Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/335499ed-eb67-3852-b326-23208444e6f7.roa
File:                     335499ed-eb67-3852-b326-23208444e6f7.roa (raw, json)
Hash identifier:          LH80/HgxGN8GChBTtykuz/dCYoUSEGWj6f+dmLlkCNI=
Subject key identifier:   89:FE:E7:ED:8E:29:9B:E4:B8:09:86:C0:F3:A3:80:FD:38:19:58:CA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B1D13D9DE91CE8F4B3D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/335499ed-eb67-3852-b326-23208444e6f7.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        97.89.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:1d:13:d9:de:91:ce:8f:4b:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=58600ecb-e70b-4020-a5af-263502cd2fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:63:03:9b:ae:74:a2:c5:c4:a7:17:86:b1:
                    80:67:67:2d:6e:89:48:63:3a:ba:94:e4:a7:9d:af:
                    e2:99:ba:0b:b2:b0:8f:44:4b:7e:be:2a:a1:67:b7:
                    e7:48:dd:73:68:14:20:6c:aa:72:a8:aa:9a:e7:de:
                    b3:41:8b:5c:60:f4:ef:79:d2:27:ee:f5:f9:b5:af:
                    99:72:06:f1:8e:cf:90:73:03:fa:48:f4:65:ea:2e:
                    e6:be:ec:7b:ba:b4:ca:2f:f3:2f:e5:c0:b6:66:f1:
                    61:db:2d:b6:6c:62:2f:76:59:8d:e4:c9:2e:d4:3c:
                    34:5b:57:ca:ad:88:b6:0b:90:ae:8b:f1:3e:22:a6:
                    f8:ef:1d:41:ea:2e:09:27:8f:c5:1c:77:f9:dc:ff:
                    c9:12:51:7d:0c:59:0e:a8:4a:c0:fd:4c:fd:d7:d5:
                    a1:15:d2:53:2e:2d:90:97:d3:45:29:a1:35:e2:08:
                    38:f1:09:c8:5c:6a:dc:a1:ee:a6:5c:b0:06:77:5f:
                    ac:be:a2:bf:0b:49:71:63:d8:bd:f8:3d:c7:f2:71:
                    01:5c:4c:e8:2d:5d:38:a9:ab:5b:76:bc:4b:94:cc:
                    a8:a1:f0:f2:7a:08:42:ec:51:c1:19:06:47:73:df:
                    3d:58:85:67:dd:b7:f5:20:ee:13:f9:d2:2c:0b:78:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FE:E7:ED:8E:29:9B:E4:B8:09:86:C0:F3:A3:80:FD:38:19:58:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/335499ed-eb67-3852-b326-23208444e6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.89.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c3:dd:fb:0f:a3:6f:c7:88:f4:56:f8:d5:fe:fa:86:04:32:
         c8:52:3d:6d:2d:c1:89:6d:ab:db:d7:d2:45:21:66:24:0a:fd:
         a9:69:36:9c:32:cf:01:cd:82:e1:47:aa:81:a5:a0:33:87:c3:
         10:e2:0e:93:0b:76:d9:b0:aa:0f:ed:ca:8e:a2:25:14:aa:21:
         85:3f:34:cb:87:b4:16:2f:4f:36:ea:eb:20:82:9e:73:9e:a6:
         31:c9:81:0c:e2:3a:60:55:b9:fe:ca:ed:cb:85:e6:12:08:7d:
         98:d4:2b:21:3d:b1:8d:99:a1:3f:f5:ea:91:43:9a:f7:f5:a6:
         3c:20:34:2e:56:cb:a4:18:f4:7b:23:52:ec:5e:cb:fd:49:bd:
         4c:4b:a3:9f:a5:b4:a0:ab:51:10:63:20:96:74:b0:c0:a9:1a:
         05:2d:0b:02:a4:d9:33:b7:0a:3d:23:f7:33:ce:0c:45:66:2e:
         99:89:a2:91:e7:fe:9b:69:f8:3e:2e:32:74:5c:01:92:09:57:
         9f:d1:e1:20:37:6e:5d:eb:3b:57:19:9f:0e:46:36:37:7d:37:
         99:84:45:c1:dd:ff:e1:33:a6:95:c7:03:54:a7:ab:2f:e3:37:
         60:a1:40:86:7e:3f:26:51:fa:e6:ec:6a:30:48:d1:01:8c:04:
         54:65:cc:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCx0T2d6Rzo9LPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NTg2MDBlY2ItZTcwYi00MDIwLWE1YWYtMjYzNTAyY2QyZmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMNjA5uudKLFxKcXhrGAZ2ctbolIYzq6lOSn
na/imboLsrCPREt+viqhZ7fnSN1zaBQgbKpyqKqa596zQYtcYPTvedIn7vX5ta+Z
cgbxjs+QcwP6SPRl6i7mvux7urTKL/Mv5cC2ZvFh2y22bGIvdlmN5Mku1Dw0W1fK
rYi2C5Cui/E+Iqb47x1B6i4JJ4/FHHf53P/JElF9DFkOqErA/Uz919WhFdJTLi2Q
l9NFKaE14gg48QnIXGrcoe6mXLAGd1+svqK/C0lxY9i9+D3H8nEBXEzoLV04qatb
drxLlMyoofDyeghC7FHBGQZHc989WIVn3bf1IO4T+dIsC3h9ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIn+5+2OKZvkuAmGwPOjgP04GVjKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzM1NDk5ZWQtZWI2Ny0z
ODUyLWIzMjYtMjMyMDg0NDRlNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYVnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjD3fsPo2/HiPRW+NX++oYEMshSPW0twYltq9vX0kUhZiQK/alpNpwy
zwHNguFHqoGloDOHwxDiDpMLdtmwqg/tyo6iJRSqIYU/NMuHtBYvTzbq6yCCnnOe
pjHJgQziOmBVuf7K7cuF5hIIfZjUKyE9sY2ZoT/16pFDmvf1pjwgNC5Wy6QY9Hsj
Uuxey/1JvUxLo5+ltKCrURBjIJZ0sMCpGgUtCwKk2TO3Cj0j9zPODEVmLpmJopHn
/ptp+D4uMnRcAZIJV5/R4SA3bl3rO1cZnw5GNjd9N5mERcHd/+EzppXHA1Snqy/j
N2ChQIZ+PyZR+ubsajBI0QGMBFRlzEE=
-----END CERTIFICATE-----
Generated at Sun May 11 19:21:12 2025 by rpki-client