Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/36a9cd18-11cd-33f0-b63e-80f65125eefb.roa
File:                     36a9cd18-11cd-33f0-b63e-80f65125eefb.roa (raw, json)
Hash identifier:          W7aCB9l36iAkSS4DGVOzBvK+Ep0yDEqM0rk/EJmwr4U=
Subject key identifier:   3E:1B:E2:91:50:16:4E:02:08:16:38:CE:83:AC:6E:F1:02:5C:09:A2
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584797E12D7C58BA50F71CDDB400
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/36a9cd18-11cd-33f0-b63e-80f65125eefb.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     397050
IP address blocks:        137.118.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:2d:7c:58:ba:50:f7:1c:dd:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=2e2eea4b-5927-4b6e-9167-684df987b193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:2f:6f:e5:f4:49:31:f8:1b:6d:27:e5:59:
                    af:9a:64:0b:8c:a6:ba:70:34:7f:3a:43:9c:ae:72:
                    2d:f1:6a:72:eb:97:d4:f1:af:eb:56:66:f7:c9:ae:
                    58:3d:67:12:d6:b5:5f:59:78:e9:6e:ea:45:ec:ea:
                    df:8d:bb:73:16:c0:84:a3:c5:bd:e7:a2:cd:8d:98:
                    78:53:b2:39:1d:24:f0:eb:55:d1:84:f8:67:2c:9e:
                    3a:b0:a4:01:f8:3b:9c:30:a5:c6:37:60:be:b4:c2:
                    ef:99:8d:b8:83:99:e9:63:c3:6c:aa:5e:1b:78:fc:
                    de:a3:8a:be:d5:54:16:b7:8b:a4:c0:a3:73:78:c0:
                    3f:92:61:f0:90:56:c9:aa:8f:3a:ee:95:a8:8c:00:
                    c2:93:15:d6:e6:bb:69:af:31:79:3c:a8:f6:cc:ef:
                    fe:7a:dd:f1:fd:76:e8:e6:b5:76:76:46:19:2a:b0:
                    19:7d:3d:ff:8d:ec:0a:c0:56:bc:6f:84:d8:00:49:
                    17:70:8b:41:e1:f8:c1:2b:2d:63:5a:d2:fe:0e:76:
                    c5:34:09:66:9b:82:90:22:ab:49:19:2c:6f:f1:4f:
                    49:64:18:3e:ca:fd:91:29:8a:85:0f:3f:2f:23:72:
                    5a:71:88:45:6d:cd:7c:c5:15:61:e4:11:29:70:82:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1B:E2:91:50:16:4E:02:08:16:38:CE:83:AC:6E:F1:02:5C:09:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/36a9cd18-11cd-33f0-b63e-80f65125eefb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:87:9e:2c:bd:61:2c:4d:b2:81:68:0f:0e:84:6e:4d:fd:dd:
         23:4f:a8:14:6b:91:af:a6:c6:78:0b:dd:cd:0b:46:fe:86:85:
         2f:33:4a:f8:0b:04:5b:bf:3a:c9:1b:e6:67:dc:5e:9f:75:bf:
         c1:d9:f0:92:37:3f:6e:ea:93:de:33:c4:5f:95:df:60:e0:34:
         6e:65:10:fd:09:22:ae:f3:1e:20:23:c7:30:9b:2b:70:69:eb:
         8b:36:78:1a:84:21:65:eb:63:2e:2d:78:22:6e:d9:33:6e:87:
         26:cd:87:a2:70:56:9f:73:21:72:be:e2:94:36:80:a1:0b:39:
         22:01:6f:d9:fc:01:87:52:48:90:75:86:24:89:37:54:36:74:
         3e:35:8c:1b:5c:ea:24:d6:14:71:e4:b3:35:ed:1b:a4:89:c9:
         63:8b:68:bd:e1:9d:25:70:48:9e:d9:6d:05:58:b7:c5:32:1c:
         df:51:9a:ff:7a:9e:02:62:9e:c4:d6:97:9c:c8:84:12:99:8e:
         28:5b:32:d1:1d:d2:3c:5d:2a:a7:e1:89:92:f3:92:8f:56:dc:
         20:3f:55:e1:6a:ad:9b:11:36:5b:3e:36:65:86:de:3f:1c:ae:
         0f:db:36:77:d9:a6:fa:73:91:6d:a8:a2:16:1f:6f:04:0a:36:
         7f:72:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:05:06 2024 by rpki-client on console-ams.rpki-client.org