Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa
File:                     9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa (raw, json)
Hash identifier:          V4Sy2LLW1+84RdQ4dgYCSu77OVQ8NTkImLFnw1bPNp8=
Subject key identifier:   5A:BC:71:1D:B2:3A:6C:36:D7:7C:D2:6F:E3:F3:E3:2E:75:4C:17:E2
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F43285847B24D34CD18E5E5C323ED3D00
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa
Signing time:             Tue 29 Oct 2024 00:09:24 +0000
ROA not before:           Tue 29 Oct 2024 00:09:24 +0000
ROA not after:            Mon 27 Jan 2025 01:09:24 +0000
asID:                     21515
IP address blocks:        137.119.26.0/23 maxlen: 23
                          137.119.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:4d:34:cd:18:e5:e5:c3:23:ed:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Oct 29 00:09:24 2024 GMT
            Not After : Jan 27 01:09:24 2025 GMT
        Subject: CN=dee3f5fd-74f0-4dff-844f-e91a0b100eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:96:17:85:b8:e2:60:ed:52:01:5d:ec:69:
                    21:fc:b7:6a:eb:59:44:c5:ec:7d:01:7f:1b:3f:2c:
                    0f:5d:a8:95:94:75:ba:96:1d:04:a7:1b:61:c1:38:
                    f3:f3:18:0d:4d:07:eb:a2:06:fa:78:cc:e7:30:da:
                    3c:67:50:96:f6:18:9d:82:61:0d:cf:a3:43:4b:21:
                    c5:31:b5:32:1c:6c:4d:b8:d7:9f:46:60:eb:9d:68:
                    28:10:0b:80:ad:81:e4:c3:12:9f:7b:e0:c7:a2:45:
                    2c:f2:18:67:b4:da:24:3d:26:b6:44:33:2a:6e:4f:
                    b2:98:a3:a1:c4:1e:db:83:35:75:08:c2:d7:f5:1f:
                    83:b3:56:84:cf:f8:49:d6:6e:6d:56:56:91:0a:a6:
                    51:e7:27:37:fd:0c:8a:2d:dd:5b:df:5e:59:0c:68:
                    97:ca:d8:19:13:06:83:0f:b9:02:99:79:1d:ef:3d:
                    dc:05:54:07:aa:bd:c4:03:e9:b8:7c:64:86:5f:8b:
                    9d:ff:f9:b9:9c:8c:2a:0c:9b:01:89:98:7e:a5:5f:
                    55:91:9a:0d:9f:48:9a:87:05:b8:e1:bd:f3:1c:a7:
                    6f:8c:ec:0a:da:3f:4e:10:2d:cc:8d:e9:b6:9f:ae:
                    73:ad:41:39:44:7e:a4:bd:88:29:cf:c5:33:2d:a7:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:71:1D:B2:3A:6C:36:D7:7C:D2:6F:E3:F3:E3:2E:75:4C:17:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.26.0/23
                  137.119.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:57:03:f2:1f:6b:9b:6f:c2:f8:63:90:7a:0b:9c:70:18:
         95:6d:ee:be:16:6f:5a:36:0e:4e:ae:5e:7a:77:a4:7d:a2:58:
         7a:38:3f:5d:ad:14:4c:82:e2:3b:b8:c0:88:7d:ad:a7:bd:00:
         87:40:24:44:6d:96:82:a9:0b:95:91:33:dc:0f:7b:35:4b:d7:
         08:7a:48:fd:22:41:e8:f1:14:e4:e7:f5:2e:72:80:17:b3:68:
         e7:90:74:2f:f9:e9:29:bf:dc:0f:51:93:27:90:dd:1a:94:6d:
         c6:8d:3d:f7:2d:81:76:d1:b5:71:7d:69:26:77:34:73:9d:f2:
         9e:de:e1:32:ec:13:37:36:75:3b:42:d0:aa:9a:da:5f:e5:0b:
         00:80:ae:44:77:2e:86:4e:4e:91:1b:a9:c9:60:05:b3:27:21:
         38:74:05:85:bc:fb:62:55:35:43:83:64:47:00:5a:ae:0c:ca:
         8d:b7:68:5c:d6:07:1d:7c:da:71:89:d0:64:36:c5:c8:b4:10:
         3d:b8:d8:b3:09:9b:e4:c5:ca:bb:50:49:b5:79:7c:16:42:39:
         59:f5:f9:26:03:20:35:c0:5a:34:7c:3c:2d:19:76:db:d8:dd:
         cb:9e:ea:f4:ad:a5:e9:4e:ca:39:99:eb:56:be:5b:cc:29:cf:
         a6:15:c2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:26 2024 by rpki-client on console-ams.rpki-client.org