Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/def61996-eb4a-3c89-954b-6902e2e3c57e.roa
File:                     def61996-eb4a-3c89-954b-6902e2e3c57e.roa (raw, json)
Hash identifier:          M9t34S5wTguDhOQHfUiksZu0GISfeIj6N/DPoaMBpes=
Subject key identifier:   63:83:B3:4C:38:92:CB:48:28:FE:27:8E:24:A2:AD:AF:E0:73:CB:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D6381F035E41F5D69AE000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/def61996-eb4a-3c89-954b-6902e2e3c57e.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6167
IP address blocks:        97.133.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:38:1f:03:5e:41:f5:d6:9a:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=f66a31b0-3176-405a-b605-33c8bb2b1447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1a:0a:30:de:e0:71:08:b2:cf:ef:f3:6e:3d:
                    47:c9:7e:0a:ea:a1:81:1b:1d:d6:35:00:36:1d:c5:
                    d5:cd:a5:42:33:64:81:67:b6:9d:c3:3b:9d:05:32:
                    66:84:b1:cb:f1:81:87:a6:14:43:2f:bc:a4:5e:7b:
                    7a:b3:25:0a:49:19:f5:6f:86:ba:cb:a9:15:e7:c4:
                    02:8f:98:de:19:52:86:71:d2:25:04:7b:c6:8d:b5:
                    df:c4:dd:a6:87:6d:d7:b1:1f:34:e0:76:2f:8b:e7:
                    d6:7c:8d:ef:80:03:1a:be:05:55:d2:17:1c:b5:e9:
                    62:b2:19:01:67:49:fd:56:34:eb:b7:74:24:1b:c3:
                    26:5a:1a:da:aa:ba:4e:aa:7b:d4:bc:16:0e:da:34:
                    35:57:67:5a:1e:cd:bb:bf:71:52:3d:b8:c9:d1:2d:
                    c0:72:d9:10:3b:82:75:bd:c5:ea:9a:71:d4:e4:ab:
                    e6:70:2d:cf:62:ff:79:e5:b9:01:e4:cb:a5:d6:10:
                    34:52:ff:13:fa:eb:b7:f1:3b:39:04:8c:1b:9a:d1:
                    e5:ff:64:54:5a:71:2d:78:bb:42:db:91:93:d9:2e:
                    cb:a0:f2:c0:69:fe:b3:11:f6:01:cc:ff:fc:d8:30:
                    9b:00:73:8b:16:3f:e2:0f:0b:00:8a:1d:84:52:b8:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:83:B3:4C:38:92:CB:48:28:FE:27:8E:24:A2:AD:AF:E0:73:CB:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/def61996-eb4a-3c89-954b-6902e2e3c57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.133.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:49:4d:4d:4a:ee:94:10:89:a8:13:4e:65:4c:77:d1:bc:9b:
         b3:98:13:f4:09:9f:de:2a:9d:f8:a2:b8:c0:cd:d5:33:af:82:
         19:d2:4f:67:7e:03:64:7d:1b:81:63:23:76:0a:42:4d:39:75:
         e5:71:8b:43:75:56:ab:a4:d2:1a:cc:6f:70:4e:f0:44:15:25:
         e0:64:d2:0a:ca:24:2c:db:41:e1:9b:55:49:d3:4e:65:29:97:
         da:29:84:33:51:fb:ac:e4:2f:31:93:27:1e:17:a9:6f:aa:2d:
         75:a6:78:54:55:72:b0:0e:c4:24:bb:6d:1e:ac:9a:a1:47:8e:
         ad:3d:90:5e:7a:88:1a:80:9d:cc:19:f0:5f:e9:94:7c:a7:0c:
         d6:15:3e:42:7e:fe:6b:0d:dc:8f:23:a7:d8:4c:92:07:7d:be:
         5f:2a:1b:95:c8:cc:1b:ed:b2:aa:57:62:e2:dd:33:89:8a:cc:
         f4:ed:28:35:6f:61:7e:4b:6e:87:91:9e:02:ac:18:ff:41:8d:
         8f:9f:3a:0f:ae:6c:79:71:4d:3f:fb:7b:9f:c0:62:21:cf:23:
         80:89:a9:01:02:30:ca:4d:ad:9f:24:28:75:f2:df:71:af:a2:
         36:51:06:02:42:0f:81:07:64:1b:52:ce:e5:f2:07:7a:99:65:
         44:d5:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:58 2024 by rpki-client on console-fra.rpki-client.org