Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8cb9d24d-e0b9-3136-ab3b-040a234c8191.roa
File:                     8cb9d24d-e0b9-3136-ab3b-040a234c8191.roa (raw, json)
Hash identifier:          TFJxAdbj96qvv2UdPqK0I/B30OfE5IfMmk0VMJgmhVo=
Subject key identifier:   65:5A:09:EE:6B:97:10:10:D9:FD:5F:4E:3C:45:E5:C1:95:B2:90:FC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858393A67BF84DF7F77891A85BC80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8cb9d24d-e0b9-3136-ab3b-040a234c8191.roa
Signing time:             Fri 12 Mar 2021 05:00:00 +0000
ROA not before:           Fri 12 Mar 2021 05:00:00 +0000
ROA not after:            Fri 05 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        97.87.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:3a:67:bf:84:df:7f:77:89:1a:85:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 12 05:00:00 2021 GMT
            Not After : Mar  5 05:00:00 2027 GMT
        Subject: CN=efd31471-6194-4bca-ab52-a8299534eb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:85:92:a3:19:25:1b:a3:74:48:cc:5f:7c:81:
                    bc:c7:8a:9f:c5:58:f4:b5:f6:34:1c:be:2a:1b:01:
                    3c:49:df:f5:81:23:c2:d5:32:b5:2f:47:4c:20:3d:
                    23:32:e5:1e:35:97:ea:85:d9:dd:44:d0:76:ec:3e:
                    b3:26:eb:9f:2d:f5:81:47:cd:7e:6a:e5:10:2f:e8:
                    31:3c:e7:99:07:e6:be:72:42:14:3d:d1:6b:39:23:
                    e3:3a:55:8b:8a:19:cb:35:8d:b6:38:4f:11:60:31:
                    e7:1b:f2:5d:6c:c4:56:94:bb:3c:d5:d5:14:57:99:
                    47:a2:72:b1:cc:c2:4f:eb:68:00:20:c2:ce:d4:27:
                    a9:af:50:34:06:23:e8:89:b9:d0:fc:38:be:28:24:
                    f8:61:4d:ba:66:0e:a1:d0:2a:ef:8a:72:3f:41:76:
                    5c:26:be:63:78:02:cc:42:df:dc:68:b0:26:a3:aa:
                    40:b8:ef:33:4e:23:fb:3f:c1:cd:4b:91:70:be:58:
                    b7:89:2e:9e:a9:69:02:64:3b:fe:e1:d0:31:bb:6e:
                    e9:fe:91:2a:6d:5b:e6:69:68:f0:e1:30:96:23:79:
                    e1:00:3f:c9:99:fe:74:b2:84:11:b5:c8:98:55:6a:
                    50:6f:f1:c1:61:a4:53:35:fe:2a:14:77:68:0f:9f:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5A:09:EE:6B:97:10:10:D9:FD:5F:4E:3C:45:E5:C1:95:B2:90:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8cb9d24d-e0b9-3136-ab3b-040a234c8191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.87.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:ed:83:4a:78:ae:2f:93:76:b0:1c:6f:a2:da:4f:8c:4c:77:
         d4:31:33:cc:08:5b:46:c2:da:f9:e9:b7:e3:66:62:14:bf:d4:
         63:33:a1:e0:7d:59:bc:b3:14:f9:8f:43:9c:fd:9f:a5:eb:d3:
         9a:f6:18:0a:a2:2f:24:bc:87:74:39:b5:ad:e7:2a:f2:86:d0:
         fe:b5:03:b5:db:da:e8:2d:7c:87:5b:f0:f2:47:1f:cd:45:3b:
         57:0e:c0:57:c0:16:e2:76:a2:c0:75:48:c5:53:0a:23:73:cf:
         6b:32:38:83:c6:17:41:d6:21:aa:0e:96:25:19:c1:e4:5d:b3:
         88:50:2e:6f:b0:36:dc:d0:32:0b:ee:9e:7c:9f:0c:2c:75:04:
         85:38:7c:c2:2a:5a:8f:f0:5d:43:0e:55:12:2b:0c:69:a3:15:
         9a:88:68:e9:95:d5:f0:a9:59:35:df:10:c7:73:58:47:4b:22:
         9c:1c:57:b5:cc:33:a0:03:db:63:fc:64:af:09:5d:e3:f7:89:
         8c:d3:2c:8f:64:91:53:88:7b:9e:62:14:d7:0e:84:cb:d6:f4:
         06:36:88:12:a0:ba:21:e6:01:22:1a:11:36:c3:3b:21:d4:de:
         13:96:5e:bf:a1:f8:de:bd:37:e7:c1:b1:84:8e:a3:a5:c1:7e:
         0b:97:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:38:12 2024 by rpki-client on console-fra.rpki-client.org