Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f73c4db6-eded-3bf1-9f1e-24ea9ab1e598.roa
File:                     f73c4db6-eded-3bf1-9f1e-24ea9ab1e598.roa (raw, json)
Hash identifier:          L1kgq7QeIg05jSazQ9MTAQ0uSy3ElHHQOIphfmXEtLs=
Subject key identifier:   E7:CB:A2:F9:5A:9A:FA:0C:C7:B8:70:E5:73:80:13:78:5A:DD:BE:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847A0F99802D24DBBA5887BF6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f73c4db6-eded-3bf1-9f1e-24ea9ab1e598.roa
Signing time:             Tue 22 Oct 2024 19:12:11 +0000
ROA not before:           Tue 22 Oct 2024 19:12:11 +0000
ROA not after:            Mon 20 Jan 2025 20:12:11 +0000
asID:                     6167
IP address blocks:        97.228.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:f9:98:02:d2:4d:bb:a5:88:7b:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 22 19:12:11 2024 GMT
            Not After : Jan 20 20:12:11 2025 GMT
        Subject: CN=035ca35b-c1ed-4d0e-8e91-d54ab1313309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:92:04:2b:40:9f:cf:9a:e2:14:2a:6e:df:
                    1a:f9:22:ff:05:b6:9d:c9:0f:ce:62:64:d9:fd:be:
                    98:c1:88:51:3d:6f:dc:e2:e5:e0:01:7d:9b:a5:a7:
                    85:c5:af:b4:56:e7:08:70:39:aa:4a:ec:de:9e:ae:
                    77:bf:67:1c:69:1e:da:10:c6:dd:41:95:40:30:b5:
                    f8:49:2f:a5:d8:12:8a:e9:4c:f1:76:72:7b:3b:32:
                    30:ee:de:4a:38:43:84:53:83:62:41:e2:bf:b5:b1:
                    43:76:63:55:29:dc:d5:c5:eb:7e:57:eb:47:05:ba:
                    8f:b2:4a:ac:16:e4:cc:87:74:07:20:2a:65:dc:c8:
                    43:19:7d:94:16:87:73:48:42:86:65:1d:9c:99:37:
                    8e:d1:40:bc:81:cc:b3:d7:5b:71:3a:d8:f9:8f:d6:
                    dc:52:26:4d:01:16:e1:20:3f:3a:48:14:40:a0:b4:
                    2a:a4:22:a0:80:d7:5f:db:9b:79:8f:21:ad:a0:b5:
                    88:b9:8d:3c:dc:b6:5c:27:bc:7a:98:e9:c3:75:ad:
                    87:4e:05:16:dc:b8:0f:68:95:92:fb:8a:dc:f3:c3:
                    94:b9:f3:be:6a:22:25:db:a9:a5:3e:96:a0:2b:33:
                    02:ca:4c:72:d0:e0:cd:38:21:ae:df:85:33:e6:24:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CB:A2:F9:5A:9A:FA:0C:C7:B8:70:E5:73:80:13:78:5A:DD:BE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f73c4db6-eded-3bf1-9f1e-24ea9ab1e598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.228.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4f:c3:62:fb:f2:03:d3:ef:53:ca:28:59:15:c1:52:c5:28:
         3b:ec:0b:cf:a2:84:54:93:4d:ff:d8:bb:d0:b2:e1:0d:4c:4b:
         02:08:28:09:20:5c:bf:64:df:02:ce:8c:8b:b6:22:24:55:0d:
         6d:eb:46:c5:b6:be:51:fc:1d:a3:11:54:59:5a:e8:e5:6f:29:
         32:13:12:0a:d3:31:2d:13:39:fb:67:1b:07:c6:b1:09:9d:7d:
         b8:24:4a:8e:ed:cc:9b:4d:1c:12:30:d1:da:1d:d0:57:b4:ce:
         77:37:d8:bf:03:88:75:36:ae:53:4a:9b:3c:f3:93:36:05:7c:
         20:c9:56:9f:3a:e4:4c:1f:79:6c:1a:f4:43:5d:ad:0a:ce:1d:
         5b:86:a0:e7:11:a7:b9:31:76:c1:09:04:cd:61:af:ef:b6:75:
         59:a2:3c:e4:91:55:e6:be:dc:08:fe:0a:aa:83:00:f0:59:37:
         1b:f3:6a:3b:46:e4:6e:f6:cb:15:14:a5:dd:ca:22:0d:1d:54:
         66:be:6f:86:08:ff:f0:cc:5a:a2:b0:7c:6a:3a:4c:94:f7:de:
         33:9c:41:ea:b3:73:74:a9:99:ac:f1:a3:c8:b5:cd:a2:0c:eb:
         57:a7:6e:45:14:bc:8c:a2:4d:71:58:81:61:69:40:ca:ac:2c:
         6c:c7:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:59 2024 by rpki-client on console-ams.rpki-client.org