Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/bae50a1c-fecd-326d-9f0b-53457c90dc28.roa
File:                     bae50a1c-fecd-326d-9f0b-53457c90dc28.roa (raw, json)
Hash identifier:          cbOzTdn5LVNiwlHNN1MD8icE3NxZ+RTtAB8Dij7O3Es=
Subject key identifier:   73:73:26:A7:F3:C7:52:35:C9:03:1B:23:0E:7A:EC:8C:52:DF:C3:18
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584571E864AFDDB4BC1758A4F3C0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/bae50a1c-fecd-326d-9f0b-53457c90dc28.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     21891
IP address blocks:        137.118.128.0/24 maxlen: 24
                          137.118.236.0/22 maxlen: 24
                          137.118.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:64:af:dd:b4:bc:17:58:a4:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=de5ad46e-1a47-435a-8cd4-bd3672051bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:c8:1b:f7:7b:f9:82:18:23:8a:15:fd:4c:
                    3f:8d:de:58:17:66:d1:af:86:d2:b6:15:16:ae:66:
                    11:c4:52:3e:9d:2d:df:0c:1a:2f:ed:43:46:79:63:
                    91:03:03:d1:f2:6f:b5:53:59:0e:22:f8:10:8d:ef:
                    31:6f:63:0d:d4:81:01:92:71:3e:0f:0e:18:7b:a4:
                    0a:08:ae:4a:79:78:42:30:38:8b:11:4c:ed:8c:c5:
                    a9:68:3d:34:8f:c7:74:e4:54:96:9e:05:89:0d:a2:
                    9d:78:23:6d:6a:30:a8:d3:12:be:c3:9a:3b:96:9e:
                    8c:70:d7:a0:fb:ef:1a:e9:92:8f:73:6a:5d:f8:a2:
                    c2:f1:5a:f5:32:51:b8:83:31:76:d1:10:65:fb:f1:
                    3c:09:73:84:2c:bd:06:f7:6f:86:a3:6c:27:23:db:
                    2b:7f:c6:71:e8:61:c5:73:c8:a9:07:fa:59:ca:d7:
                    15:36:a0:01:b6:47:f1:14:13:e7:04:88:da:f9:04:
                    a9:d5:e3:50:08:e1:36:ad:fd:e4:82:9d:02:35:78:
                    fb:18:21:fa:ef:a9:1a:f0:ba:65:c7:21:86:e8:10:
                    a8:5e:5d:88:65:35:c2:20:c3:f6:a8:2b:55:63:c8:
                    7e:87:63:0a:af:2c:80:da:f7:69:67:2c:50:37:ed:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:26:A7:F3:C7:52:35:C9:03:1B:23:0E:7A:EC:8C:52:DF:C3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/bae50a1c-fecd-326d-9f0b-53457c90dc28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.128.0/24
                  137.118.236.0-137.118.247.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e1:64:04:cc:23:75:90:08:0a:ea:82:cc:4e:b0:35:98:2a:
         44:b4:e3:cf:fd:b3:11:ad:60:f9:61:8d:b4:fd:06:24:26:9c:
         0a:b5:90:1e:75:1e:57:41:ab:0f:10:92:1e:00:bc:47:89:f7:
         b0:98:a3:3d:1b:cf:d5:7b:c1:bb:e9:be:be:96:d1:e7:62:06:
         66:58:89:02:46:90:32:ce:0a:4c:76:86:b2:10:76:f6:1d:5d:
         e6:f9:6f:86:59:55:be:d2:24:e2:9c:12:58:65:94:b3:42:61:
         5c:44:a0:58:91:b5:4b:96:34:a2:f3:17:81:36:be:a3:ab:80:
         f7:c1:d2:d4:75:21:f1:53:72:45:ac:63:f9:11:c8:c4:86:2e:
         51:1a:2e:0b:e3:94:be:cc:c5:79:c5:11:35:58:e0:b9:cc:a5:
         e7:ed:f7:5d:f8:4a:7f:d3:99:0f:88:99:0b:46:39:f0:b7:d2:
         ac:61:8f:cd:5c:b6:b4:fa:14:e0:f9:56:73:b7:24:c2:17:6e:
         a2:ef:17:53:98:5c:ea:aa:74:38:82:7d:0e:87:f9:f5:e1:62:
         12:c6:38:20:61:e6:3e:fe:1e:c8:95:6d:27:88:e0:56:a1:d0:
         ea:c1:50:b6:0b:e2:7b:0b:ec:5d:96:a9:89:63:e9:14:db:61:
         37:ef:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:39:01 2024 by rpki-client on console-fra.rpki-client.org