Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceeb7ea0-0f3c-3540-9a08-2f78b71a4688.roa
File:                     ceeb7ea0-0f3c-3540-9a08-2f78b71a4688.roa (raw, json)
Hash identifier:          PDHUk623W3TNd370lueinh/hz8y8VHowMkIP2UYOivI=
Subject key identifier:   0C:7D:0D:17:94:6B:F6:CB:93:72:08:20:D4:4A:9E:B2:79:51:1C:8E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D6349CBFD245AE7321A180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceeb7ea0-0f3c-3540-9a08-2f78b71a4688.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.37.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:34:9c:bf:d2:45:ae:73:21:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=d1aa922c-0a96-411e-a44b-e9edfd4f51b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:4d:0a:0f:d3:7e:a8:3d:10:f0:c6:78:58:
                    35:31:fe:0d:24:90:c8:87:8f:51:1e:9f:69:3c:04:
                    61:6b:07:51:b8:64:be:dd:c7:b8:b3:c9:b7:49:ec:
                    17:9c:9a:12:a8:b7:a4:ba:be:8b:08:e3:4b:55:4d:
                    38:2c:a9:77:d3:5a:25:f4:69:f0:a8:f4:89:a8:4f:
                    6f:65:19:dd:f6:88:5a:89:55:1a:0a:b2:50:3d:1e:
                    88:e3:81:82:2e:10:6d:7c:cd:a9:ce:45:63:74:c1:
                    55:04:e5:07:f0:f8:68:6a:e9:03:df:1d:9d:99:a7:
                    62:c9:42:d7:aa:f4:59:88:3c:aa:47:e1:60:0b:3d:
                    e3:7e:51:4a:31:fb:a0:a9:da:8c:e6:05:bb:08:1e:
                    e8:eb:e8:0b:b4:b6:b7:6e:4f:07:b6:84:cf:ce:5d:
                    72:ec:48:36:e9:9c:df:cb:3e:1b:02:05:d2:0f:3d:
                    28:45:36:64:92:15:75:f9:30:c7:ed:4d:ef:45:77:
                    c3:ec:72:47:2d:c8:05:86:96:fd:a7:e0:0b:f5:71:
                    78:1c:cd:9d:2b:82:81:c5:0c:01:d6:c6:5f:73:bb:
                    81:a3:5f:d1:79:35:09:07:3e:47:d1:c1:5b:d6:6e:
                    ad:60:58:54:63:12:d1:57:0f:77:8a:59:f0:b7:52:
                    14:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7D:0D:17:94:6B:F6:CB:93:72:08:20:D4:4A:9E:B2:79:51:1C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ceeb7ea0-0f3c-3540-9a08-2f78b71a4688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.37.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a9:e2:52:85:de:83:d0:99:ad:8c:69:50:2a:20:92:08:e2:
         c5:e9:f6:0d:bb:56:be:f2:8e:60:a7:fb:5d:9b:f1:dd:62:40:
         8d:d6:c5:3c:2c:34:69:28:12:e5:a5:5b:62:c8:69:fe:81:5a:
         1c:11:a3:e6:c0:e2:0b:f4:75:2f:66:23:22:9e:54:30:1d:ab:
         17:42:ba:1f:33:b6:e0:47:63:8a:fa:bf:28:13:28:5d:15:48:
         53:92:b5:66:ec:42:2e:30:b2:09:88:02:6b:12:73:98:3a:50:
         71:72:11:0a:89:bc:9c:fb:5b:6d:ea:3a:37:a7:2b:15:db:cc:
         ad:2f:e2:3b:25:0d:49:d9:30:b6:7d:76:59:3f:d2:e7:0e:c6:
         78:7a:df:9c:76:8b:e2:f8:e1:04:40:d2:22:76:8e:30:77:55:
         1e:12:73:d7:62:e6:41:74:8b:53:ea:2a:4d:57:51:43:ee:95:
         66:01:f4:6c:ca:c2:d7:87:c0:49:0d:b3:c8:93:a2:1d:8d:41:
         7f:17:0c:4c:9c:5c:90:83:19:71:69:a8:54:d5:22:d6:b7:c2:
         8b:6c:18:a6:a2:b9:41:b9:a6:f1:5b:0e:7f:96:62:23:43:8e:
         61:c9:b8:52:52:f8:64:f2:f4:57:e3:4e:83:f8:df:fb:e3:20:
         b0:a1:f1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:20 2024 by rpki-client on console-fra.rpki-client.org