Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/3daa9504-2bdb-32bf-a3b7-989249f38e37.roa
File:                     3daa9504-2bdb-32bf-a3b7-989249f38e37.roa (raw, json)
Hash identifier:          y2ljNbrSX3Sj+fFUA9HXEjnI9MKN/ti6tOygKDGowzg=
Subject key identifier:   9A:9F:35:63:4B:19:8D:40:DF:B4:C4:72:8F:1C:26:80:25:D6:1C:55
Certificate issuer:       /CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
Certificate serial:       010D0C9F432858452275A330D1220309F6C1CA80
Authority key identifier: 01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/3daa9504-2bdb-32bf-a3b7-989249f38e37.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     7922
IP address blocks:        165.137.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:a3:30:d1:22:03:09:f6:c1:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=68cc2475-727a-4fe4-9a55-e65d7aac880d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c4:39:3a:27:6b:be:a7:96:c7:c9:8b:c2:00:
                    2d:b8:43:1a:c2:a3:fe:81:b3:46:2d:ab:6d:27:d3:
                    72:4f:1d:de:71:8c:aa:1b:e2:65:b7:07:17:b8:85:
                    5c:99:84:d4:5f:07:25:b5:8c:d2:74:1a:94:fe:f2:
                    b5:86:d7:07:92:81:61:a5:98:ed:30:24:04:90:a7:
                    62:53:f0:43:72:b3:28:1f:4a:b4:38:8e:b2:3e:76:
                    6f:7b:25:2f:41:d0:98:28:62:05:ce:85:7a:6c:c5:
                    82:d2:57:cf:f9:8a:37:4c:0f:59:c8:3b:3a:66:98:
                    16:a1:6f:7b:4a:7b:9b:d3:3e:cc:87:1e:79:21:fa:
                    92:1a:39:1f:88:8f:3a:63:37:3f:db:64:1d:a1:26:
                    79:d8:14:d2:9a:08:5b:cb:80:c5:3c:e8:17:05:5e:
                    51:93:f6:1a:23:ff:51:74:f7:07:2a:2f:55:2a:d2:
                    af:d9:3d:a9:e3:55:a8:42:ab:1c:00:bc:f7:11:63:
                    ae:c8:94:45:b5:db:40:62:9c:2d:4c:f8:f8:2d:fb:
                    0e:bb:6d:ca:70:1b:84:06:fb:03:06:c9:00:eb:1b:
                    34:b4:6b:9e:ed:f2:b1:83:46:ea:a0:09:93:22:99:
                    a0:f5:d7:ff:af:c0:e7:87:04:7f:3d:f3:fc:8f:01:
                    1e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9F:35:63:4B:19:8D:40:DF:B4:C4:72:8F:1C:26:80:25:D6:1C:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/3daa9504-2bdb-32bf-a3b7-989249f38e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl

            X509v3 Authority Key Identifier:
                keyid:01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:19:36:5d:0f:0b:e0:9e:c7:75:c1:7e:86:65:4a:f3:f5:e5:
         fa:48:26:19:8a:e0:62:3b:f9:96:ec:86:ed:2c:37:cd:f5:b3:
         38:c5:c5:b7:26:2d:43:1f:2d:1a:7c:5e:ea:01:89:30:e2:c5:
         67:c0:b3:5f:1e:49:aa:da:5d:c7:42:98:2b:99:ea:0a:53:c2:
         b7:27:d2:0a:a2:cb:8b:c8:55:1a:ff:59:e6:8b:f6:7a:78:2f:
         8c:bc:13:fe:9c:23:d4:84:4d:b7:93:69:86:d4:48:b0:66:0e:
         30:ce:db:59:53:ad:04:8f:5a:4f:b5:4d:c2:5c:d6:86:97:0d:
         1e:0b:31:6a:6b:92:fc:49:e6:12:b3:f8:bc:9b:e3:2e:4b:12:
         4a:9f:ed:a9:dd:d8:c2:00:e8:2d:59:51:ec:7e:8b:e8:31:f5:
         04:56:b5:8a:5d:68:cb:33:e6:bb:a1:cd:01:66:fd:0a:56:49:
         51:f9:a2:1a:88:92:2c:f6:63:be:03:99:cc:07:1f:2a:a2:d0:
         9d:b3:7b:f3:cb:a2:af:5b:24:de:1d:76:05:90:45:a9:d8:09:
         78:9b:a6:95:d7:67:e2:11:45:89:b7:f2:ab:e1:0a:36:06:29:
         e4:58:6e:7e:f0:f4:c2:ba:0c:48:a7:b1:13:9a:bd:2f:21:05:
         ff:2a:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:46:19 2024 by rpki-client on console-fra.rpki-client.org