Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/27630bc9-21ee-3705-9069-342020cb3901.roa
File:                     27630bc9-21ee-3705-9069-342020cb3901.roa (raw, json)
Hash identifier:          JjCAREt9CXEaiZ1BAAyus4J8x87uOPRtIB1EiovLe+A=
Subject key identifier:   71:7C:07:48:B9:44:D2:62:5C:21:9B:D4:44:4C:CE:2A:99:93:BD:A2
Certificate issuer:       /CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
Certificate serial:       010D0C9F432858456822E6E413BB95338D9BC780
Authority key identifier: 69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/27630bc9-21ee-3705-9069-342020cb3901.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     11399
IP address blocks:        137.165.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:e6:e4:13:bb:95:33:8d:9b:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=ccfcf86b-31e5-4df2-af47-26c6488e418e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:f1:8a:93:be:a5:2f:1e:f5:a7:d3:06:db:
                    90:cb:54:f5:e8:c5:11:5e:a7:5e:55:70:2e:00:09:
                    c2:33:72:42:31:76:d5:df:19:87:20:0e:95:a3:45:
                    13:40:35:92:2e:97:b7:25:a4:0f:38:d3:a4:c1:9b:
                    97:95:85:fa:b3:58:fe:98:03:97:bf:b6:ba:50:54:
                    f2:45:4a:4a:f1:b3:dd:63:1e:26:b5:b9:4e:f0:0f:
                    3f:d4:40:11:8b:f7:1b:2c:6f:cb:0b:7a:68:c9:2e:
                    d2:08:49:44:68:d7:bb:d1:c6:b0:00:4a:21:67:be:
                    7b:be:a8:02:ca:64:7b:f0:30:bb:d7:ae:81:1e:0d:
                    ee:19:65:aa:60:2c:05:cd:eb:ca:81:80:eb:6c:f0:
                    5c:a3:aa:95:fa:68:c7:54:f7:30:1d:ce:09:c6:0c:
                    17:d0:12:29:2a:f4:cc:fd:9a:3c:02:07:61:ad:13:
                    97:4c:ed:98:c9:a3:fb:67:f2:5d:94:e2:9a:12:5e:
                    d0:6a:32:28:bb:f0:59:5f:6d:24:af:b9:1c:34:c2:
                    7f:cf:5e:fc:1b:05:1d:78:c0:dc:9a:db:45:85:51:
                    a5:85:96:e7:60:e8:8f:85:cf:37:df:4a:48:1a:5d:
                    30:17:ab:44:44:2f:78:b2:3a:c5:05:0a:70:0d:9a:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7C:07:48:B9:44:D2:62:5C:21:9B:D4:44:4C:CE:2A:99:93:BD:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/27630bc9-21ee-3705-9069-342020cb3901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl

            X509v3 Authority Key Identifier:
                keyid:69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.165.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f9:65:87:98:86:05:a2:ca:7b:a8:1e:53:9d:c6:3d:40:05:
         89:68:fd:1c:b5:fb:bf:39:5a:93:cd:2a:c3:76:97:26:8b:18:
         a9:ae:9f:32:bb:50:5d:52:d9:93:59:72:20:ab:0b:ca:d9:c2:
         62:50:c4:04:9c:88:18:d5:72:e5:88:cb:29:28:45:76:14:c5:
         51:49:4d:3f:e8:00:37:17:99:9a:04:58:be:c1:ea:97:30:65:
         09:c0:c4:d6:87:95:4e:77:31:42:ca:ac:f1:02:69:51:6d:ec:
         2f:cd:a2:c0:9c:6f:73:35:d3:67:44:b1:5d:38:db:a0:b0:15:
         9b:9e:60:75:2b:d7:95:bc:05:30:64:2a:c5:9f:8f:72:73:eb:
         35:cd:a4:d7:be:6e:a4:2e:f2:c6:74:b3:1f:ee:09:bd:a5:6c:
         02:20:4c:34:45:a8:1f:ad:a0:39:67:0d:55:c9:0f:fa:60:98:
         98:76:db:bf:40:eb:5a:59:e9:1e:42:8f:5b:24:d8:92:4f:8c:
         cf:d2:d3:76:42:44:10:4b:9c:9a:03:4e:65:7a:1b:d6:ce:46:
         4b:64:0e:f1:05:81:b6:e1:a3:c1:e8:c0:bd:75:db:51:3f:12:
         f4:73:86:a6:49:e5:bd:35:1b:7e:24:ef:5f:ba:81:64:86:48:
         19:f2:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:15:55 2024 by rpki-client on console-ams.rpki-client.org