Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/280b4ce9-7263-3292-8eed-95e6484d7c3f.roa
File:                     280b4ce9-7263-3292-8eed-95e6484d7c3f.roa (raw, json)
Hash identifier:          ZmJ9M3ljFmm0SP9XQRyZOytDxFOD6ass21dC5Qghb7E=
Subject key identifier:   CE:99:ED:DC:07:E6:DF:38:5B:CA:11:49:1E:D2:5E:DB:BA:83:9E:A8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A9DFAEAACDA0B00D1BDC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/280b4ce9-7263-3292-8eed-95e6484d7c3f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        97.88.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:9d:fa:ea:ac:da:0b:00:d1:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=838b8629-a4e6-4ab0-bc34-a7dc38502ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:5e:44:16:ef:bb:7e:23:04:43:92:c2:0a:
                    d2:ac:d8:5f:36:7c:cb:43:66:90:45:2c:33:e1:03:
                    e2:14:aa:9c:84:bc:1d:1f:90:dc:6f:1f:cc:57:3c:
                    22:f4:55:19:64:8b:42:72:e6:c9:d5:ba:24:82:ec:
                    05:ce:35:8e:4e:ac:14:8d:d4:ed:87:f1:08:06:86:
                    ba:3a:7c:98:bd:89:ba:8d:a0:67:b8:56:24:29:63:
                    c3:d4:00:12:95:7f:98:a9:93:1b:c3:82:42:ec:10:
                    db:19:be:ca:4f:79:ca:1f:6d:4b:ec:78:46:25:4b:
                    5a:53:24:3a:e8:72:aa:60:37:80:a7:81:bb:29:59:
                    29:1e:7a:08:bd:35:be:a9:c9:8b:dd:bd:50:c6:51:
                    61:f7:7a:ed:e0:66:bf:94:de:51:d6:59:e4:6a:be:
                    92:df:d3:81:fd:c8:3d:7b:18:1a:ad:99:67:0a:c3:
                    33:d0:4f:45:08:ef:c6:38:ac:4d:11:06:0a:26:e1:
                    9b:49:c9:c1:42:21:06:ed:35:59:54:48:4f:d1:d7:
                    b9:0f:e3:d8:16:ee:4e:90:09:1f:d0:89:14:93:b2:
                    f5:4a:67:4a:59:00:67:50:9f:aa:85:41:61:42:82:
                    5a:26:ef:56:e6:bf:8d:d8:6a:5b:65:73:29:93:4c:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:ED:DC:07:E6:DF:38:5B:CA:11:49:1E:D2:5E:DB:BA:83:9E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/280b4ce9-7263-3292-8eed-95e6484d7c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.88.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:72:96:91:fd:71:db:5f:ba:a5:e5:c3:fc:e3:b4:d6:f0:96:
         88:c2:0f:d5:a2:e5:15:e3:53:fb:01:90:97:ba:47:dc:e8:06:
         40:18:06:a0:10:42:26:4f:49:7e:59:84:5b:52:ba:55:bd:f9:
         5d:fd:f7:b2:28:01:81:63:f5:6f:7d:d4:13:68:3d:8d:33:87:
         47:5f:c0:34:3b:64:d0:15:5c:21:13:0e:a5:93:01:c1:2f:1d:
         88:0b:24:a5:ac:50:b6:06:8f:4f:c6:3a:e9:af:ad:a2:52:4f:
         5e:8a:26:f0:d2:3c:61:56:33:d6:5e:2d:66:4d:7d:1d:9d:48:
         50:dc:de:0b:d2:42:d2:7f:e5:3d:15:a3:26:b6:61:96:4d:2c:
         48:67:79:01:1b:9a:90:4a:69:91:34:4f:5b:dc:78:8a:15:72:
         6c:cb:5f:84:66:ae:2c:7a:33:5f:5e:a0:8f:19:a4:9d:1f:67:
         95:2e:47:64:68:74:17:a4:d7:d5:9e:4b:1f:0b:d2:c2:81:a2:
         ca:e5:c7:b9:de:e6:c9:b8:a7:ef:b0:ae:f0:66:d3:03:aa:fc:
         a0:fc:5d:7f:d2:ba:a9:73:51:a5:22:89:84:a0:fc:98:66:9c:
         63:fa:3f:fc:f3:f8:d3:31:19:e2:56:13:56:5e:c7:ad:cf:b3:
         ce:df:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:43:16 2025 by rpki-client