Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5d533ee8-e5e6-3a4c-95a1-97dca9ca15d4.roa
File:                     5d533ee8-e5e6-3a4c-95a1-97dca9ca15d4.roa (raw, json)
Hash identifier:          WTy/oio5VFFwqH1hhkhEvR3hcR4I5bWsVN9++FgRJWg=
Subject key identifier:   D2:E5:FA:68:BC:72:06:8D:03:C3:70:20:5E:F6:6C:07:6E:F1:F5:84
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AA1BFD974B64D7FBA9B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5d533ee8-e5e6-3a4c-95a1-97dca9ca15d4.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        97.80.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:a1:bf:d9:74:b6:4d:7f:ba:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b71788c7-02cf-4e46-9e93-c2fee7413f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:4a:68:37:17:de:39:f5:d8:b3:ff:af:a9:
                    d5:90:d4:3b:c2:5f:19:07:dd:0a:ce:2f:1e:ef:c3:
                    24:72:5c:c0:25:a8:ce:dc:09:f1:9c:b4:3f:28:ff:
                    f3:40:ee:12:5b:9a:71:85:28:9d:5d:90:0d:a1:f8:
                    64:22:cc:c1:cc:9a:4a:08:fe:33:a0:e2:f3:5d:ac:
                    26:74:f2:ec:67:9d:b7:f4:95:8c:d2:cd:a7:59:4b:
                    c8:3d:0a:45:f5:80:02:56:ef:8a:75:47:09:9b:1e:
                    55:3f:02:7e:4a:df:5a:da:b2:4f:2a:09:77:43:a1:
                    f8:e6:d3:33:40:03:ce:28:9a:55:8f:48:d5:37:0c:
                    de:84:15:36:1f:11:d8:fc:65:d7:c9:37:0f:e6:03:
                    f8:2e:ee:14:a6:76:9a:ad:e9:a5:58:7b:0c:aa:fd:
                    0a:11:08:31:4b:36:63:f5:9a:3c:1c:14:ef:05:69:
                    80:a1:e2:72:f5:4a:5b:36:f7:ff:89:21:ff:29:df:
                    c4:75:51:62:7e:70:77:61:3a:ac:5e:1b:98:3a:3b:
                    ef:ff:71:f3:c0:28:03:7d:8a:c2:2b:db:6e:92:c7:
                    9b:93:78:7f:cc:46:9a:4c:28:48:6b:c9:4a:cf:a9:
                    29:8c:65:37:43:3b:a7:23:ac:34:11:ba:42:06:6a:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E5:FA:68:BC:72:06:8D:03:C3:70:20:5E:F6:6C:07:6E:F1:F5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5d533ee8-e5e6-3a4c-95a1-97dca9ca15d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.80.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:f6:57:f0:0a:0c:03:25:b2:0f:94:3f:14:85:28:d3:cf:
         d3:4e:f6:d4:49:75:6d:3f:85:de:40:e4:d0:03:64:c2:e1:f2:
         44:d2:25:14:d6:8f:e7:33:45:c1:94:0e:3b:61:8e:d8:bf:78:
         88:d9:0f:dd:9b:a9:2b:7a:69:38:3f:3f:cb:e8:eb:4c:46:0b:
         2b:24:f1:1f:57:a4:30:63:91:67:8a:dd:60:55:28:c8:af:4c:
         27:de:29:66:83:b6:73:d6:24:61:93:76:98:92:ea:7a:83:c1:
         0c:e2:50:e1:d0:25:dc:e1:f9:52:f2:bf:b5:5b:6b:12:24:0a:
         6d:fe:a5:e5:1a:2e:ac:76:73:6a:24:ca:86:c8:7d:43:34:2c:
         9d:a5:51:61:a5:dd:89:41:b9:2a:e2:7f:8a:36:9b:6e:24:52:
         0c:ec:6c:69:80:62:3b:30:92:f1:d7:db:83:14:36:a4:9b:b3:
         43:2b:1b:54:df:01:97:36:00:4f:cf:a3:fc:33:16:f2:e9:cf:
         c6:28:c3:e5:8e:ee:85:63:e2:b5:c8:61:6b:46:63:c0:4d:cd:
         7d:a5:77:96:68:f9:b8:3c:07:91:4e:bb:49:09:db:39:84:1a:
         df:8d:64:1c:13:7a:ad:e9:46:bd:7b:d9:1f:07:53:0e:0f:77:
         4b:07:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:41:12 2025 by rpki-client