Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a545ede2-54f4-3975-a926-ea537fedebf1.roa
File:                     a545ede2-54f4-3975-a926-ea537fedebf1.roa (raw, json)
Hash identifier:          TJxjUNiPZrKa00Nqx5T9nJ2GhiGKaTMc7TXiv9CjTVc=
Subject key identifier:   A8:D1:50:DB:12:2D:28:81:90:02:69:0B:DB:E2:E1:21:3C:AD:2E:D1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AA2B3471604C3B64D1A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a545ede2-54f4-3975-a926-ea537fedebf1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        97.91.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:a2:b3:47:16:04:c3:b6:4d:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=bc91f6a3-08ef-4247-a0f5-b99f163be1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:45:6c:07:f0:81:b8:37:df:2c:8b:97:16:ba:
                    86:ac:67:02:d2:84:87:e0:58:95:bc:20:8d:1c:5d:
                    62:1f:48:28:e2:00:2c:de:2c:e6:69:0e:70:ca:10:
                    16:4d:d6:56:03:b2:45:a0:29:a7:23:eb:00:5e:98:
                    e6:ca:9a:fe:9a:03:40:ec:48:a0:f1:58:50:35:74:
                    4d:bf:46:57:e2:16:07:b5:34:03:e8:9c:a0:38:d0:
                    b8:87:e4:ad:b0:9a:f0:90:03:70:9d:97:0f:9f:12:
                    ba:60:de:d6:9b:7c:70:20:62:7f:35:86:81:f3:1a:
                    d2:25:10:5e:86:04:c3:90:83:e9:72:56:7c:dd:d8:
                    e4:ae:41:2e:aa:06:fd:b7:67:2e:a6:f8:e7:28:71:
                    e1:37:63:eb:f3:ad:11:a8:91:37:1d:bb:bf:cc:27:
                    41:c9:e4:31:9c:a0:8a:06:23:83:d5:6e:35:8b:bd:
                    1d:1f:2c:1f:84:9a:ca:b4:12:31:2e:27:f5:50:d5:
                    f9:08:05:e9:09:aa:1c:ac:87:95:b4:e4:80:82:fd:
                    e2:0a:59:fc:c1:e3:4a:72:51:ce:b3:c1:35:1a:48:
                    90:a3:4d:2d:62:e8:2f:fb:cf:fb:4d:33:28:24:93:
                    ff:51:e2:4f:61:12:65:03:de:08:1f:d8:19:34:52:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D1:50:DB:12:2D:28:81:90:02:69:0B:DB:E2:E1:21:3C:AD:2E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a545ede2-54f4-3975-a926-ea537fedebf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.91.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a4:14:af:1c:e1:86:0f:6d:c9:97:93:e2:1e:58:25:ef:c5:
         65:29:27:99:04:77:ce:31:cb:f7:fe:60:c0:05:89:eb:75:17:
         df:b4:85:be:d1:50:d6:be:6c:61:85:ff:7f:2e:24:46:ed:d6:
         7a:d0:0e:33:15:55:6b:74:cc:24:43:a6:46:f7:28:5b:0c:22:
         41:3f:29:af:0a:7a:1a:e7:2c:17:f5:dd:a6:7c:17:b6:72:ce:
         49:46:fc:4a:51:01:05:13:86:5b:f7:02:00:30:f3:db:35:4c:
         3a:fb:83:c0:65:d8:55:e0:fe:64:0d:9b:c0:ac:45:9d:d9:1d:
         5f:c7:af:34:84:7b:41:7f:00:a1:d3:85:00:88:b6:15:6a:fb:
         ba:40:c5:b5:47:b5:2f:d2:10:f9:b6:98:53:f6:58:c6:5e:66:
         81:e5:4e:46:97:19:b3:9d:ea:b7:a9:18:28:ae:c6:77:9f:16:
         6d:3c:76:3f:94:a1:bb:f1:21:15:20:90:52:97:69:e6:4d:69:
         9a:49:d9:3b:12:8b:ce:14:78:77:15:69:d7:9c:0f:27:50:32:
         6f:e4:94:97:cf:53:19:17:f8:b5:c0:c1:64:2d:04:09:72:ca:
         e2:69:b1:68:93:1e:db:0f:21:2e:93:60:cc:d9:b6:fc:c5:82:
         a8:ee:9a:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCqKzRxYEw7ZNGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YmM5MWY2YTMtMDhlZi00MjQ3LWEwZjUtYjk5ZjE2M2JlMWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EVsB/CBuDffLIuXFrqGrGcC0oSH4FiVvCCN
HF1iH0go4gAs3izmaQ5wyhAWTdZWA7JFoCmnI+sAXpjmypr+mgNA7Eig8VhQNXRN
v0ZX4hYHtTQD6JygONC4h+StsJrwkANwnZcPnxK6YN7Wm3xwIGJ/NYaB8xrSJRBe
hgTDkIPpclZ83djkrkEuqgb9t2cupvjnKHHhN2Pr860RqJE3Hbu/zCdByeQxnKCK
BiOD1W41i70dHywfhJrKtBIxLif1UNX5CAXpCaocrIeVtOSAgv3iCln8weNKclHO
s8E1GkiQo00tYugv+8/7TTMoJJP/UeJPYRJlA94IH9gZNFL3zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKjRUNsSLSiBkAJpC9vi4SE8rS7RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTU0NWVkZTItNTRmNC0z
OTc1LWE5MjYtZWE1MzdmZWRlYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYVt3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIikFK8c4YYPbcmXk+IeWCXvxWUpJ5kEd84xy/f+YMAFiet1F9+0hb7R
UNa+bGGF/38uJEbt1nrQDjMVVWt0zCRDpkb3KFsMIkE/Ka8KehrnLBf13aZ8F7Zy
zklG/EpRAQUThlv3AgAw89s1TDr7g8Bl2FXg/mQNm8CsRZ3ZHV/HrzSEe0F/AKHT
hQCIthVq+7pAxbVHtS/SEPm2mFP2WMZeZoHlTkaXGbOd6repGCiuxnefFm08dj+U
obvxIRUgkFKXaeZNaZpJ2TsSi84UeHcVadecDydQMm/klJfPUxkX+LXAwWQtBAly
yuJpsWiTHtsPIS6TYMzZtvzFgqjumhs=
-----END CERTIFICATE-----
Generated at Fri May 9 23:44:33 2025 by rpki-client