Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cff47f45-5cab-3cd4-bba4-fe427394af11.roa
File:                     cff47f45-5cab-3cd4-bba4-fe427394af11.roa (raw, json)
Hash identifier:          TvdY8aMbsMdrU2xioY1vRzSL5WDSaQSF6U9pIdcIAzQ=
Subject key identifier:   73:78:9E:F9:BA:F2:25:B9:31:44:2C:2C:46:E6:B5:91:C4:AA:19:20
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0FA33D246B677BC970B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cff47f45-5cab-3cd4-bba4-fe427394af11.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        97.82.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:fa:33:d2:46:b6:77:bc:97:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a22d9ab6-400f-4454-b435-762a0ded6dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:10:bd:24:1e:94:e2:f5:5d:b2:45:09:3d:
                    d9:43:44:1a:03:f0:5f:76:44:a2:a6:47:a1:a7:cf:
                    63:71:89:ea:fb:61:eb:cd:9c:b8:d1:35:9f:c3:10:
                    72:5e:86:65:db:49:7e:4a:70:b4:1b:71:b9:6b:9c:
                    cd:80:6f:b2:5d:43:7a:45:db:d6:d8:a1:0b:d4:da:
                    9f:91:ff:1e:dd:aa:ad:ac:a8:29:2c:74:cb:3c:ed:
                    a1:4a:90:70:7d:52:a7:2b:e3:58:5f:1f:de:66:7d:
                    ab:31:20:17:c3:b0:6c:c6:9b:22:ab:68:64:2c:a8:
                    39:5e:41:b9:9a:26:4e:df:85:4c:d8:a4:b7:b6:23:
                    38:08:07:84:e6:f6:1c:07:ef:3e:4a:93:df:ae:f5:
                    bf:05:89:56:14:94:08:43:16:91:3b:4e:a8:a5:98:
                    46:fd:61:8b:f9:c6:cb:e1:0b:e1:fe:53:af:81:0f:
                    fd:13:94:87:42:4c:0d:f9:ad:0b:2e:ea:dd:cf:20:
                    7c:89:a1:89:cd:1b:c0:76:ab:22:99:c4:21:48:16:
                    1e:62:c2:ad:ee:d6:96:df:aa:e1:6b:5b:8f:2f:2e:
                    08:4e:18:d3:8d:72:d2:1b:93:e2:b6:f3:f3:71:cd:
                    de:3b:de:69:c6:fa:da:bf:2e:fb:29:75:73:a0:79:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:78:9E:F9:BA:F2:25:B9:31:44:2C:2C:46:E6:B5:91:C4:AA:19:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cff47f45-5cab-3cd4-bba4-fe427394af11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.82.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:75:c9:7d:52:a4:12:bd:34:68:41:70:73:9b:aa:5b:95:5c:
         8d:9c:08:e5:62:93:26:55:9a:5a:53:9e:97:ac:f2:82:b2:a5:
         93:63:a3:57:5a:ac:c7:c4:fd:6e:f7:78:52:58:db:87:d3:3f:
         69:ef:82:db:02:51:36:71:3f:b7:c9:03:c2:c1:d8:bc:d5:b5:
         77:2b:44:ae:51:a1:07:71:1b:a5:13:e5:35:34:c3:dc:0b:c2:
         d0:9c:56:ce:17:57:75:e1:3d:11:08:57:16:2f:ba:4c:d7:51:
         3a:9a:37:0c:42:c2:42:d2:4e:7b:b0:c5:11:61:f3:70:53:1c:
         93:3e:1a:e9:85:ee:c4:01:08:3c:ca:88:af:c9:c0:f1:51:05:
         9f:3f:c8:21:d3:5d:20:b1:96:87:ec:0f:0d:b1:9d:69:3e:ce:
         e0:89:c8:2d:e5:3e:a2:43:b1:41:0f:da:56:02:3a:08:24:25:
         81:1a:2d:16:68:3f:cf:d1:dd:d5:bb:d3:a5:69:35:69:e6:d6:
         3d:51:72:2e:e8:f7:e2:23:6e:50:e2:ce:63:67:67:13:64:ca:
         c5:07:94:45:18:61:78:21:42:fb:4d:a0:bd:0c:e8:ce:ea:b2:
         1b:83:c2:0a:7a:aa:53:52:82:07:65:f2:8f:48:ee:cd:f0:27:
         d7:6f:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:21 2024 by rpki-client on console-fra.rpki-client.org