Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceb03463-e8b8-357d-838d-cb321b97974c.roa
File:                     ceb03463-e8b8-357d-838d-cb321b97974c.roa (raw, json)
Hash identifier:          BZ9Ln5zVOeAKCM1i7s6Q4laQ7C0wM0KCJemwhvEv50E=
Subject key identifier:   67:12:E1:EC:5C:4B:6D:BB:6A:33:47:51:38:54:82:90:E1:F3:90:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D638CB604036BC39B78E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceb03463-e8b8-357d-838d-cb321b97974c.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.135.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:38:cb:60:40:36:bc:39:b7:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=06d994b5-2e6e-467e-989d-98f917c946f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:bf:8f:6c:5e:51:b4:24:3e:ab:bb:65:dc:
                    a6:b7:b0:ef:b0:9c:9a:d5:ed:a4:62:40:4b:d4:43:
                    6b:29:12:4a:6d:6e:6b:28:fa:1b:17:4a:20:b6:44:
                    0d:46:32:50:aa:c1:7a:9d:de:d3:33:40:84:d5:99:
                    d9:3c:2b:89:16:d6:6b:89:92:89:1f:a9:cb:76:2b:
                    34:86:87:de:9c:7b:2f:85:e6:62:09:51:9a:6b:3b:
                    6b:14:57:d4:dd:7a:0c:dd:0a:21:a4:84:5f:b3:24:
                    24:3c:cb:62:08:87:bd:a7:96:4c:ac:cc:56:2e:6c:
                    68:31:b1:23:b5:73:a5:77:0a:81:4d:51:25:36:9c:
                    c3:3f:ed:e3:e3:54:8c:71:f8:4c:22:b5:1e:54:13:
                    e4:19:80:2a:ce:04:52:f0:5f:50:9b:da:fc:b2:b8:
                    46:b2:25:f9:b8:f7:e2:3c:0b:f8:73:a5:cf:2b:f2:
                    7e:f8:7e:37:ea:d5:a2:df:7f:92:3a:32:15:78:50:
                    c6:41:77:23:1f:cb:03:6c:96:1f:9a:af:d5:9c:0f:
                    38:ab:6e:91:48:2f:29:bb:2e:b5:0a:17:ba:f3:40:
                    33:b3:d3:44:e9:4e:f8:b0:cf:66:65:64:53:6f:af:
                    af:d6:ff:84:98:3c:ab:25:98:22:b8:e8:ab:c5:91:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:E1:EC:5C:4B:6D:BB:6A:33:47:51:38:54:82:90:E1:F3:90:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceb03463-e8b8-357d-838d-cb321b97974c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.135.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:0e:ad:86:2e:57:34:f6:c1:13:08:c1:a6:ff:85:16:a8:4e:
         47:8f:fd:00:54:65:c9:2a:24:a3:76:4a:26:be:c3:92:cd:d5:
         f4:c1:4a:e1:3c:d5:84:bb:e0:49:61:73:95:93:8c:ac:b8:61:
         57:4a:c4:e1:2a:ed:5a:bf:94:f1:bd:ca:ff:0e:05:a4:f6:83:
         13:32:0c:a0:18:29:81:1b:92:44:09:19:c1:e3:92:1f:ee:f9:
         55:ce:5a:46:8b:5a:34:3e:29:34:6b:d8:58:96:0d:0d:66:9a:
         0a:f7:bc:fa:9b:b3:0e:57:36:c6:5c:4d:de:10:60:ed:3b:41:
         79:23:83:53:6e:69:e1:0a:36:ab:65:c5:e7:3b:80:ea:c0:b2:
         1f:13:76:d1:b4:c6:5c:0a:98:fc:c6:42:9a:74:7d:69:6d:5d:
         68:ac:c2:09:54:42:b7:97:fa:f5:4a:c9:2b:81:d3:93:86:47:
         00:51:88:2b:ed:eb:69:a4:d9:f8:13:a1:dc:47:44:d1:23:97:
         de:b5:be:95:63:23:36:bc:94:a4:a0:09:52:e0:61:b7:58:86:
         e2:5f:eb:89:9d:c0:ee:ad:f6:ff:98:a0:7a:68:5a:f8:4a:a8:
         d0:c3:3d:9a:ba:8f:79:ed:24:bb:d4:15:95:19:af:a9:93:e2:
         df:9b:d4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:20 2024 by rpki-client on console-fra.rpki-client.org