Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/5f401a49-7dd4-3824-a7af-a6c1d2a5a186.roa
File:                     5f401a49-7dd4-3824-a7af-a6c1d2a5a186.roa (raw, json)
Hash identifier:          McxxnlFkPWwoAVuXKCbhwkQE+lSM0SlqDhiADGzdXso=
Subject key identifier:   D2:FB:E1:82:F3:2C:5C:4D:E7:33:BD:8F:73:00:62:DB:1C:AE:42:4F
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584777C63F0358C58C151A520058
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/5f401a49-7dd4-3824-a7af-a6c1d2a5a186.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     14593
IP address blocks:        137.83.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:3f:03:58:c5:8c:15:1a:52:00:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=fab0fd02-7c17-4f8b-8667-21f4cc345e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:06:fd:08:79:a2:40:88:9f:bf:5d:fe:51:
                    5e:e2:7b:fe:8d:e3:e7:ca:41:40:25:a1:27:e1:e5:
                    ee:93:b2:22:9f:63:bf:5d:a1:2c:e3:fe:e1:ba:c0:
                    fc:17:89:ba:a0:ae:5e:84:f2:75:1a:f9:db:12:64:
                    de:34:33:e5:57:3a:d2:5d:6a:8f:34:db:b8:ec:2c:
                    6d:a9:42:ff:eb:52:19:c0:39:f3:af:c4:46:4e:b3:
                    18:35:dc:fc:ce:e1:08:a2:f4:a7:a4:2b:74:1c:92:
                    47:48:7f:ea:98:e7:4a:c3:a1:29:9c:f7:fe:96:13:
                    49:93:ba:b3:bc:54:2f:ee:23:37:7e:69:ae:f8:ce:
                    97:73:d5:eb:c1:66:e8:44:2e:1f:0f:61:13:3f:6d:
                    39:12:8d:c4:bc:05:48:93:c9:ff:5d:45:dd:d2:70:
                    32:77:1d:df:82:ce:38:99:5a:1f:7f:47:f0:de:64:
                    d6:0b:12:34:9a:e9:3f:2a:3b:0e:5f:bb:bc:e3:1a:
                    12:98:dd:eb:29:46:5a:f3:fe:d4:a4:a9:b6:97:cf:
                    13:ca:cb:c6:e6:00:e4:65:3d:4d:02:f6:e3:47:b9:
                    4c:fd:62:a2:0d:24:57:ac:66:59:aa:4c:65:8b:18:
                    25:88:20:90:cf:4b:ba:b9:73:5b:8a:97:c1:3b:1d:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FB:E1:82:F3:2C:5C:4D:E7:33:BD:8F:73:00:62:DB:1C:AE:42:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/5f401a49-7dd4-3824-a7af-a6c1d2a5a186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f7:fe:6f:ab:93:dc:85:d9:89:af:30:7e:62:f2:27:ba:19:
         a7:b0:77:93:87:5f:e2:a7:75:4a:0d:e4:87:c4:e1:a4:74:ad:
         26:08:61:73:c1:f1:cb:6b:d5:67:df:66:71:2b:d9:be:cf:d4:
         52:30:8d:5e:37:c5:3f:0b:67:6a:c3:d7:c9:ed:d4:2a:5f:c0:
         66:31:be:b6:f5:e4:e3:64:9b:8c:62:0b:d1:1d:58:a4:82:9a:
         62:b9:49:82:7f:65:a8:6e:24:04:b4:7a:c4:9e:74:52:b7:2e:
         3c:24:e7:75:f1:f6:c0:47:f3:68:b4:06:fe:fd:bc:c4:8f:e5:
         3b:d2:c2:8e:9a:86:4f:84:8b:1e:0d:06:f8:1f:4a:d4:93:a1:
         3f:1b:50:3f:67:22:1c:ae:7a:c7:55:f2:03:ce:e0:0f:75:b6:
         6c:96:b9:a7:07:66:48:e8:6e:31:56:48:db:ab:49:cf:32:22:
         95:92:d8:a4:f7:13:e2:01:d2:c7:fa:3f:2d:13:86:ac:0d:c5:
         ad:56:a5:fa:dc:1a:f8:8d:cf:b4:68:4b:56:1d:ea:7f:a9:f0:
         a0:02:6f:75:ad:e2:86:57:b3:c4:cc:2b:10:17:bc:30:8d:34:
         e9:21:f9:d9:d0:fe:b0:a7:b3:26:88:23:09:5d:41:69:2a:b0:
         58:fa:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:13 2024 by rpki-client on console-fra.rpki-client.org