Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
File:                     85176132-47c9-32a1-9e04-6dadc4f6fc23.roa (raw, json)
Hash identifier:          kLJOYYHhPNZYZS5EnGQVjai6z3oXa6BidbA+OsH3pHw=
Subject key identifier:   5A:1F:9B:B8:35:D0:BD:58:EF:05:6C:2A:20:73:97:8E:A7:5E:1E:9E
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F432858471775BDDF4332644DD83FDC00
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     36001
IP address blocks:        134.195.20.0/22 maxlen: 22
                          162.210.60.0/22 maxlen: 22
                          172.98.220.0/22 maxlen: 22
                          173.242.80.0/20 maxlen: 20
                          192.200.136.0/21 maxlen: 21
                          199.167.212.0/22 maxlen: 22
                          206.126.208.0/20 maxlen: 20
                          209.103.224.0/19 maxlen: 19
                          216.127.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:bd:df:43:32:64:4d:d8:3f:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=40e8b12d-cc13-402e-9b27-e9e6b80a9801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:0a:92:bc:5d:dc:d5:4b:9f:06:d7:70:bf:
                    8b:2c:fe:27:13:1c:7e:74:64:96:a6:5b:fa:d4:10:
                    a2:8d:cf:e7:60:83:40:43:47:39:a2:32:3b:96:bb:
                    50:a6:ba:24:1f:10:62:44:d9:f1:17:fd:73:b3:5c:
                    c2:b7:83:54:79:eb:4c:35:15:dd:08:c6:9f:fe:11:
                    73:51:7d:5c:7e:e2:43:b9:bb:3a:7c:80:6b:e4:b9:
                    1c:f8:83:21:ac:12:f5:02:d1:3e:4e:27:ab:5b:72:
                    7c:8e:eb:3e:cd:af:2b:60:9c:24:f0:e7:a6:85:82:
                    ab:dc:8d:95:2f:fc:30:0d:ac:d7:52:9d:10:5c:de:
                    3d:c1:e6:e6:d3:f3:61:cd:9e:f3:d0:45:25:93:f2:
                    e5:a4:4b:c4:b2:65:4d:81:37:78:80:39:15:e3:76:
                    03:8d:56:20:97:cb:48:66:53:35:2f:eb:de:dc:0c:
                    c6:82:ea:8b:56:06:04:99:ad:c5:25:d7:58:7d:6b:
                    88:12:ae:8f:b8:cd:16:3c:44:98:4b:e3:fe:ed:fb:
                    e1:c2:ad:06:72:6a:65:4f:78:95:4c:3d:0e:8f:b5:
                    1c:1c:a8:1d:cb:ec:75:c3:b0:31:9c:e9:85:b6:2b:
                    32:3b:29:a2:03:44:6a:2d:eb:ea:74:1f:2b:2f:1b:
                    6d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1F:9B:B8:35:D0:BD:58:EF:05:6C:2A:20:73:97:8E:A7:5E:1E:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.20.0/22
                  162.210.60.0/22
                  172.98.220.0/22
                  173.242.80.0/20
                  192.200.136.0/21
                  199.167.212.0/22
                  206.126.208.0/20
                  209.103.224.0/19
                  216.127.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:cb:a8:9a:77:d7:03:89:af:12:bd:31:1c:ae:ee:0e:f8:e9:
         3a:b3:95:38:cc:59:f0:6b:7d:27:35:75:21:a7:9e:59:f6:4c:
         fa:1b:b0:2c:b7:1c:8e:a1:5c:d1:bb:33:f7:8e:15:53:26:bc:
         fa:38:a0:29:17:77:ff:1f:3f:78:9c:f9:0a:79:9c:5f:f2:76:
         66:9d:e2:a3:4e:4f:4a:db:9a:07:df:62:b1:35:6e:f1:b9:e9:
         2e:d8:0f:7e:a7:b3:a4:4d:50:7f:f1:47:23:3a:03:d2:c5:05:
         d9:f7:af:b1:6a:2c:7f:9a:d8:e6:0a:30:be:c6:38:06:65:4e:
         a4:b1:b2:85:86:e2:3e:80:49:02:60:bb:43:59:a3:cd:bd:6c:
         0f:6b:bd:bf:27:5e:f6:cf:a7:e7:7c:87:e7:08:dc:05:19:e4:
         a6:04:46:21:34:20:1c:5b:98:de:20:94:b0:e4:6f:53:bb:fc:
         3e:7e:0e:43:e7:a5:78:6f:ba:8b:c4:15:d7:b4:0a:48:71:3e:
         8e:c8:c3:53:6d:5b:07:e9:03:3c:4b:b8:ec:ce:c5:c5:68:83:
         f9:e6:7c:73:62:c4:93:35:de:b6:af:0d:16:ba:63:33:7c:61:
         9a:36:2b:dd:c5:18:fa:5f:fd:da:b0:67:ef:a2:ec:f6:d1:c6:
         04:4b:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:02 2024 by rpki-client on console-ams.rpki-client.org