Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/84882649-8ff4-3fdc-ac74-8fcfb2477a57.roa
File:                     84882649-8ff4-3fdc-ac74-8fcfb2477a57.roa (raw, json)
Hash identifier:          tvyqMNG4EkMK2O7SMydkOaKO+crNB6i5qBi26MtMSlc=
Subject key identifier:   F5:2A:BB:2B:57:01:FC:69:BF:8A:AD:B6:28:B5:3E:59:DE:E6:52:81
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0FB5AB0ADE8E2CD4E4C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/84882649-8ff4-3fdc-ac74-8fcfb2477a57.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        97.95.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:fb:5a:b0:ad:e8:e2:cd:4e:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=b0f3c09b-3750-4bca-b173-30efa821db8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:86:2f:3f:3f:2e:ae:b2:25:7e:d3:ce:3f:20:
                    f9:6c:43:af:cc:ea:91:c0:c3:3e:41:9a:ad:75:5a:
                    52:7e:cd:89:26:e3:17:ab:e2:8d:3c:c2:bc:a6:42:
                    1e:1a:58:c9:99:c8:ad:ae:29:a4:45:f5:37:aa:5c:
                    bc:fe:0c:4e:c2:70:42:e9:83:ba:73:cb:51:da:6a:
                    2a:fc:fa:97:6d:a7:26:03:f5:d3:d4:60:d3:82:88:
                    64:29:48:5d:7a:26:09:76:7e:d8:31:b9:e8:5e:df:
                    74:36:af:d1:ef:aa:94:47:8c:78:25:00:37:10:03:
                    6b:3d:58:26:0b:49:0b:69:a5:8c:4b:0e:25:30:f4:
                    d4:26:91:b0:1a:e2:32:69:34:5e:78:75:cc:d9:bb:
                    86:d9:b7:bb:3c:9e:33:f2:52:04:08:d5:2c:7a:84:
                    70:bd:f7:63:7f:0e:b7:13:57:10:75:75:bb:a4:2d:
                    8b:7a:9e:56:b5:24:d9:51:e7:7a:7a:d0:99:0e:e9:
                    2e:3d:3c:7d:80:8f:d6:b8:fa:d8:00:8d:08:21:c7:
                    d0:32:fa:63:03:d1:f4:bd:c5:a2:5b:9a:a2:ad:34:
                    73:2c:42:21:07:ce:b2:96:dc:e1:55:19:1e:b0:ed:
                    cf:cf:55:92:b8:c2:02:f7:b9:94:05:30:11:9d:25:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2A:BB:2B:57:01:FC:69:BF:8A:AD:B6:28:B5:3E:59:DE:E6:52:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/84882649-8ff4-3fdc-ac74-8fcfb2477a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.95.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:f5:7a:23:3a:7f:27:bc:74:dd:04:1b:b4:6d:63:48:bc:
         c7:50:2a:92:ce:22:54:61:18:97:f1:b7:db:6f:f0:6d:3a:d2:
         db:41:ed:6e:fe:aa:43:67:17:95:8d:d5:ae:b9:8a:a8:a5:96:
         92:62:95:37:9d:3a:5d:54:09:b9:f1:0e:a7:8a:46:c1:7e:fb:
         9d:68:0b:a0:4f:18:bc:79:07:da:fb:9a:a5:c3:22:66:d6:08:
         2a:8a:e8:be:9d:25:2d:d8:6b:0c:48:58:a9:b9:a2:a2:0d:33:
         67:2e:98:d7:22:b4:28:68:0d:56:56:a0:93:17:f9:31:8e:57:
         74:89:f6:73:b3:2c:6a:cc:56:93:82:55:15:d4:18:ea:5f:ac:
         41:b9:61:a9:05:68:64:a2:36:5e:45:3a:2a:53:34:c5:f9:7d:
         5d:58:b5:74:d8:3e:2a:2b:a1:64:06:cd:7a:1a:26:55:a1:ce:
         24:db:51:3c:a1:a9:93:bb:51:7c:32:89:91:4f:c4:fb:37:c1:
         80:33:2a:8e:50:40:90:f7:6d:7a:cb:4d:c0:a1:eb:8c:68:f8:
         4f:a2:30:6f:61:c2:66:1d:14:ad:dd:59:67:f7:47:5b:9f:f6:
         73:8e:d4:6f:bf:34:01:0f:4b:e4:cd:dd:12:c6:80:7a:85:5d:
         7b:28:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:13 2024 by rpki-client on console-fra.rpki-client.org