Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0e8c18ad-4f4a-371a-8120-974a5bc06273.roa
File:                     0e8c18ad-4f4a-371a-8120-974a5bc06273.roa (raw, json)
Hash identifier:          X4IIBdutuHE9Tb3ZVjxXzI/guflwgdSb3a5D+MMNDLI=
Subject key identifier:   D3:D8:21:60:7C:B7:EC:63:9B:B1:CA:F8:39:71:A2:A6:24:BB:53:FC
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858482EC00FE010C3A066E0AC9EC0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0e8c18ad-4f4a-371a-8120-974a5bc06273.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     12261
IP address blocks:        137.119.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:0f:e0:10:c3:a0:66:e0:ac:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=67b6dc4f-f603-4001-8040-5430b21a2cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:ea:80:fb:31:e3:2e:77:e1:bb:d7:19:9c:
                    06:10:70:5e:5e:a0:64:af:c7:2e:ff:73:27:f0:59:
                    ad:ad:dc:f2:3f:24:2d:75:e2:3e:54:6b:6f:e4:57:
                    ac:3e:07:53:57:98:a2:d3:9e:03:97:95:2a:9c:4a:
                    a5:ff:aa:27:c4:ef:41:d6:86:ba:4f:2c:25:83:d8:
                    8f:f0:f8:49:4d:e7:7e:31:60:41:a7:bb:6f:66:e5:
                    0b:1b:e0:c0:0d:aa:c2:de:02:1d:4f:20:84:b5:d6:
                    9a:3d:83:25:4e:29:3b:01:bd:71:95:a3:55:bf:4d:
                    3f:d8:9c:7b:54:e5:35:32:c2:45:b4:73:5b:d3:7b:
                    e5:c2:67:09:f7:ec:78:fd:39:eb:cd:c8:0e:69:1e:
                    d0:3c:eb:d1:4e:50:a9:51:85:d8:f2:de:9c:6b:dd:
                    49:1c:cf:6c:18:67:7e:3c:fd:5b:5a:af:a8:9a:04:
                    e7:5a:32:cd:89:53:e9:ff:28:a5:cd:f3:2f:63:4f:
                    ed:a0:f9:6d:60:3c:6e:d8:0e:8e:65:c3:01:1b:e1:
                    f1:9e:29:75:b0:f6:28:e0:7c:06:75:15:c7:d6:72:
                    58:67:64:06:35:32:2f:e9:5c:ee:d7:a9:bc:ac:cd:
                    51:c7:57:15:7c:36:79:37:16:7a:ba:07:36:98:8b:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D8:21:60:7C:B7:EC:63:9B:B1:CA:F8:39:71:A2:A6:24:BB:53:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0e8c18ad-4f4a-371a-8120-974a5bc06273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:39:9e:2f:98:64:e9:bb:8e:91:91:fa:a3:d3:ba:f8:46:eb:
         66:77:af:bd:2e:e1:c6:a0:9d:57:88:4d:14:97:b3:68:43:5f:
         5a:54:a9:00:a1:69:e1:02:44:92:d0:7a:f9:1b:1a:d8:13:4c:
         41:ae:55:39:be:39:af:22:81:45:58:4a:37:4c:97:3b:d2:d0:
         61:28:b9:4f:27:33:dc:bf:ce:a4:74:93:47:4a:ec:09:c4:7b:
         ff:d0:a4:74:6f:bb:05:1e:2a:55:99:69:77:af:23:62:19:3f:
         0d:0b:5b:0a:53:b6:99:62:66:1c:31:8d:84:02:c3:e6:3c:54:
         a4:bf:05:70:8c:7c:6d:d9:5a:17:fe:43:07:60:d8:bb:51:2b:
         f8:9a:6e:57:1b:5e:f1:1e:d4:9e:6f:57:24:07:da:03:07:67:
         95:05:19:ea:8c:39:5d:fd:30:e4:f4:21:5b:da:aa:df:4a:7d:
         b3:06:75:42:b8:aa:4d:70:f5:3f:29:5a:33:28:ff:1f:c1:70:
         93:45:b0:de:6b:6e:bb:86:89:b5:0e:2d:af:d0:64:db:41:1c:
         2c:b0:2f:e5:1f:a1:a5:3f:fd:c9:8b:82:68:fc:4f:03:9a:5e:
         3c:7b:b2:ee:11:12:92:2e:50:83:42:6b:83:84:91:da:7f:c3:
         31:f1:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:24 2025 by rpki-client