Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0b652978-4e08-393d-9ea4-e0c82e5dd798.roa
File:                     0b652978-4e08-393d-9ea4-e0c82e5dd798.roa (raw, json)
Hash identifier:          6vQDcJCsrmO06tJJ/3LHGyRftRrl1ldeV43JWPBhzi0=
Subject key identifier:   AB:FF:62:4C:3C:00:E6:6A:D8:4F:6B:15:D9:02:46:7C:E7:84:11:20
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F43285847A8A14D0A79250FC51EB09800
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0b652978-4e08-393d-9ea4-e0c82e5dd798.roa
Signing time:             Fri 25 Oct 2024 13:00:42 +0000
ROA not before:           Fri 25 Oct 2024 13:00:42 +0000
ROA not after:            Thu 23 Jan 2025 14:00:42 +0000
asID:                     13720
IP address blocks:        64.37.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:a1:4d:0a:79:25:0f:c5:1e:b0:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Oct 25 13:00:42 2024 GMT
            Not After : Jan 23 14:00:42 2025 GMT
        Subject: CN=4938c1ba-faae-41d5-ab25-0493a7a5b920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:f7:eb:cd:84:38:af:b0:ea:d7:b7:d6:25:
                    88:3a:ef:8b:8f:bc:15:a5:e8:bf:a1:b1:53:19:5c:
                    ad:a7:de:e0:4f:2b:a8:e0:90:64:09:a0:c1:4f:2d:
                    e1:0c:da:0e:54:60:91:7a:6d:d2:6e:31:b0:43:24:
                    0a:c1:b0:8f:6d:a3:90:1a:58:bb:52:7b:97:98:40:
                    4f:33:58:3d:40:84:ba:a3:ff:53:b6:4c:99:e6:d2:
                    c6:10:de:84:bf:cd:bc:19:98:ae:69:40:d9:07:0b:
                    67:76:26:cb:e3:02:dc:e1:f2:24:45:33:67:40:bf:
                    b9:be:24:24:d9:d9:51:6f:a5:5e:76:d0:88:71:8a:
                    8c:6d:2b:ed:23:67:e0:f8:63:90:1f:f0:06:a6:09:
                    b2:72:38:f0:f5:56:18:a4:11:ee:65:0a:a2:3a:8d:
                    be:5f:b7:80:3f:78:73:75:dc:46:17:63:1e:ae:7d:
                    4c:c7:5c:1f:05:7f:e2:2a:7f:38:ff:07:99:d8:43:
                    88:f9:4a:1b:b8:21:1f:81:96:ab:69:ba:ac:04:83:
                    f2:73:25:69:5b:9f:07:f9:b3:5f:87:9a:c9:a2:5a:
                    78:c1:2c:33:91:53:66:00:eb:1b:39:90:8b:25:6d:
                    7d:55:0e:a7:07:b7:06:c8:c9:b6:83:18:03:37:cb:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FF:62:4C:3C:00:E6:6A:D8:4F:6B:15:D9:02:46:7C:E7:84:11:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0b652978-4e08-393d-9ea4-e0c82e5dd798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:d1:ec:87:a0:08:2d:d2:7b:ba:05:37:dc:12:80:11:11:
         69:e6:b4:b5:2e:dd:01:87:af:32:5e:c0:72:31:18:c7:aa:7a:
         4b:2c:8f:02:b4:37:b1:19:98:e4:a7:71:2f:80:eb:07:4f:95:
         12:ee:09:c8:21:19:a5:62:1a:ac:a3:00:b4:1b:8e:67:e3:2f:
         a1:09:77:aa:73:50:57:76:e6:2c:c8:65:97:98:28:4d:7c:cd:
         3d:95:bc:4b:e7:5d:14:69:02:4e:fa:e7:96:cd:02:32:d8:ee:
         c9:89:9e:e8:f4:ae:6c:34:f2:3c:0f:5b:a4:91:b3:64:8d:76:
         70:5c:aa:51:7d:ee:8f:35:4f:58:d1:f2:e9:3b:5a:7b:b4:41:
         0a:40:86:1c:66:80:5d:79:fd:8d:85:be:79:18:76:db:29:b0:
         71:5e:57:5a:59:91:e4:47:ad:b2:ec:a9:30:4b:66:33:22:fa:
         b0:11:ab:dd:ea:87:58:e8:85:26:34:1e:13:8d:94:51:9f:ee:
         29:67:96:28:69:20:dd:9e:72:b8:3f:fb:51:3d:a9:45:48:b1:
         d8:50:30:cf:13:4a:39:47:35:4d:e3:d9:e2:ed:67:66:3e:ee:
         c4:f2:65:0e:2b:3c:10:9a:d4:e2:04:ab:9a:77:be:c9:5c:71:
         83:91:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:38 2024 by rpki-client on console-fra.rpki-client.org