Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b957de84-f747-3fea-858a-de8b65a16b88.roa
File:                     b957de84-f747-3fea-858a-de8b65a16b88.roa (raw, json)
Hash identifier:          gGl77taprgUgY2axf2KyGHI121/pjwIqNJa08iHTjYY=
Subject key identifier:   B8:04:C2:B7:12:1E:F4:E7:EB:80:9F:C6:15:1D:2D:11:76:1E:CF:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D63C81ADD17B9702A8A100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b957de84-f747-3fea-858a-de8b65a16b88.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.177.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:3c:81:ad:d1:7b:97:02:a8:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=9a82ee9a-cf83-414c-9ee5-9164524e6bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:91:ca:8d:f4:90:0d:d0:4b:51:ca:8d:47:
                    80:17:17:9e:1e:7f:36:dc:50:5c:19:de:55:cd:e9:
                    3a:49:0d:b3:39:9a:03:ad:80:f4:fc:0e:0e:92:3d:
                    a6:e7:e4:e8:9b:52:34:d2:03:33:57:1f:24:9f:39:
                    c1:f6:fb:d5:47:a2:cb:2e:45:91:06:91:50:3f:d8:
                    96:46:68:33:7a:51:df:6c:e4:3b:9b:93:57:56:10:
                    68:a1:19:63:df:6a:2d:23:c1:b2:ce:36:26:90:4f:
                    23:09:bb:72:fd:70:fe:48:a5:19:b6:6e:66:b4:29:
                    0a:b4:70:34:fc:8f:58:e6:30:30:02:49:1c:d7:e9:
                    81:7b:8a:9c:be:c7:70:9d:d5:59:15:b6:fd:23:80:
                    d7:3a:2d:5d:c2:2d:72:b5:b1:ef:18:ca:93:11:84:
                    0b:4e:d2:c9:39:d7:b9:be:de:34:26:dc:79:0f:f5:
                    d4:9c:a8:ba:8a:02:4e:5f:2b:65:e3:31:61:49:d3:
                    b0:1f:54:5e:7a:c8:8f:dc:be:83:54:14:8c:b9:e6:
                    f8:72:65:86:8c:a0:9b:6f:68:db:de:1c:58:93:7e:
                    7c:1e:76:70:d8:bc:85:54:a1:29:24:58:58:89:83:
                    79:90:c2:cb:99:7d:80:44:85:55:85:59:e6:99:f1:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:04:C2:B7:12:1E:F4:E7:EB:80:9F:C6:15:1D:2D:11:76:1E:CF:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b957de84-f747-3fea-858a-de8b65a16b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.177.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:e9:c0:23:8a:fb:9a:2e:58:10:14:ab:fd:91:c3:79:e9:
         cf:ad:c3:45:5d:e3:1f:f3:52:09:6b:d1:71:61:d0:15:0e:9c:
         b1:53:41:32:15:b0:91:66:3b:a3:09:76:ba:75:08:c3:0a:4c:
         a7:60:5e:ee:43:23:28:38:cf:a9:0d:89:0e:81:c8:47:49:50:
         bb:74:6e:10:7f:8b:f3:a0:14:be:b5:d9:53:7f:2b:72:15:57:
         72:9b:cb:6c:05:11:3f:5e:a7:e8:3b:e5:8f:3a:9e:32:f2:d4:
         a6:cc:60:d8:bb:93:8a:3a:50:e2:52:7a:16:ac:7f:bb:f5:8d:
         9f:42:74:01:0d:a9:d0:d3:2e:73:41:8f:36:df:7a:a1:ca:6c:
         6e:4b:0a:fd:40:a2:67:2f:88:1f:dc:72:1c:8f:af:ad:9d:dd:
         a5:37:af:fa:29:a5:8a:6f:c8:47:fa:b9:7d:7a:39:87:6e:b2:
         a3:3b:eb:bf:13:7f:c5:51:2b:86:9e:13:70:83:b6:b8:db:a8:
         02:34:e3:87:2f:b7:2f:22:94:e6:a6:16:5a:26:40:ac:07:ab:
         1a:a6:9d:de:7b:e1:f7:bf:b4:43:68:0a:7a:8c:41:43:5a:c4:
         ea:b4:73:58:0b:e0:6c:3d:e9:86:80:21:82:4e:52:5f:eb:a1:
         49:92:16:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:46 2024 by rpki-client on console-ams.rpki-client.org