Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
File:                     6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa (raw, json)
Hash identifier:          VqBQGnDPjgnQVKO5DGRB02AAD9yKUeO4UZaUY0j/BVw=
Subject key identifier:   01:4E:ED:77:8A:09:17:D7:30:1D:73:50:2D:D1:53:43:ED:85:AA:D7
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F43285847A5D6B17EB829B98EC7ACF7C0
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     174
IP address blocks:        137.155.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:b1:7e:b8:29:b9:8e:c7:ac:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=2028a121-e095-4707-9f46-0d43a71876cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:77:d0:85:b7:99:18:f9:46:f3:8c:31:02:
                    47:83:03:4e:f4:38:87:49:bd:cb:d8:53:07:5b:e7:
                    f2:3f:2b:b3:10:2a:31:93:5a:18:25:00:23:27:a2:
                    c3:32:40:c9:d6:c5:7b:6f:7c:eb:2e:5b:24:b0:2c:
                    41:53:c0:9e:d5:6a:7f:99:a2:23:9e:dc:be:05:a2:
                    06:60:0f:37:56:91:78:c8:48:78:0c:7c:3c:40:75:
                    ce:c7:05:88:58:c8:14:11:44:8d:ab:20:6b:0c:65:
                    9a:eb:7f:eb:eb:f1:40:5b:5a:32:98:fb:3e:0e:22:
                    d9:1c:e8:d9:d8:13:a7:43:2f:be:26:b4:09:e7:b8:
                    78:f7:a5:ad:f0:14:d4:f1:63:0d:e8:12:ef:03:9d:
                    fb:cb:1b:77:fc:2d:60:cb:c4:ce:ba:f4:17:e0:af:
                    bc:c5:cf:be:9c:e5:c6:3c:dc:97:3e:9c:0a:73:10:
                    66:a8:ca:5b:d2:53:cf:39:69:85:76:06:55:85:2c:
                    b9:25:fb:2f:40:12:7d:8c:9c:6d:b2:52:9b:2a:0d:
                    0b:44:7e:a2:e5:53:6d:99:db:c8:2e:0a:ef:23:4b:
                    03:93:88:f8:82:6b:8e:49:eb:9b:23:a3:fc:2a:e4:
                    13:3d:79:5f:99:3b:f4:de:65:3d:51:f3:4a:36:4e:
                    c5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4E:ED:77:8A:09:17:D7:30:1D:73:50:2D:D1:53:43:ED:85:AA:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c9:ce:19:94:41:4e:d3:c7:90:c6:6e:04:3b:dd:1d:68:53:
         f4:93:ee:7f:29:e9:3c:83:e4:57:cc:db:52:89:6d:c2:d4:d4:
         15:a2:bb:ec:83:a6:19:91:ff:38:8d:2c:a2:42:97:00:6e:7e:
         75:a8:f5:09:d6:ff:1b:2a:cf:8e:9f:6f:a5:98:54:6f:f1:14:
         88:2b:05:82:5d:eb:e1:ab:af:fc:5c:d7:10:52:e6:03:4d:fb:
         91:1b:fb:c0:41:1d:ab:d2:40:89:d2:c0:36:00:b1:e8:98:5b:
         2b:71:4c:cb:2c:53:f0:7e:70:cf:1b:17:89:52:ac:87:25:20:
         10:a2:b4:b2:65:4b:72:ab:5d:56:6b:33:90:ae:25:2a:13:5b:
         d2:b2:55:4b:a4:84:fd:8d:93:a4:20:20:f7:89:10:a7:26:39:
         da:a3:72:42:9e:b6:1b:b1:dd:2f:8e:fd:c0:e3:a7:ca:d7:0e:
         f5:ad:b4:94:0e:98:68:ac:4c:4f:f4:d7:56:4b:17:70:14:08:
         f4:11:21:d7:5b:7c:77:53:3c:74:83:e5:b4:d4:95:31:8c:6f:
         45:2a:f8:da:d8:d2:db:c8:15:0f:e8:9b:78:00:34:79:8f:e6:
         03:01:b7:c5:1f:e0:6d:9b:3d:9c:cc:bf:89:70:91:b2:14:01:
         65:ec:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org