10:7e:29:fa:fe:5d:56:c8:9a:f7:6a:d9:
         f6:de:f5:07:c1:ff:33:ea:db:17:e4:34:30:58:5b:15:7f:a2:
         43:79:50:e5:46:06:86:ae:62:ae:b6:a6:68:fe:fa:44:b6:49:
         a7:3d:8a:08:c7:7a:b0:91:72:1f:17:ba:60:fd:f7:e5:e4:6c:
         66:49:23:9c:48:0a:b6:38:3a:78:4a:8b:a4:41:f4:df:12:92:
         ea:2b:c6:08:f4:f6:f2:16:91:3e:11:78:dd:89:2a:75:d9:06:
         ce:8c:ea:43:be:d6:77:c7:73:65:b3:fb:bf:b5:95:1b:cd:5f:
         59:7a:f4:d2:34:b2:de:bd:04:b2:a0:68:9c:88:fe:b3:f5:f7:
         a2:46:44:8d:db:ab:6c:a7:e4:e7:29:ed:32:43:a2:ea:23:2e:
         96:0c:47:31:92:3c:05:4d:df:65:b2:d4:52:46:75:00:47:00:
         9f:f0:cc:6f:5e:8e:e3:9b:c1:a4:62:e0:16:50:75:84:b4:21:
         cf:19:bc:3f:79:03:06:9a:51:97:ef:88:a0:29:69:20:4a:9d:
         94:84:58:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:13 2024 by rpki-client on console-fra.rpki-client.org