Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0994f0ed-5086-3623-8c6b-d67482f3276f.roa
File:                     0994f0ed-5086-3623-8c6b-d67482f3276f.roa (raw, json)
Hash identifier:          T44dTDDtrMlIk3yyFqN7BqDFYkPjEB5fUJp3E4WavuY=
Subject key identifier:   4F:08:FD:1C:F6:D2:FA:E4:0A:A0:FA:3F:0D:7A:F7:68:F3:E6:38:B3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E1DBB34FC839C26B43B40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0994f0ed-5086-3623-8c6b-d67482f3276f.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        97.87.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:1d:bb:34:fc:83:9c:26:b4:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=03d8e926-ff38-4755-9e92-acd0e6ee8a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ba:87:cd:50:73:19:3b:34:63:16:c4:35:e2:
                    ab:45:7d:fd:db:97:4f:fa:6b:19:f5:62:b2:f9:14:
                    86:d9:16:c5:54:e9:d0:7c:69:33:1f:c2:b7:79:09:
                    78:fd:55:75:5f:a1:98:30:b7:91:ff:07:ea:fe:42:
                    83:58:13:c5:8f:b8:4b:b5:3a:2e:3f:b8:02:29:d8:
                    29:e9:2f:f5:01:a3:eb:fe:25:dc:8d:bf:c2:46:6e:
                    38:cc:dd:22:72:74:41:20:71:a3:67:83:84:94:96:
                    16:ac:5a:ed:27:8f:0f:fc:e6:a8:e5:38:2b:99:26:
                    f8:52:83:7a:5d:fc:1c:f6:a7:40:9d:d7:97:b2:8a:
                    b0:ca:a9:5c:08:48:7d:b9:24:78:bb:0e:cd:8f:b0:
                    7a:3f:d4:02:4e:e0:8f:b8:a4:8f:70:50:cd:22:f8:
                    2e:1b:29:99:22:33:ea:9c:6d:d2:4b:2d:66:c3:0b:
                    e2:e4:f0:c5:9c:f5:42:27:d6:7a:cc:05:10:eb:1d:
                    f4:d5:4c:5d:6f:8b:4f:d2:fb:41:f3:e1:41:f5:2e:
                    05:30:31:1a:89:15:9b:87:6c:8a:28:af:67:2c:4f:
                    8a:5d:ba:06:81:a7:ae:0c:a7:7a:1c:10:62:2b:b5:
                    9f:12:1a:32:bc:26:ff:ee:2f:4a:ff:a2:05:54:79:
                    95:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:08:FD:1C:F6:D2:FA:E4:0A:A0:FA:3F:0D:7A:F7:68:F3:E6:38:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0994f0ed-5086-3623-8c6b-d67482f3276f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.87.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:36:7a:ac:4f:be:3c:3e:b2:61:dc:98:3b:34:dc:f6:ec:
         53:6d:b2:1a:76:03:62:07:99:62:d9:3d:45:3c:3f:c1:c7:0f:
         ec:b4:c4:38:b0:de:b4:f6:53:86:86:c8:db:cb:ad:f4:47:ee:
         cd:25:d1:79:81:39:5c:eb:ca:46:21:84:34:3f:68:18:f1:49:
         2e:79:79:94:a4:c6:a7:fc:e0:fa:83:77:1d:31:88:58:fc:f2:
         96:47:75:be:b5:30:9f:29:ad:67:f3:f3:61:4e:70:4c:e0:e1:
         e1:90:5d:c5:76:3b:0c:da:a4:2b:7c:fa:52:c2:2a:fa:39:8a:
         f4:38:21:66:37:97:fa:7d:6d:37:48:1a:0c:03:29:40:71:d7:
         1d:76:ec:02:eb:c0:30:76:0c:da:01:b5:66:aa:33:c8:d8:06:
         ac:cc:50:53:79:ab:db:5c:9f:1b:e6:ee:e4:bf:5b:9c:d6:a2:
         42:00:61:05:1b:5e:8e:bc:e6:11:0e:84:29:4b:be:05:1d:3e:
         a9:65:20:ec:bf:0a:8d:00:3a:23:de:4a:c8:39:2b:75:a7:b7:
         01:8d:5e:cf:ff:72:d2:c7:2f:46:d9:e7:00:e5:da:c1:58:fd:
         54:26:ba:54:09:37:11:82:78:9a:75:ff:2a:26:da:c5:f9:4f:
         a9:3e:75:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijh27NPyDnCa0O0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MDNkOGU5MjYtZmYzOC00NzU1LTllOTItYWNkMGU2ZWU4YTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7qHzVBzGTs0YxbENeKrRX3925dP+msZ9WKy
+RSG2RbFVOnQfGkzH8K3eQl4/VV1X6GYMLeR/wfq/kKDWBPFj7hLtTouP7gCKdgp
6S/1AaPr/iXcjb/CRm44zN0icnRBIHGjZ4OElJYWrFrtJ48P/Oao5TgrmSb4UoN6
Xfwc9qdAndeXsoqwyqlcCEh9uSR4uw7Nj7B6P9QCTuCPuKSPcFDNIvguGymZIjPq
nG3SSy1mwwvi5PDFnPVCJ9Z6zAUQ6x301Uxdb4tP0vtB8+FB9S4FMDEaiRWbh2yK
KK9nLE+KXboGgaeuDKd6HBBiK7WfEhoyvCb/7i9K/6IFVHmV1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8I/Rz20vrkCqD6Pw1692jz5jizMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDk5NGYwZWQtNTA4Ni0z
NjIzLThjNmItZDY3NDgyZjMyNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYVcQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEexNnqsT748PrJh3Jg7NNz27FNtshp2A2IHmWLZPUU8P8HHD+y0xDiw
3rT2U4aGyNvLrfRH7s0l0XmBOVzrykYhhDQ/aBjxSS55eZSkxqf84PqDdx0xiFj8
8pZHdb61MJ8prWfz82FOcEzg4eGQXcV2OwzapCt8+lLCKvo5ivQ4IWY3l/p9bTdI
GgwDKUBx1x127ALrwDB2DNoBtWaqM8jYBqzMUFN5q9tcnxvm7uS/W5zWokIAYQUb
Xo685hEOhClLvgUdPqllIOy/Co0AOiPeSsg5K3WntwGNXs//ctLHL0bZ5wDl2sFY
/VQmulQJNxGCeJp1/yom2sX5T6k+dag=
-----END CERTIFICATE-----
Generated at Mon May 13 16:00:07 2024 by rpki-client on console-fra.rpki-client.org