Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88117ed0-c1a6-3b39-9e28-07bbf1bd8980.roa
File:                     88117ed0-c1a6-3b39-9e28-07bbf1bd8980.roa (raw, json)
Hash identifier:          XZTct+YLeJ+KQHFNfwUdzaPOKMqbRkf9+q2y6T8JwEo=
Subject key identifier:   CE:25:B7:16:90:95:CD:7C:0F:82:1C:87:53:B0:B8:8A:D7:B4:03:51
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E25F88038B1858F8C3530
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88117ed0-c1a6-3b39-9e28-07bbf1bd8980.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        97.90.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:25:f8:80:38:b1:85:8f:8c:35:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=1dd1a8b3-512b-4c19-b5b5-3e240c72c02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:1a:c6:75:2d:f7:c1:5b:eb:35:b1:36:fd:
                    4f:6c:c3:e9:6c:e2:a7:58:5b:ec:e0:b1:7f:5e:6d:
                    0d:f6:99:58:fd:09:23:65:5e:5d:03:20:50:17:7b:
                    69:31:a5:ca:d3:b9:97:55:6d:11:cb:81:cf:e0:87:
                    ed:53:af:d0:39:5a:3f:dc:26:cf:f1:c5:5f:36:b5:
                    ee:4e:1b:9c:e3:47:e1:17:b2:3e:e2:16:55:cf:4f:
                    6d:33:12:7a:b0:d0:41:8d:9a:1b:e5:33:db:39:0b:
                    e3:15:2a:83:4b:c7:2e:71:59:32:ae:87:21:45:af:
                    3d:22:da:6c:50:87:77:0b:39:12:9f:40:02:6c:53:
                    00:35:ec:44:e1:c9:08:48:ce:e8:d9:a0:0c:4f:51:
                    dd:29:8c:b7:84:5d:59:46:a7:64:a2:c7:34:45:40:
                    14:7f:3d:d5:6e:d9:89:ee:89:e2:5c:aa:37:0a:a0:
                    cd:13:ff:4a:51:a7:a9:30:4c:5d:aa:ff:6d:83:b3:
                    fc:7f:dc:91:59:31:9e:9f:1c:cb:8a:1b:31:74:19:
                    81:ec:76:30:70:69:1a:6f:1d:35:c6:ae:23:fb:76:
                    59:75:df:45:e4:91:6f:82:b7:8b:3f:8e:52:b5:53:
                    2f:31:ee:88:95:b3:79:a4:d7:c8:fc:b8:93:d2:f9:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:B7:16:90:95:CD:7C:0F:82:1C:87:53:B0:B8:8A:D7:B4:03:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88117ed0-c1a6-3b39-9e28-07bbf1bd8980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.90.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:97:08:36:e8:da:cf:17:7b:f8:e3:5a:22:60:03:b4:0f:e9:
         7e:81:61:8c:f8:05:a9:60:00:94:8f:4d:d4:c0:c6:71:52:87:
         bc:e8:1f:19:de:a5:84:b4:02:58:40:5c:b1:8c:9c:b9:cf:e4:
         b3:ac:df:6b:0b:de:14:22:66:0d:99:05:12:92:94:85:44:f3:
         48:55:d6:76:c9:67:68:73:5f:9d:9d:97:93:e6:4d:c4:e6:b1:
         5c:68:61:eb:d6:26:ef:99:91:db:41:49:1d:02:34:c2:34:6e:
         63:34:f2:8e:c6:6c:ba:64:11:41:40:10:d7:8f:4a:41:e7:52:
         70:22:cf:52:ef:70:2e:68:16:51:95:b3:de:1d:99:af:86:52:
         3c:cf:b4:16:98:8a:a8:7d:d5:15:20:43:b4:3a:2d:bf:64:af:
         b4:79:ab:6a:80:31:6d:33:bc:9f:d8:2f:12:1e:ab:d8:42:94:
         a6:c1:24:0c:8d:9f:1d:2f:24:30:08:34:aa:8c:2c:50:db:32:
         49:a9:0d:52:14:8e:df:c5:bb:f0:41:4b:68:f5:be:8e:8c:78:
         21:58:9a:6b:97:1a:8a:62:4d:1b:f6:76:8c:05:33:d4:26:1d:
         19:05:3a:d0:fc:93:1c:6b:f1:39:d7:9e:1b:21:49:24:46:57:
         5a:4b:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:05:07 2024 by rpki-client on console-fra.rpki-client.org