Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3632808f-373c-31c9-a95b-5c2400722b65.roa
File:                     3632808f-373c-31c9-a95b-5c2400722b65.roa (raw, json)
Hash identifier:          d6pdY/+8FIVNn4zlLzbKSPVBitQw8L0H5C8ijFRMUeQ=
Subject key identifier:   CC:B1:6E:32:54:6E:17:ED:61:98:05:FE:9C:44:FF:DB:70:1D:26:17
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285847DCC4919EB7FCD8CC97783EC0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3632808f-373c-31c9-a95b-5c2400722b65.roa
Signing time:             Wed 13 Nov 2024 05:13:51 +0000
ROA not before:           Wed 13 Nov 2024 05:13:51 +0000
ROA not after:            Tue 11 Feb 2025 05:13:51 +0000
asID:                     149208
IP address blocks:        137.59.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:c4:91:9e:b7:fc:d8:cc:97:78:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Nov 13 05:13:51 2024 GMT
            Not After : Feb 11 05:13:51 2025 GMT
        Subject: CN=1701b8a5-133f-4596-b549-fcb637ae90cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:40:d4:39:31:f0:a3:09:be:32:c1:d1:4f:
                    6a:82:32:58:55:25:dd:c4:36:f5:75:9c:9c:71:6c:
                    09:ad:10:fb:30:a0:e2:e8:22:66:89:ae:e4:40:5f:
                    ad:71:08:fa:2d:4b:97:30:1c:78:24:62:25:7e:e1:
                    39:b4:72:75:c9:6e:0a:74:ee:54:3c:b5:f2:b3:69:
                    55:70:47:52:53:ca:0c:96:4b:0a:e2:a0:e5:d2:19:
                    36:15:23:eb:f3:4f:e1:f0:1c:f5:1a:62:00:b0:71:
                    0d:ab:5f:c0:a7:ae:e9:7b:88:b8:0f:7e:e6:5a:ae:
                    ea:a0:60:34:bf:1e:0c:4c:0b:b6:49:02:7c:6c:19:
                    b0:e4:80:92:82:f2:e5:af:f2:65:be:67:d1:1f:80:
                    9a:23:6b:b7:6d:67:ea:5d:b8:67:45:bc:ef:06:30:
                    a1:bf:4a:2a:4f:ef:90:df:45:44:02:f7:4f:2a:60:
                    bd:90:a3:5c:39:1d:30:45:da:7c:49:80:b0:6d:12:
                    eb:c9:81:99:93:11:02:47:dc:cb:6a:c1:9d:86:08:
                    12:4b:47:14:40:7c:05:dc:ca:44:6b:47:c8:5f:a8:
                    af:ad:87:de:da:4d:fd:3b:b1:d8:91:4f:3f:16:62:
                    26:f8:19:74:fd:7a:bd:1b:ce:43:a7:39:9c:8c:29:
                    a8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B1:6E:32:54:6E:17:ED:61:98:05:FE:9C:44:FF:DB:70:1D:26:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3632808f-373c-31c9-a95b-5c2400722b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1b:2e:03:d5:c3:6e:b0:52:6e:d6:d0:5f:40:d6:ca:1b:44:
         dc:a2:f1:62:fd:f9:2a:6a:db:35:7f:59:32:48:de:ca:f7:d0:
         6b:66:19:a3:11:60:5c:92:6f:93:b5:1b:d5:f0:40:68:54:38:
         99:d2:18:f2:07:7a:eb:5b:22:1b:d1:b1:fb:9f:03:9e:70:63:
         00:ce:64:b9:c4:d2:51:a3:fb:40:b9:44:5c:d4:32:22:35:10:
         2e:81:82:54:8b:3c:ca:56:e6:47:15:44:53:ed:e5:98:3a:22:
         1e:ae:ca:9d:3c:9f:86:11:ed:98:d8:d4:49:2c:59:29:9a:a1:
         18:2d:95:ec:3f:30:69:c8:ba:ff:d7:35:24:e3:98:e8:45:a2:
         65:30:7d:e8:c9:99:bf:76:c0:5c:cd:ab:6a:a9:dd:66:7a:88:
         85:0a:57:56:f8:d3:f9:70:bb:76:cf:62:b1:f1:4a:8e:a5:9d:
         6b:05:d8:a3:4a:48:c9:4e:b1:03:7c:f3:28:37:c5:b8:eb:25:
         b1:5b:6e:d8:37:6a:d9:85:4d:5f:fd:58:13:fa:61:2e:01:e7:
         fc:c4:9e:78:2a:a8:11:58:1f:64:6b:ad:eb:9b:cd:84:9f:29:
         c1:47:cf:ff:a0:a5:77:fb:65:cc:eb:9d:8f:3e:ba:05:e7:9f:
         78:ed:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:30 2024 by rpki-client on console-fra.rpki-client.org