Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa
File:                     1cd2ae84-266a-3017-bcaa-4c3494a17476.roa (raw, json)
Hash identifier:          WpSJj7V2AC46TNpJLD/QP5rLfECO1bi05MM4srd9kWA=
Subject key identifier:   40:4C:9C:7D:AC:3B:57:00:17:33:70:5E:B0:7B:19:FD:4E:F7:03:D7
Certificate issuer:       /CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
Certificate serial:       010D0C9F432858472E457725D38BA1A2A32E5280
Authority key identifier: 8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa
Signing time:             Wed 11 Sep 2024 17:07:06 +0000
ROA not before:           Wed 11 Sep 2024 17:07:06 +0000
ROA not after:            Tue 10 Dec 2024 18:07:06 +0000
asID:                     46626
IP address blocks:        137.83.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2e:45:77:25:d3:8b:a1:a2:a3:2e:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
        Validity
            Not Before: Sep 11 17:07:06 2024 GMT
            Not After : Dec 10 18:07:06 2024 GMT
        Subject: CN=b5109644-4a9b-43fd-b1aa-2dfb501f69ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4b:b2:66:70:04:bf:56:0f:9c:3e:a5:48:1d:
                    b0:75:16:03:f8:68:20:4e:17:e3:1f:ca:cc:e8:47:
                    f7:11:c9:32:29:00:47:5f:34:61:49:76:76:f6:46:
                    04:2b:9e:9d:0c:dc:40:4a:4c:f7:ac:d5:f9:e8:90:
                    41:3b:4d:23:8c:0e:7b:d5:65:2f:e5:b6:48:88:0b:
                    f2:4b:9f:85:d1:b5:e6:23:64:78:16:4e:38:cf:e5:
                    f4:79:5c:14:d4:d6:9d:32:7c:b5:4b:ec:e7:77:64:
                    b4:a3:c5:01:00:8b:46:1a:4c:c0:b0:88:d0:a2:3c:
                    f3:04:6a:8e:de:c0:9b:1b:27:a0:ca:6b:ec:41:41:
                    60:33:90:5a:72:97:4c:d5:e1:b3:04:1c:21:86:fc:
                    16:46:72:e5:29:11:51:41:8d:a2:25:36:33:49:ae:
                    5a:fb:2c:5f:cd:10:6d:40:ba:79:03:06:c2:3c:e1:
                    79:be:47:1e:50:47:10:c0:db:20:e5:2c:e9:14:be:
                    bd:e0:30:f6:58:f8:7a:7e:00:e3:d7:d4:c5:88:22:
                    32:e1:22:ff:2d:34:8c:56:ec:6e:b7:4c:18:ae:fd:
                    5d:4f:25:7a:69:28:46:26:b5:3a:7d:75:08:46:c4:
                    96:6d:66:20:fb:d3:4f:9b:99:7a:a2:09:a9:75:d0:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4C:9C:7D:AC:3B:57:00:17:33:70:5E:B0:7B:19:FD:4E:F7:03:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:c5:4e:80:db:7a:75:a0:38:12:5b:e0:d9:2b:f1:3d:a7:
         c2:a9:02:0c:99:59:47:27:f4:49:af:8a:d1:8c:3e:ba:e2:31:
         19:35:36:52:bb:22:ae:2d:30:97:a1:ea:a8:8a:85:37:09:17:
         58:c5:50:d3:0e:b0:ac:f1:ce:26:b3:30:ce:f9:9a:06:1d:c7:
         17:1a:2c:12:68:e0:ba:80:0f:3b:6f:02:8e:cd:8f:d1:59:bf:
         c1:31:fb:47:7c:c2:9e:82:5b:b5:9a:a2:48:c3:6b:75:90:7e:
         a3:09:67:0d:81:c5:ca:22:e7:d2:b8:00:73:03:88:0b:b6:d9:
         f9:d2:5e:01:ce:96:0f:f9:d9:f0:17:62:b6:af:ad:f4:2b:51:
         e8:44:90:2e:ad:d5:0b:0f:9d:f8:39:d7:1f:f9:8a:25:16:86:
         d1:f6:e5:84:f8:07:27:83:14:f2:15:b3:c1:eb:61:57:27:17:
         11:e6:51:b3:93:71:dd:ef:bc:91:38:9f:ad:75:2a:d9:1d:f8:
         54:2e:0e:eb:31:6e:c3:bc:16:d9:95:bc:20:03:65:17:32:8e:
         24:7a:41:a7:77:b9:6c:1c:0b:33:ec:10:e3:3d:f4:ee:8d:46:
         54:d8:0f:19:35:88:61:1f:fc:aa:32:30:13:a8:12:28:b9:cb:
         7b:ea:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org