Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/452529d3-121b-36d8-8a2b-57e095a91af7.roa
File:                     452529d3-121b-36d8-8a2b-57e095a91af7.roa (raw, json)
Hash identifier:          eOKLeUoyXEOk6tzqA2ZQNtUCw1FOuwpsFI2RS3dB/UM=
Subject key identifier:   EF:12:C3:3C:B0:C0:BE:1D:A9:5F:4E:3E:31:15:87:14:1F:07:48:F6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0F854098273FAAFFC8EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/452529d3-121b-36d8-8a2b-57e095a91af7.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        97.89.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:f8:54:09:82:73:fa:af:fc:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=b9e65612-9651-4262-9870-c151bd0fd344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:32:59:53:ec:4e:f6:95:5d:e2:7c:54:09:
                    40:f6:d2:6f:fd:84:38:77:b5:31:da:07:fc:65:0a:
                    b2:21:ab:ad:27:77:d1:46:ea:79:e8:38:cf:27:42:
                    8a:a3:2b:67:c0:0e:96:62:0b:eb:2b:7f:e1:20:a4:
                    3e:95:2d:2a:05:a5:5a:56:19:fe:59:54:d6:31:a7:
                    8f:af:42:15:67:21:30:69:48:89:3d:ab:d2:85:0b:
                    6f:c5:90:e0:23:fb:73:79:b2:53:c8:9e:0d:93:6b:
                    93:62:07:73:c0:4b:6a:a8:1b:f0:51:ae:9c:53:cc:
                    42:f8:04:6e:c9:e3:a0:67:41:28:db:49:35:aa:59:
                    ff:8c:bb:97:13:8b:de:3e:ec:4d:81:b3:75:27:82:
                    b1:20:3c:36:74:13:ea:f8:9a:55:ba:ae:b6:ba:7f:
                    d5:2c:f1:b6:e6:0c:ae:50:93:b5:a3:79:b4:0e:71:
                    1f:ea:d9:a0:ff:91:89:19:d8:aa:b4:6c:11:d3:86:
                    d8:b6:54:4b:4b:94:3e:2a:15:4b:10:f0:2f:75:0c:
                    70:64:95:85:29:06:fc:7a:8c:6c:69:0f:63:cc:80:
                    9d:03:81:f5:34:ff:16:39:27:47:c0:0b:68:52:27:
                    e9:e3:86:e9:45:7f:53:53:cb:39:ef:15:b0:67:e2:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:12:C3:3C:B0:C0:BE:1D:A9:5F:4E:3E:31:15:87:14:1F:07:48:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/452529d3-121b-36d8-8a2b-57e095a91af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.89.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f4:95:01:71:67:84:de:ed:ae:f5:15:c7:a5:09:24:de:6e:
         64:c1:3c:3b:2a:3d:8a:ec:f4:a2:93:b1:d5:f5:27:5a:1f:ee:
         5d:ef:ad:43:ea:58:48:09:cb:97:e7:c6:46:f8:ac:71:8b:f1:
         e5:de:fe:27:9b:af:fc:c9:63:8d:ca:1e:7c:f0:30:65:3a:67:
         88:63:dd:1b:39:2e:2a:92:be:fd:14:37:81:a6:df:30:da:4b:
         29:87:cb:23:ca:78:0f:77:d2:2f:cd:70:76:f8:0e:5b:49:37:
         d0:f1:01:02:76:e6:41:07:2c:87:11:ed:6d:f2:c3:80:7f:bb:
         6c:49:99:26:ae:5b:ec:cd:f9:af:76:d8:79:c5:17:1a:47:c0:
         b8:63:74:bb:8a:02:99:79:a4:8a:b3:4e:db:4f:f0:91:ed:48:
         c2:52:0d:ec:5d:68:b5:30:3d:9c:f8:45:40:58:3f:58:e4:58:
         75:ea:e8:1a:59:b7:eb:95:0b:a9:72:e7:5b:37:0a:99:fa:e4:
         5e:23:4d:04:da:c1:55:91:c0:a1:77:38:cb:62:97:23:b9:b7:
         64:9a:5e:1b:76:c6:56:03:09:33:4c:6f:07:66:59:84:f7:9c:
         c1:45:c1:c8:b6:82:04:f4:62:60:f2:75:24:f6:7c:d9:83:25:
         b2:47:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:07 2024 by rpki-client on console-fra.rpki-client.org