Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/d6c46dfc-3937-3d9d-b10f-c63ec2583380.roa
File:                     d6c46dfc-3937-3d9d-b10f-c63ec2583380.roa (raw, json)
Hash identifier:          /NsGZvng7R37sdhBKioWJL1nASxgXG5aN/Svh+KJAD8=
Subject key identifier:   04:D7:01:67:B0:E4:81:44:10:79:89:0D:F8:79:BB:9E:FF:28:9D:9D
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F43285847A5D6B1ACC81934751A0C0660
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/d6c46dfc-3937-3d9d-b10f-c63ec2583380.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     7029
IP address blocks:        137.155.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:b1:ac:c8:19:34:75:1a:0c:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=b930c188-c51b-4b4e-9c24-4eed4a0c3c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:ef:09:4e:e9:6b:cd:e7:f7:44:70:1a:2f:
                    e9:f6:4e:20:7d:bd:b0:8e:4b:61:66:97:59:6f:2a:
                    fd:7d:1e:78:ac:60:4a:01:be:61:79:40:18:7a:58:
                    f4:0b:79:a3:1f:fb:e3:92:f0:4a:03:ba:78:4a:b1:
                    9e:a0:ba:1d:a4:02:a9:2c:d0:f3:60:55:8f:42:d2:
                    69:c4:10:be:ad:36:07:f7:2d:04:06:fe:bf:64:52:
                    47:d2:36:a5:a0:f9:cb:47:a5:11:9f:a0:41:d4:d1:
                    3c:22:55:b1:b2:cd:5e:7e:90:f8:6e:37:66:22:01:
                    a5:cb:13:b4:39:e2:57:c5:f8:d3:24:cc:d8:5f:8f:
                    05:ec:17:8c:bd:31:eb:91:76:bc:45:a1:0c:08:c7:
                    fa:10:82:b7:a1:29:5b:05:b3:24:4f:44:53:4d:08:
                    9e:74:42:b4:d0:42:50:90:ce:e4:f5:e0:74:cb:1d:
                    24:bd:76:95:cd:f6:75:84:74:d7:72:79:33:18:9d:
                    9a:1b:0d:9d:e5:c2:22:7e:53:1d:09:dc:c6:a9:2c:
                    15:4b:bb:19:11:1d:98:3a:94:04:4d:2e:ac:24:43:
                    6b:39:3a:7d:e5:57:a7:e3:49:d1:10:b6:fc:f4:07:
                    8e:d2:fc:6c:48:94:97:bf:93:69:5f:ef:ca:4c:e9:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D7:01:67:B0:E4:81:44:10:79:89:0D:F8:79:BB:9E:FF:28:9D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/d6c46dfc-3937-3d9d-b10f-c63ec2583380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:9b:e2:0c:b4:f6:18:ce:02:01:d1:93:0a:a5:7b:53:80:
         33:9c:0d:e1:b3:e8:de:67:22:76:45:ee:b0:09:3a:4a:fd:f1:
         3e:f2:bd:c5:e5:ef:47:7e:d1:36:c8:53:91:a9:37:6f:3d:39:
         be:3a:6f:09:cd:49:89:9e:4a:be:33:85:fc:a4:aa:b8:32:f6:
         f2:65:12:6b:96:48:27:ba:5a:7f:d6:d4:ae:16:c9:56:a7:62:
         9d:e7:2f:d2:32:3f:6a:29:b0:81:a8:dd:b2:4b:65:c0:1d:a5:
         14:5d:52:bb:56:6b:75:3b:15:cc:27:1c:b0:58:9d:fb:cb:25:
         19:5f:61:e7:b9:86:fc:44:af:ec:60:b6:b8:c5:22:26:e9:c9:
         0f:e0:9b:25:af:8b:42:bf:a7:8d:6d:62:94:2e:d7:a9:41:85:
         4e:fc:3e:5e:1f:f7:0d:ea:17:b1:f1:29:1f:56:d9:f9:37:6b:
         6d:1d:25:15:13:f4:43:2e:e9:e6:92:61:2a:74:2a:73:99:db:
         e8:1c:7f:ca:ca:a4:a4:d2:ea:91:82:e1:84:c9:99:6c:b5:5c:
         47:8c:88:5f:42:9b:61:80:0e:2a:7a:4f:b6:d7:a4:e2:51:b5:
         0a:ab:25:30:63:33:b6:9b:6e:d6:a9:21:09:89:55:80:b6:15:
         18:c2:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org