Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/064102c9-be66-3170-abfb-53bd401a99ff.roa
File:                     064102c9-be66-3170-abfb-53bd401a99ff.roa (raw, json)
Hash identifier:          9Yxc/SNCzBPz4GsLc6C2gQV1unGBbJN/pj5nSk9IBQU=
Subject key identifier:   47:4B:9F:56:6C:A0:1A:7B:A1:76:FD:CC:EA:0F:96:88:77:20:E6:77
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0FEF32BE99CC7C8BBB548
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/064102c9-be66-3170-abfb-53bd401a99ff.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        97.87.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:fe:f3:2b:e9:9c:c7:c8:bb:b5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=33f6d384-c3ec-4819-ba70-eecb51f5ef8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:6e:9c:d3:d6:8c:c0:41:af:99:27:ad:56:
                    a1:da:45:f2:4a:75:e8:d3:67:78:78:b4:9c:98:4c:
                    5f:c9:e8:c7:7e:98:e3:17:64:90:ff:06:b9:e8:38:
                    65:a4:0a:f4:b7:7e:08:86:1f:70:f8:28:38:bf:d8:
                    0c:dd:48:5a:61:e5:47:22:11:6c:48:c0:82:32:4f:
                    e9:d9:5a:68:67:9e:eb:cb:28:a2:6c:93:b5:18:0e:
                    53:5c:fd:10:20:f3:bf:00:c2:95:7a:8c:c5:92:25:
                    37:90:0c:c2:ee:6f:71:4a:db:67:4c:a6:03:47:a5:
                    2b:d1:e5:7a:7e:33:54:8f:0c:bc:60:60:38:99:00:
                    ff:23:50:f3:58:24:39:40:77:0d:a2:70:57:48:51:
                    a2:ad:d0:78:99:4d:72:69:06:2e:83:03:f2:4f:11:
                    63:c7:df:f2:a3:70:45:00:79:e8:d6:75:bc:25:2c:
                    3a:5b:1b:2d:c1:cf:7c:51:95:e8:ef:c1:eb:58:9a:
                    31:08:7b:34:bd:51:21:8b:c6:10:27:5d:32:de:8c:
                    b9:66:34:58:2a:75:c7:5a:e0:3c:83:7f:bb:da:dd:
                    7b:eb:ec:28:32:06:ca:cb:12:1c:a5:4f:b8:f7:e2:
                    71:ff:3b:26:cc:90:99:07:a3:5a:8d:af:d0:99:8f:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4B:9F:56:6C:A0:1A:7B:A1:76:FD:CC:EA:0F:96:88:77:20:E6:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/064102c9-be66-3170-abfb-53bd401a99ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.87.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ea:f9:8d:b9:41:ef:6c:a8:5a:e6:ce:70:c6:21:ff:02:db:
         a3:b3:6d:34:81:4d:b2:a1:9e:99:76:8e:a7:06:16:f9:5d:22:
         ff:8a:3d:2f:f2:96:f5:f5:25:5d:b6:58:68:d6:4f:c5:1c:42:
         81:6b:81:1c:c0:ea:e0:fd:ea:67:f3:85:18:dd:01:ca:6c:93:
         7e:a4:aa:ff:02:18:f0:84:f6:7b:83:db:7c:e2:99:62:15:42:
         12:07:6b:dd:e7:8b:70:9f:02:f6:d1:83:5a:91:62:dd:f1:0c:
         a2:55:d7:a0:fc:e8:6e:f6:ec:f3:e7:d3:61:16:4f:d6:30:55:
         51:0a:c7:ab:5f:2d:92:ed:7f:5f:64:91:e7:99:0f:27:00:4a:
         8c:8e:bf:c4:d9:bd:58:22:96:e5:68:65:c9:e6:48:84:35:ea:
         f6:db:5a:07:7d:0d:96:9b:03:ad:fa:0b:6d:b7:ed:ca:aa:09:
         d7:da:4b:de:37:ae:ba:57:7d:9d:46:19:a1:57:b1:5e:c7:76:
         f4:00:36:63:d5:46:cf:6d:82:0a:eb:d4:86:46:7a:63:50:a4:
         3b:1d:e6:b8:fe:c6:c9:0c:7d:d1:3a:f3:dc:10:75:a7:ba:fc:
         30:dc:67:26:aa:9d:f1:3c:48:e0:38:39:b8:4e:e6:56:5a:5f:
         a1:1f:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:27 2024 by rpki-client on console-ams.rpki-client.org