Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/27630bc9-21ee-3705-9069-342020cb3901.roa
File:                     27630bc9-21ee-3705-9069-342020cb3901.roa (raw, json)
Hash identifier:          isVf37mqxmXppC/YB8kpXW8JvogKbVbKCfq0yjSdGaQ=
Subject key identifier:   97:E2:73:15:B8:CA:2E:BF:CA:65:9E:7E:8A:28:1C:93:34:0A:75:86
Certificate issuer:       /CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
Certificate serial:       010D0C9F432858472835FC378E298CB48C884000
Authority key identifier: 69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/27630bc9-21ee-3705-9069-342020cb3901.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     11399
IP address blocks:        137.165.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:fc:37:8e:29:8c:b4:8c:88:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=2e9df728-ee0c-41e3-bc0d-9cd34c6d62da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:6c:bf:7d:7b:3e:7f:79:42:15:a7:e1:81:
                    04:21:64:4b:a4:4d:6f:a2:64:5a:88:1e:42:cd:a9:
                    1d:f7:e0:71:62:78:df:3d:80:fc:9a:3d:64:0b:6d:
                    31:43:17:c0:f9:2a:de:36:bf:87:a2:f1:ce:fd:ef:
                    ef:b9:8a:d3:59:c4:3b:07:64:a3:85:a1:e8:ec:c2:
                    64:dd:d9:62:01:2c:35:1c:cb:4e:95:0d:08:17:4d:
                    a6:7b:70:42:bd:73:f7:f4:42:bf:e0:90:24:71:5a:
                    ab:59:c0:8d:b0:b9:f0:d0:99:e3:49:24:37:0c:eb:
                    f8:eb:44:0b:4b:be:b9:0e:7b:90:5d:b0:5c:10:e9:
                    2d:f4:d1:1a:1f:4e:c3:83:87:c6:7e:21:8b:f8:75:
                    38:3f:b1:11:25:7d:35:3c:85:ec:44:f5:de:58:52:
                    6f:d1:ff:3f:4b:91:10:b0:e0:83:65:94:04:e3:c0:
                    3b:98:ab:f4:36:37:8f:11:48:4d:74:bf:a5:58:17:
                    86:c3:5e:c1:5f:06:32:09:85:69:fc:ff:e2:e3:4e:
                    95:1d:23:00:04:4e:6e:16:f9:91:4a:78:b8:44:69:
                    cc:57:71:0b:d4:af:72:89:fc:77:58:8f:4f:4e:c2:
                    25:9b:20:34:98:70:c0:3b:b6:1e:77:df:d7:1a:90:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E2:73:15:B8:CA:2E:BF:CA:65:9E:7E:8A:28:1C:93:34:0A:75:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/27630bc9-21ee-3705-9069-342020cb3901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl

            X509v3 Authority Key Identifier:
                keyid:69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.165.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:34:a6:f4:a2:9e:8a:2b:74:42:9e:ff:bf:10:62:44:40:
         0b:c4:2c:d5:23:04:e2:9a:1a:08:77:22:23:0a:50:4d:39:e2:
         44:8d:b0:83:14:30:3a:98:71:35:e2:a3:16:91:2c:6b:28:e8:
         75:8b:0b:94:79:d0:a6:cc:c3:7f:b0:c4:2b:99:44:bc:87:df:
         57:5e:1b:9c:0b:82:98:26:65:02:6c:17:ee:0e:90:a7:63:86:
         96:66:d7:03:f4:ff:44:c6:5f:97:6f:00:29:85:66:d9:4f:b1:
         f5:00:a3:2a:16:37:0e:b4:41:a4:51:8a:82:6d:3e:2a:7a:3e:
         9d:28:1a:16:40:33:97:7b:c3:47:d4:bd:a9:a8:47:b9:58:61:
         a7:be:c8:6f:a9:55:14:a3:86:7d:a8:31:3a:cf:da:89:d5:6d:
         04:43:88:9b:5b:7c:5f:10:98:0e:28:cc:57:07:5a:81:7e:ef:
         f2:aa:d9:4f:65:ac:f4:24:cf:40:57:ce:61:0a:84:d2:40:c3:
         45:82:49:86:b7:18:7f:fc:68:c5:a6:8c:39:f7:31:a5:3e:49:
         34:40:45:59:f4:5e:b9:fd:02:57:4b:8d:38:98:03:77:aa:86:
         bf:d0:87:95:7c:df:a7:41:ed:3f:d9:5d:f4:56:de:96:46:91:
         e0:2d:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:46 2024 by rpki-client on console-fra.rpki-client.org