Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d199bc14-73c0-30ff-9435-86a1f7d0811d.roa
File:                     d199bc14-73c0-30ff-9435-86a1f7d0811d.roa (raw, json)
Hash identifier:          Xynsa8JYR7LqxpeRjRnHhdF62L3OHsZVc+iw19BBGSY=
Subject key identifier:   9C:A1:A3:87:82:6C:0C:A3:4B:93:55:8A:6B:B0:BE:BD:6F:70:C4:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D639E4BF1D1133893160C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d199bc14-73c0-30ff-9435-86a1f7d0811d.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.138.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:39:e4:bf:1d:11:33:89:31:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=3f495bec-6cdd-48ec-9982-9da75f619cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:06:5d:1d:9b:a9:16:62:e4:99:5b:b0:b5:11:
                    48:ee:42:91:67:4a:2a:3f:5a:d1:44:e2:6a:ac:ea:
                    44:bf:5e:2a:53:ca:f2:dc:66:25:26:b6:39:d5:c2:
                    a8:b9:12:ae:51:85:34:a4:5c:b8:e7:de:87:6a:32:
                    b6:92:bc:e4:af:19:0b:39:63:22:23:19:ef:dc:f4:
                    99:7a:7f:6b:6d:ab:f7:71:5c:c3:d7:8f:41:b3:44:
                    93:9e:a4:25:29:02:4c:1e:52:5c:9c:f1:4b:f1:50:
                    11:c6:5b:ad:09:cc:fc:b3:10:bc:29:81:4d:ac:d0:
                    97:51:9b:6d:92:9d:7c:85:08:67:f3:bf:67:6b:2f:
                    da:71:69:c9:9e:ff:60:76:a8:32:78:b8:c1:19:9c:
                    d5:4a:d5:a6:fa:6e:d9:74:db:74:e1:f4:13:1b:c7:
                    ff:18:da:2c:53:82:95:7b:27:08:bf:b8:09:46:e4:
                    9d:c1:26:7b:21:07:0d:8a:2a:6c:db:f7:4a:74:96:
                    ad:6d:7c:ad:23:9f:cc:08:c5:0a:3d:d9:d4:b4:35:
                    92:ac:7b:04:4b:50:b2:7e:68:b2:60:93:c4:ee:f0:
                    15:d8:cd:bc:4d:88:70:7f:fd:06:4b:5a:89:6f:6b:
                    87:45:c4:fb:e1:06:6a:0e:ac:5c:3e:a6:e9:37:60:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A1:A3:87:82:6C:0C:A3:4B:93:55:8A:6B:B0:BE:BD:6F:70:C4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d199bc14-73c0-30ff-9435-86a1f7d0811d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.138.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3e:1a:90:a0:07:dd:61:bf:11:4b:12:77:98:80:c0:a2:1b:
         39:46:3a:d9:74:00:b3:72:1c:04:fe:2b:12:b3:79:92:69:8a:
         20:09:97:56:ff:03:a7:79:54:30:3a:4e:36:f2:9d:02:f9:45:
         a3:98:a9:8c:ed:bd:2e:64:0e:d7:f1:99:7e:05:5d:46:05:f0:
         75:5e:a7:69:5e:7d:c0:b3:80:70:b2:9d:92:80:b0:3c:37:6e:
         d6:ea:b3:9d:e1:72:60:fc:0d:df:31:2d:a1:3c:4f:4e:96:85:
         ec:32:5d:92:df:9c:3c:c4:51:6d:32:83:56:9e:fd:d1:fb:13:
         97:95:8c:d0:42:49:b4:2f:5a:2b:53:fd:a8:5b:ed:2d:08:87:
         ee:0c:f8:d1:f2:18:9c:de:31:a7:6c:71:b2:40:34:56:6a:af:
         98:04:51:b4:bf:33:e0:49:12:03:df:6e:af:1e:9e:38:5a:97:
         c1:10:0a:69:22:e0:31:ee:85:b7:c8:06:b1:ad:8f:10:8f:7b:
         b6:84:14:38:9b:b9:fd:88:6a:ef:67:86:d8:85:f0:b3:85:77:
         53:62:ad:ea:8f:fd:a2:2c:bd:56:12:ae:5a:1b:04:b4:87:de:
         95:5b:5e:2a:b7:89:a5:1c:1a:d0:59:63:3c:bf:96:93:b7:23:
         aa:18:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:51 2024 by rpki-client on console-ams.rpki-client.org