Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa
File:                     3457cbf8-275f-3daa-96d5-6ee8d534386e.roa (raw, json)
Hash identifier:          uigZ5xkHMbcCIVlu6ZB2bTxal+TLkxPn3/547Is0lqQ=
Subject key identifier:   6F:66:B4:77:A8:06:C1:27:12:ED:26:E1:3B:84:DB:DC:6B:2D:4D:B4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC64A576236D0EE490BC7680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        137.186.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a5:76:23:6d:0e:e4:90:bc:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=43d11ba4-ea61-44bf-95f7-c56f9ec8191c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:17:2e:23:66:6f:b2:a2:fc:35:f5:a8:14:
                    73:2b:d2:00:a2:6d:eb:e7:1f:bb:db:bf:de:64:e4:
                    1a:96:61:c5:01:f8:bb:20:15:85:5a:20:62:75:55:
                    14:ef:1c:81:61:42:ce:00:70:c5:16:f5:23:80:4b:
                    63:60:71:9d:c4:a8:93:3c:a7:b9:1c:fb:41:c0:e6:
                    74:ca:28:4a:11:b3:ca:65:bd:73:87:9f:bd:3f:5e:
                    3e:fe:02:e3:4a:89:2c:70:48:f1:26:90:4c:57:50:
                    aa:7d:f6:5e:74:ae:90:b9:f5:ed:11:33:32:b8:10:
                    f2:0e:42:90:b4:a2:3a:ea:12:bc:66:d7:67:e7:b8:
                    52:5c:70:a6:a9:1d:69:d7:56:b4:91:c5:e7:39:c1:
                    14:46:db:f2:d0:f1:4f:b7:28:d8:c3:e1:3b:32:f4:
                    0e:5b:74:72:82:37:b4:9b:cc:e1:f9:5b:99:32:6a:
                    a2:70:9c:0e:54:42:33:79:b4:d9:c8:50:63:8d:48:
                    7f:6b:40:e9:bc:a4:f0:e5:57:56:f9:b5:e7:81:cd:
                    93:0b:e9:27:72:88:b7:1c:c6:44:58:11:5a:50:ee:
                    72:09:14:aa:51:04:24:57:be:a5:5d:ab:f1:e8:fd:
                    82:41:47:a5:28:b8:e6:6b:f5:ff:17:25:35:1b:2d:
                    b4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:B4:77:A8:06:C1:27:12:ED:26:E1:3B:84:DB:DC:6B:2D:4D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:f6:54:70:3e:79:dd:a1:4e:29:9a:be:9d:bc:c9:80:6b:
         a3:29:f1:4f:9a:6d:c2:88:8d:ce:d9:96:c1:16:e4:85:d3:a0:
         dc:e8:a0:45:4f:53:82:e8:65:89:80:9f:07:89:37:c9:0a:4a:
         c3:3f:1b:ad:97:4f:ef:f1:63:c7:6f:de:5c:87:42:83:50:17:
         13:c1:c6:d1:f2:9d:f7:98:94:7a:3f:ae:9e:27:79:11:67:56:
         fb:36:e6:66:60:5c:f7:02:cc:fb:c9:b5:1e:07:8e:1a:b5:70:
         60:d9:34:fd:7b:24:8a:46:1d:b0:41:cd:44:a7:35:1f:3a:31:
         bb:c4:f1:29:0e:c2:a1:09:46:d9:3a:dc:86:be:82:70:54:29:
         ad:a1:48:35:3b:ea:bb:dc:8d:c4:84:82:02:bd:6e:93:25:fc:
         06:c6:a0:f4:e4:5b:44:3c:f0:f3:8c:f4:f0:41:a5:8d:61:64:
         85:e3:f1:53:3d:8d:cf:51:37:83:c8:13:ec:62:80:67:b2:25:
         a4:ce:99:b9:d2:26:b2:a0:36:66:20:3e:17:90:97:19:39:4e:
         c7:f6:3d:d9:fb:9b:af:f9:da:0a:5a:78:c4:29:97:27:4b:7b:
         75:e7:bf:0f:0d:50:a9:db:c6:2d:2f:fb:a2:55:06:49:ca:46:
         bb:5a:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:55 2024 by rpki-client on console-fra.rpki-client.org