Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9f099c9-e5a7-3f9e-a1bf-c370026b03b5.roa
File:                     d9f099c9-e5a7-3f9e-a1bf-c370026b03b5.roa (raw, json)
Hash identifier:          H0X+K/EDc+tGdWKzAGWyul7jk7E9nyHjzSWkqN7VxTY=
Subject key identifier:   8C:A7:70:F0:D7:57:65:70:74:0E:DB:AF:3D:6F:84:CD:74:79:C2:B8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858393A67C5C3807A1D924D8D3720
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9f099c9-e5a7-3f9e-a1bf-c370026b03b5.roa
Signing time:             Fri 12 Mar 2021 05:00:00 +0000
ROA not before:           Fri 12 Mar 2021 05:00:00 +0000
ROA not after:            Fri 05 Mar 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        97.91.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:3a:67:c5:c3:80:7a:1d:92:4d:8d:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 12 05:00:00 2021 GMT
            Not After : Mar  5 05:00:00 2027 GMT
        Subject: CN=5296c1dc-84a4-459f-8fa1-85d2740e3f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:49:65:19:47:06:ee:da:fd:10:bb:85:00:
                    01:c0:81:03:33:a8:08:e1:09:4a:9a:86:10:e8:92:
                    ba:ad:f2:94:83:15:81:91:80:2c:e0:05:52:15:b8:
                    2a:a3:88:17:16:8e:90:69:db:ac:63:e0:14:d3:71:
                    85:e6:6d:86:e2:c8:9a:95:84:f2:3f:87:3c:79:3c:
                    d0:8f:22:da:f6:40:80:b7:10:0f:35:9a:a0:c8:6e:
                    32:b8:fe:8b:b8:81:0d:10:9f:1e:e1:96:76:08:f8:
                    ea:60:05:2c:cd:f3:0f:dc:d0:02:b7:d4:c1:d0:a4:
                    3f:70:06:88:1f:3f:10:dd:97:89:80:44:90:95:85:
                    01:60:b1:e6:be:99:b1:48:f3:d6:6c:d7:77:54:d9:
                    96:aa:12:f6:62:f4:2c:76:2a:ef:8e:24:9b:28:3f:
                    04:5b:0b:70:da:7e:61:bf:c6:9e:34:5d:de:ff:e1:
                    75:f9:47:dd:f1:55:e9:27:d2:1b:fc:23:c8:3f:42:
                    1f:e8:41:4c:49:8e:3c:40:6c:cc:43:0f:68:2b:19:
                    9e:88:c9:ad:4a:6c:03:3f:53:c0:9f:68:44:c9:b3:
                    9d:41:eb:28:84:d2:9a:eb:69:6e:e1:a7:6d:36:5a:
                    e9:64:38:23:d7:ec:2e:fd:24:51:78:a2:ff:92:d8:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A7:70:F0:D7:57:65:70:74:0E:DB:AF:3D:6F:84:CD:74:79:C2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d9f099c9-e5a7-3f9e-a1bf-c370026b03b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.91.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:54:d9:42:02:78:f1:9e:17:91:47:ec:ec:d7:27:42:41:ca:
         28:1b:27:a2:ef:35:b5:7e:a5:c7:bf:93:8e:6b:f2:25:ed:b9:
         66:fb:18:c7:9a:9b:da:eb:3f:ca:89:5e:31:89:7a:b1:e8:72:
         25:89:05:45:88:a2:7b:54:0b:a8:1a:aa:97:cd:de:ce:e9:c2:
         e5:43:7f:ef:7e:08:e3:8e:51:89:f1:e1:58:4b:3f:61:d3:21:
         6d:98:27:46:e3:48:30:fc:96:f7:ca:66:0b:49:21:4e:38:5f:
         86:77:2d:5b:fa:9d:b0:b5:2a:76:94:14:0c:9d:73:42:a0:6b:
         15:27:2d:64:92:c3:9e:0c:85:0f:04:61:0f:ee:1e:ad:85:50:
         bf:ad:9c:54:1f:6d:f4:b8:ac:48:7f:cf:f4:cb:a3:33:bf:97:
         94:6b:2a:6c:20:e3:8c:2e:3f:48:26:00:f8:58:6e:de:3a:06:
         e0:f0:74:09:65:b5:5b:fd:4a:bf:00:bf:25:9c:c6:fa:b2:78:
         3f:a5:62:d4:00:2e:6d:0e:12:a6:a3:0c:33:b7:68:b0:0f:73:
         78:13:f7:e6:f5:3b:4e:b8:8f:f4:c7:37:e9:0d:06:2d:76:96:
         d4:08:ff:6a:43:c0:00:dc:f7:5f:10:38:b4:bd:14:89:ae:07:
         6f:94:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:22 2024 by rpki-client on console-fra.rpki-client.org