Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/13998bd5-7082-3169-8300-529a940247b4.roa
File:                     13998bd5-7082-3169-8300-529a940247b4.roa (raw, json)
Hash identifier:          oz83UxP09gClilU33s5zWzMSRjLf0xypPmtrNO5Ikck=
Subject key identifier:   8C:00:2D:7E:E6:7F:1A:4B:42:BB:70:3A:29:C7:27:B7:1E:67:B2:8B
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F4328584774FB896BC7DAF951DD618740
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/13998bd5-7082-3169-8300-529a940247b4.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     11664
IP address blocks:        173.241.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:89:6b:c7:da:f9:51:dd:61:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=afb2e387-83b0-43eb-8bb3-d0d0f4b88559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:8e:21:c4:2e:2f:76:40:42:62:94:b2:41:
                    93:da:0b:48:d0:22:9f:8e:9a:01:14:45:df:20:a6:
                    38:db:46:df:44:a7:f4:3e:6c:7b:31:51:07:af:fd:
                    d5:a2:4e:17:2a:a8:1e:5a:95:e2:66:9b:16:a0:f6:
                    6e:b2:b2:3b:c2:c4:95:63:df:25:bd:e1:f5:9f:cd:
                    62:76:1b:b3:04:66:18:e6:dd:ed:aa:ab:09:94:33:
                    80:98:66:98:23:94:c3:90:68:6b:b9:e9:d8:45:58:
                    84:23:1c:3c:e6:fa:fc:fe:a0:9a:de:60:f9:c0:9d:
                    7c:23:7c:3c:ff:89:70:08:a0:b6:fc:28:fc:c5:4a:
                    cc:89:11:b9:5b:96:98:e3:41:e4:89:ed:30:b0:e8:
                    df:72:48:16:13:4c:2e:36:99:34:22:ad:b7:e5:fc:
                    dd:d6:7c:61:3c:3c:ef:4b:89:54:5b:0e:af:e5:b3:
                    e4:ad:55:24:9d:a2:a5:ab:e2:59:21:dc:70:b5:86:
                    01:26:ec:e7:32:d5:3c:b1:fe:86:dc:83:79:38:f3:
                    25:2c:58:1e:ec:bb:53:54:2f:bc:06:e9:46:b0:9d:
                    0a:8b:04:f9:7f:36:56:8d:bc:da:b3:16:73:d0:24:
                    cc:76:5b:a7:26:20:46:65:95:64:b4:91:1b:0e:26:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:00:2D:7E:E6:7F:1A:4B:42:BB:70:3A:29:C7:27:B7:1E:67:B2:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/13998bd5-7082-3169-8300-529a940247b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:cf:0c:4d:12:6a:db:8b:5c:d0:0f:e5:b3:70:b9:9c:43:c7:
         d8:26:10:02:3a:b2:80:27:4c:2a:c0:40:22:5f:99:cf:04:cf:
         15:d6:01:70:1d:f3:d1:28:8d:97:87:14:e3:b9:36:88:45:f3:
         02:15:ef:8d:ad:0e:13:56:0c:cd:a2:ae:60:c1:f3:14:c8:c9:
         99:69:1d:2e:3a:20:bd:59:e6:e1:a1:28:00:42:8b:17:74:f9:
         83:77:9c:ab:74:d3:b0:03:77:8d:69:1a:a6:d8:5a:6a:22:75:
         4b:15:85:e4:8d:01:79:3d:c8:73:41:f4:ae:87:97:a9:ca:0e:
         11:a4:e0:42:8a:7f:2d:d0:a3:6d:db:e3:ec:ee:ee:1b:d4:7c:
         33:99:23:27:5d:43:cc:52:22:94:e5:cf:28:d5:9f:c1:ce:78:
         4c:ba:0e:c6:d6:88:e9:29:a4:d1:6a:2c:33:d7:3c:ba:c5:d4:
         76:3f:53:50:4c:13:ab:a6:8c:3a:68:10:4c:44:31:9f:0f:1c:
         2c:3a:16:9f:b9:e2:e1:39:5f:e8:6d:58:26:dc:94:3f:6b:5e:
         5d:13:01:52:e2:af:36:fd:85:bc:54:da:45:7a:b9:1b:44:bf:
         8b:f5:ad:bb:ad:81:79:ff:4c:d0:2b:6d:88:a8:f6:25:15:ea:
         29:ac:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org