Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
File:                     0da84f32-a3b7-325e-8e88-4a1bb36616de.roa (raw, json)
Hash identifier:          IXkNdyBczOcMn5jgCeQ/ymsuHrNLbexB3UgR5Fj1Lz8=
Subject key identifier:   C5:9F:C3:D7:06:7D:11:3D:ED:C9:C9:37:DE:CC:CF:94:78:20:81:AF
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F43285845E72923B8550055A37430AF60
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     7018
IP address blocks:        137.155.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:23:b8:55:00:55:a3:74:30:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=c9fdcdbb-04f0-4f10-b150-2e3183a0b4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:1b:b2:53:60:80:2f:8a:e8:db:39:bc:8d:
                    ca:70:36:50:f6:9e:db:2f:d3:49:88:6e:e7:32:c1:
                    ba:11:d9:cf:c1:31:7e:22:d0:48:c2:f5:a0:f1:a2:
                    bd:41:4c:5e:58:64:62:dc:66:ff:78:c9:31:21:d3:
                    05:e4:85:0c:5f:76:32:88:b9:1f:d5:3a:e4:65:80:
                    2b:1d:82:79:d4:40:da:cf:af:04:b8:4d:dd:d8:69:
                    b4:e9:57:01:6c:3b:ff:e5:8c:bf:74:01:38:ba:b2:
                    ec:cf:4f:65:e0:01:14:53:9b:2c:38:3a:cb:ee:d5:
                    c3:5a:6c:4b:7a:a4:21:78:46:42:13:69:28:45:d2:
                    0f:84:6d:b7:6c:9a:92:18:93:8c:9d:ee:bf:74:76:
                    82:e9:54:0d:aa:ae:16:4a:43:69:70:f5:b9:11:54:
                    53:4a:f9:9f:7d:f4:ee:4e:7e:03:b4:08:5e:ef:e5:
                    41:e7:2e:04:84:d0:aa:6c:87:77:a0:fe:02:91:fd:
                    24:7b:8a:84:71:2b:f8:8c:0c:d3:cd:52:5c:07:44:
                    50:97:eb:86:3e:6b:0e:42:82:1a:58:27:f9:f0:9b:
                    eb:fc:76:28:2e:30:65:b0:f1:7d:57:f8:76:a7:7b:
                    93:f3:31:43:09:2d:c1:6a:b3:cb:70:f4:02:83:7c:
                    29:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9F:C3:D7:06:7D:11:3D:ED:C9:C9:37:DE:CC:CF:94:78:20:81:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/0da84f32-a3b7-325e-8e88-4a1bb36616de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:67:93:f5:3c:33:a3:db:72:0d:c4:30:7f:ed:db:32:79:a7:
         e2:8c:29:1d:6c:49:50:a5:e5:8a:98:7e:c3:34:e5:a5:3c:c5:
         cd:e0:ab:cf:e4:e1:73:ef:08:b9:92:07:b7:ee:c7:18:ed:45:
         75:32:0d:13:8a:a3:39:dc:03:3f:6d:e7:1f:80:0d:67:19:e4:
         07:f3:a6:84:bc:c6:f6:37:59:6c:75:cc:16:e1:a1:0d:e2:5e:
         a0:31:1b:c2:3f:f2:33:a1:3d:54:2a:85:5c:7e:97:30:16:24:
         e1:e9:a4:da:49:71:d8:4c:d2:85:94:1a:89:d2:13:2d:2a:29:
         d5:22:da:d1:56:7b:04:dd:b9:cb:b5:1a:ba:0f:eb:15:12:36:
         07:21:3a:91:bb:dd:3f:59:68:0e:7e:36:08:36:96:f0:59:5f:
         5e:62:7b:de:16:13:11:52:f7:43:8d:42:2a:11:91:79:fb:12:
         22:96:d9:d5:1b:af:f9:39:73:3c:86:32:02:6f:c2:c7:28:41:
         9e:ad:2a:21:8e:52:2e:d7:fc:11:36:f2:ce:9f:a1:52:01:a7:
         6a:82:07:de:47:cc:2f:bf:96:60:41:90:00:76:1d:bb:5d:26:
         23:a2:6d:7a:af:7a:59:af:b7:08:d1:84:8a:c7:56:e3:10:be:
         35:6c:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 21:10:12 2024 by rpki-client on console-ams.rpki-client.org