Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d962cd71-90b4-38c6-80cc-da22c2c88154.roa
File:                     d962cd71-90b4-38c6-80cc-da22c2c88154.roa (raw, json)
Hash identifier:          LjVjrJroMFTMrrKpRc4ntnjIuUNQfxodFl1cry4sxrQ=
Subject key identifier:   88:11:71:FD:D8:F9:9A:24:5E:A7:54:22:54:17:77:FD:3C:87:3C:4B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B2F0CA9A05C626C4CEB00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d962cd71-90b4-38c6-80cc-da22c2c88154.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        97.86.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:2f:0c:a9:a0:5c:62:6c:4c:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9475ab67-8f14-4d30-bf86-314fd7a0d623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:12:93:64:02:ad:88:e9:6e:d4:61:ac:ac:cb:
                    be:c7:be:5e:c0:35:d3:54:56:f1:86:15:07:74:89:
                    e9:fa:70:6f:fa:a6:10:31:ab:ba:de:89:b1:87:18:
                    90:6d:9e:81:9a:a3:a0:05:0e:d4:48:0f:3f:00:22:
                    a4:64:0c:b9:1d:fe:08:dd:34:ad:15:de:5d:d1:08:
                    14:5d:81:b7:80:d9:f7:70:02:38:ac:3b:2e:ee:4c:
                    c8:4b:9d:1a:2f:12:28:5c:fa:aa:3d:01:d5:4b:41:
                    35:48:fc:e2:53:64:a6:05:0e:1e:a0:fb:21:12:b9:
                    84:a5:47:30:00:68:be:39:14:bf:ba:ad:84:2a:01:
                    94:d8:c6:92:02:f7:f9:52:f9:9c:cc:da:c2:50:4f:
                    3b:57:f9:15:67:15:d3:64:c5:75:a1:51:48:55:bf:
                    58:f0:3d:87:4a:a9:6e:69:94:84:8b:60:dd:c3:aa:
                    f8:5c:7d:d9:17:a6:c4:80:6c:c3:8f:cd:12:9f:53:
                    ac:78:bb:d3:c0:d6:e5:b3:d0:48:bf:2a:99:dd:4c:
                    25:38:3c:16:83:9c:b1:53:5c:70:db:2b:54:cd:49:
                    ba:ee:3c:08:ff:ea:68:2b:ad:e3:e8:57:5e:bb:a9:
                    cd:55:d0:30:f3:5b:a2:44:0c:74:22:a6:1f:48:ca:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:11:71:FD:D8:F9:9A:24:5E:A7:54:22:54:17:77:FD:3C:87:3C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d962cd71-90b4-38c6-80cc-da22c2c88154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.86.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:c2:8b:d8:cd:a0:f3:ad:87:a0:0f:92:a3:d8:d4:2b:77:8d:
         c0:39:0d:de:1e:05:e0:6a:09:6e:bf:8b:5d:3e:ca:e2:5f:04:
         67:54:62:ba:d1:d9:95:ad:e0:82:f9:d5:8c:b4:23:6d:d3:d4:
         db:1e:17:fd:53:6f:53:a5:c0:1d:51:ee:1a:9f:be:5c:73:5c:
         d3:14:b0:37:ac:63:27:7f:e2:35:02:71:c1:51:e0:b9:11:6c:
         ca:f2:61:4d:a5:68:de:27:f8:93:c0:60:6f:58:ca:6f:14:a9:
         32:56:47:16:fc:f4:c8:86:51:13:2c:5a:33:28:a9:e8:3a:9c:
         54:fd:05:e1:ea:44:aa:6b:5c:e0:01:3e:8c:f1:0c:4d:6f:5a:
         e2:31:80:90:ce:1b:e5:da:67:c0:a1:d1:4c:6a:e0:1d:91:45:
         6e:07:ca:dc:3d:46:a2:0a:3f:98:fe:bf:10:71:e1:df:8f:e1:
         53:29:d7:6d:ec:a3:71:ca:10:d9:9d:b2:f3:3d:ca:62:9b:f4:
         6c:fe:5f:55:23:a2:ed:d5:71:17:65:e7:15:39:df:f0:66:d6:
         93:74:98:5f:d7:e7:bd:50:a7:e3:9f:6b:04:09:8e:51:a4:2f:
         67:e3:02:58:10:41:fc:93:d0:45:bc:5d:05:26:b4:85:a2:04:
         e2:10:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:37:11 2025 by rpki-client