Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a2db336-5819-3607-a941-f7e02eed45cf.roa
File:                     3a2db336-5819-3607-a941-f7e02eed45cf.roa (raw, json)
Hash identifier:          9Ke/b7WUmOUAqRrfUrGtELtK/O/Jn9OLXruf83fpAxg=
Subject key identifier:   F2:C6:BA:29:4B:FC:D7:82:FB:56:41:FE:3D:16:A0:65:BB:C8:37:8C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EB5F90937615629C12880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a2db336-5819-3607-a941-f7e02eed45cf.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        97.82.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:b5:f9:09:37:61:56:29:c1:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=4b3201a4-7ea2-4c66-a8b3-3b2b7ed5a0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:88:87:70:cd:87:84:93:1c:7c:f2:75:91:
                    c0:57:2f:75:26:04:37:3e:1d:b0:56:c0:9c:af:d0:
                    4e:f3:8c:dd:68:41:ec:af:29:32:03:ac:2a:48:34:
                    21:59:36:07:3c:e1:ae:1a:a3:f7:83:b4:c4:6f:e2:
                    5e:2a:42:20:d9:6e:68:1d:a8:7f:2b:bd:1a:b1:9a:
                    07:ee:b7:19:45:48:5e:fe:e2:9e:4b:18:cb:4f:e0:
                    5d:84:ef:49:2d:c7:7b:6f:9b:b0:96:ad:9c:31:b4:
                    d6:a6:15:71:2c:c5:d7:5b:43:78:15:4f:10:cd:3d:
                    1c:66:27:67:56:a9:97:6e:0e:9e:e2:f8:78:94:2b:
                    4e:9c:b0:69:3a:08:ea:f5:ab:b2:90:43:50:89:7f:
                    22:77:48:a1:aa:b3:f8:cc:57:d8:4d:78:90:93:f0:
                    54:5e:86:44:3a:63:3a:a5:eb:2f:0b:2f:94:8c:02:
                    dd:05:4e:0d:41:ff:db:e5:66:14:8b:84:17:fb:15:
                    ea:3c:82:3f:4c:bd:d5:75:94:70:3f:b4:8e:d5:35:
                    f9:de:51:00:1e:8c:a7:44:2c:19:4d:e1:3e:d6:79:
                    c7:a1:38:54:6e:b4:d6:36:e1:2a:22:49:d3:64:97:
                    60:d5:33:53:7f:4b:ab:0d:f9:6b:8c:32:6e:95:ea:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C6:BA:29:4B:FC:D7:82:FB:56:41:FE:3D:16:A0:65:BB:C8:37:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a2db336-5819-3607-a941-f7e02eed45cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.82.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:42:6c:fd:8a:ef:45:62:eb:ef:ac:46:3b:e0:e7:a7:4f:
         47:a5:f7:8f:0d:c9:1c:5e:39:34:8a:70:ca:c3:9a:60:ec:89:
         30:a4:a2:ea:7e:43:f2:5c:26:5b:24:10:d3:e6:b3:ea:df:f9:
         22:6a:d8:57:60:9e:04:06:9c:ad:3d:75:11:f1:9d:b4:90:4d:
         00:94:a6:13:c8:14:2b:c9:46:6f:ec:22:87:e0:3b:4c:d5:16:
         00:bc:c8:d0:13:21:3b:c9:c5:77:cc:9b:b4:bb:40:5e:83:3b:
         24:a8:a8:83:0d:5f:15:6b:88:8b:63:6d:3e:7e:30:fa:3e:46:
         8d:2d:46:73:89:8e:c8:a3:b3:f7:b2:f1:f1:f4:17:55:9f:78:
         8e:5b:7e:1d:ba:35:99:c7:03:03:62:27:c0:ce:e7:77:8c:19:
         13:14:c2:6c:a8:3b:35:57:e3:f2:96:50:30:4e:57:e5:41:62:
         f3:8b:35:a0:ad:ca:82:09:ac:a3:e4:83:34:61:bd:f5:21:0b:
         ba:4d:1b:59:b6:0d:50:db:92:85:cf:91:ae:27:d6:de:68:ed:
         4f:3d:68:b7:6e:ee:54:0f:5b:70:61:8c:0b:d7:db:a6:51:b0:
         ba:34:b4:6a:84:04:51:dd:f1:6d:34:1d:10:51:1f:6b:1c:b3:
         9a:f1:ff:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijrX5CTdhVinBKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
NGIzMjAxYTQtN2VhMi00YzY2LWE4YjMtM2IyYjdlZDVhMGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk6Ih3DNh4STHHzydZHAVy91JgQ3Ph2wVsCc
r9BO84zdaEHsrykyA6wqSDQhWTYHPOGuGqP3g7TEb+JeKkIg2W5oHah/K70asZoH
7rcZRUhe/uKeSxjLT+BdhO9JLcd7b5uwlq2cMbTWphVxLMXXW0N4FU8QzT0cZidn
VqmXbg6e4vh4lCtOnLBpOgjq9auykENQiX8id0ihqrP4zFfYTXiQk/BUXoZEOmM6
pesvCy+UjALdBU4NQf/b5WYUi4QX+xXqPII/TL3VdZRwP7SO1TX53lEAHoynRCwZ
TeE+1nnHoThUbrTWNuEqIknTZJdg1TNTf0urDflrjDJuler/RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLGuilL/NeC+1ZB/j0WoGW7yDeMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2EyZGIzMzYtNTgxOS0z
NjA3LWE5NDEtZjdlMDJlZWQ0NWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYVJkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9rQmz9iu9FYuvvrEY74OenT0el948NyRxeOTSKcMrDmmDsiTCkoup+
Q/JcJlskENPms+rf+SJq2FdgngQGnK09dRHxnbSQTQCUphPIFCvJRm/sIofgO0zV
FgC8yNATITvJxXfMm7S7QF6DOySoqIMNXxVriItjbT5+MPo+Ro0tRnOJjsijs/ey
8fH0F1WfeI5bfh26NZnHAwNiJ8DO53eMGRMUwmyoOzVX4/KWUDBOV+VBYvOLNaCt
yoIJrKPkgzRhvfUhC7pNG1m2DVDbkoXPka4n1t5o7U89aLdu7lQPW3BhjAvX26ZR
sLo0tGqEBFHd8W00HRBRH2scs5rx/3E=
-----END CERTIFICATE-----
Generated at Sun May 12 17:45:51 2024 by rpki-client on console-fra.rpki-client.org