Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c79e76c3-408c-3e50-82aa-db6a5416d6e0.roa
File:                     c79e76c3-408c-3e50-82aa-db6a5416d6e0.roa (raw, json)
Hash identifier:          LOZhaHw9jkwn3T1ae1/ZKxSWbUucKj7PBiw9eQwKTV8=
Subject key identifier:   21:B7:13:48:B8:08:83:28:EE:92:3D:1B:7A:EB:6B:D1:F9:90:33:17
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A17A5A1F72B5B3AA5FAA40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c79e76c3-408c-3e50-82aa-db6a5416d6e0.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        97.86.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:7a:5a:1f:72:b5:b3:aa:5f:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a7d1a182-5e85-4eea-9e53-b7c3d2c7ea4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:18:4d:30:b5:db:bf:c5:b0:21:1e:21:17:
                    66:1f:26:ea:70:f3:9e:5f:00:28:53:f4:c0:fb:c3:
                    4a:88:26:5a:af:5b:f1:26:e3:44:52:e6:7d:77:c9:
                    5a:e1:13:07:de:d3:68:e3:2c:52:82:b4:c4:2c:d2:
                    f3:b9:a4:2d:f2:58:b0:38:a1:0e:df:51:9d:82:f7:
                    62:ef:b3:34:24:6a:ae:01:6b:41:8c:d4:0c:f0:60:
                    1a:0b:a6:93:4c:0f:bc:a4:b8:c2:76:3e:23:7d:49:
                    7a:e8:da:0b:8b:44:94:8f:3c:c5:fa:ff:0c:cf:a4:
                    6f:2c:5d:3f:73:b5:5f:2f:2c:3e:5d:4a:61:cf:f9:
                    ec:aa:41:6f:1b:70:2e:14:20:a5:58:7b:32:7c:3e:
                    85:1d:0f:f6:8d:ce:d7:15:95:3c:31:36:99:eb:e7:
                    11:b0:da:9f:43:2c:67:41:0b:dd:6e:96:e2:4a:4b:
                    19:d6:55:5a:ce:6f:73:68:17:b8:84:b5:43:d6:f7:
                    0f:a8:34:ab:ae:3f:e9:26:60:80:3b:f2:04:3e:03:
                    54:1f:97:b7:f5:53:7d:d5:ea:be:2d:7d:a5:67:87:
                    ac:a8:45:bc:ac:a4:0b:01:23:66:14:4e:42:38:dc:
                    98:63:f7:27:21:15:a0:df:bb:16:28:79:8b:6e:b0:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B7:13:48:B8:08:83:28:EE:92:3D:1B:7A:EB:6B:D1:F9:90:33:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c79e76c3-408c-3e50-82aa-db6a5416d6e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.86.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:35:d1:d7:7e:95:b7:63:4f:8c:e9:55:db:0b:ba:a5:2d:47:
         0f:0e:fd:2c:96:9c:c2:cf:8d:74:fc:c9:54:8d:37:bc:71:2a:
         d0:45:c7:d7:7b:69:5f:ca:02:ba:0e:ac:bd:f7:f4:40:9e:10:
         64:4f:f2:02:cf:55:6f:6f:9b:f5:fa:12:6a:8a:83:9a:24:e2:
         58:36:67:93:7e:49:c8:c9:a3:56:6a:be:d1:4b:66:87:c5:50:
         17:c2:e8:5f:82:ec:49:d5:78:b1:11:3b:88:29:fb:d4:f6:e1:
         8c:0e:f2:79:34:9d:53:ce:36:91:8c:a6:a4:92:60:1f:79:a9:
         3e:d2:2f:33:f7:32:41:0e:bf:ed:e0:e6:dc:f6:9b:b0:41:0c:
         5c:a2:47:8f:fa:f3:8f:75:82:5e:b3:b8:e8:4a:cd:13:03:3e:
         3c:9e:21:43:b6:6c:bc:b3:6d:9f:79:e3:74:9e:1e:5d:26:2e:
         fe:40:22:c2:f6:dc:49:a9:20:e1:de:57:b9:e7:fb:ef:bf:10:
         20:aa:c9:44:fa:5e:cc:da:9c:e4:95:cc:e0:28:77:0f:82:6d:
         ef:c0:41:3d:22:d1:96:ee:b0:e6:6f:4c:63:4c:e3:0d:7a:14:
         84:20:56:bd:b3:d6:68:7d:6f:74:08:36:d1:b6:55:89:38:c5:
         ef:ff:10:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:01 2024 by rpki-client on console-ams.rpki-client.org