Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a6e39eee-173b-35b9-ac53-2ff67455d848.roa
File:                     a6e39eee-173b-35b9-ac53-2ff67455d848.roa (raw, json)
Hash identifier:          7KwiTiomK7S58h9H+Wdki3w4o++oMndeM2OQneHTsss=
Subject key identifier:   2A:C1:01:2B:BC:FF:D6:42:BC:83:95:C1:4D:D7:A8:D4:4F:EE:4C:1A
Certificate issuer:       /CN=13fecd24-0da7-4140-9636-71a72de851ec
Certificate serial:       010D0C9F43285847CA3F832C859AA786CC8DD236
Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a6e39eee-173b-35b9-ac53-2ff67455d848.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     396871
IP address blocks:        137.83.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:83:2c:85:9a:a7:86:cc:8d:d2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=7149c20d-28b6-4ca7-931c-83b9cfc7adb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:8f:03:3e:ee:65:9c:29:6a:4a:43:ce:25:
                    1f:ea:80:c5:4e:78:35:be:81:7b:16:23:69:86:b9:
                    c2:c9:75:db:6c:1d:5b:db:fe:55:66:ed:a8:16:23:
                    58:d3:2e:56:02:73:50:45:2b:68:18:54:50:a6:b2:
                    f8:8b:46:71:6d:6f:c0:e5:62:7b:85:c4:df:7b:fb:
                    68:07:77:d4:8c:6a:b8:69:9d:d5:75:7a:8b:91:96:
                    e1:d1:10:d8:02:eb:5f:e3:39:59:26:55:3a:db:7a:
                    60:eb:9a:77:60:38:40:c5:97:8f:d6:3f:3e:e8:cf:
                    ac:fa:2b:f0:65:2e:6a:7e:a2:de:58:3b:3c:df:9f:
                    bd:5a:99:a7:70:5a:94:90:aa:80:e5:2a:63:ba:ce:
                    56:06:12:a9:46:eb:06:2a:9f:c1:8d:35:89:a3:9a:
                    bf:5b:9f:e9:82:c1:72:7c:29:e0:1a:38:22:3f:30:
                    7d:7a:09:3f:2f:15:90:30:ab:5a:bb:46:1b:ef:d3:
                    e6:76:65:a5:bb:56:27:5a:c0:a0:8c:9c:16:6a:18:
                    e0:e0:d7:38:38:2c:23:58:45:fa:c3:67:4a:4d:bb:
                    9d:a6:3c:84:b3:66:0f:ba:f7:2b:08:e5:cf:e7:40:
                    89:39:63:1c:b8:ee:d1:3f:63:eb:73:f8:95:e5:54:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C1:01:2B:BC:FF:D6:42:BC:83:95:C1:4D:D7:A8:D4:4F:EE:4C:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a6e39eee-173b-35b9-ac53-2ff67455d848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl

            X509v3 Authority Key Identifier:
                keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:09:ef:b5:38:3a:dd:fe:f7:a6:f1:68:c6:f0:bc:77:79:
         e1:2c:f1:6f:aa:f3:b4:48:46:72:99:7c:e2:2e:cd:3a:77:be:
         3c:a3:ae:ef:28:c9:79:71:bd:68:84:0c:a6:d6:01:93:a6:40:
         05:bc:ec:1d:f3:be:7a:86:05:4a:74:e6:17:81:4c:f3:3c:c8:
         9e:d1:e8:70:60:eb:70:65:30:fd:b6:a8:fd:14:ca:c1:e2:24:
         1e:39:11:d4:b0:03:b2:fd:a6:58:51:94:16:7a:23:78:76:32:
         9a:1b:f5:46:eb:00:53:85:2c:41:fe:74:99:1b:21:d5:26:d6:
         29:3d:b3:93:b4:4c:d8:8a:17:d3:bb:33:1f:44:fd:8b:cf:35:
         f7:95:7f:d2:c8:16:12:03:81:cc:1a:42:2d:f9:53:d7:29:e0:
         d6:5c:b0:57:1a:92:4c:7a:29:94:2d:2a:17:27:ec:08:d1:ab:
         af:ac:f5:cf:ff:30:48:da:8e:1d:1e:14:0b:e3:22:33:6e:f9:
         56:0f:f7:e8:0c:b9:2a:4b:9c:9e:45:e5:e8:6f:69:95:76:16:
         05:4c:89:53:80:16:13:28:3d:55:23:82:af:18:46:1b:2e:6c:
         b4:59:f3:c8:07:bd:a1:47:fb:45:89:bf:7a:09:7f:e3:84:4d:
         69:e7:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org