Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/537bd3b2-fe36-36b4-b5b2-ffa59de34d51.roa
File:                     537bd3b2-fe36-36b4-b5b2-ffa59de34d51.roa (raw, json)
Hash identifier:          Qhj+RKLVqaFSfJFKR/mo7uboUmDK4SgRGXYNIyEkRnM=
Subject key identifier:   60:A3:97:F3:9A:5C:1D:A5:72:8F:84:EB:0B:18:6D:D2:7B:32:03:11
Certificate issuer:       /CN=13f2987b-65e9-4b0f-9061-f324b366fd94
Certificate serial:       010D0C9F43285847299B1756E6DE3516B059DB00
Authority key identifier: C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/537bd3b2-fe36-36b4-b5b2-ffa59de34d51.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     32425
IP address blocks:        208.73.136.0/21 maxlen: 24
                          2620:a8:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:17:56:e6:de:35:16:b0:59:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f2987b-65e9-4b0f-9061-f324b366fd94
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=21bea0c0-4635-43b4-b1d4-2d89c6fc1904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:54:c7:83:e1:8f:2c:b3:bf:66:07:71:e0:
                    0e:da:78:01:8f:34:db:55:6a:64:cb:73:1e:4b:e1:
                    55:8d:2a:0c:98:53:d6:0c:76:71:60:24:05:b9:6f:
                    07:c4:d9:4c:2b:ae:d2:ed:ca:63:f7:4d:59:0d:52:
                    a4:09:de:2d:4c:53:8f:d2:93:8d:1a:81:b2:ef:08:
                    15:40:2f:8f:b1:48:4c:de:30:21:cf:f5:ba:e6:79:
                    51:12:09:78:e9:ef:c7:f9:96:27:4b:55:40:fd:8a:
                    17:94:ee:5a:74:61:82:da:34:0b:55:b4:96:1a:a7:
                    02:1f:7c:6e:c6:1b:33:a5:7d:5e:03:60:53:7e:c8:
                    cc:9a:4e:08:3d:a5:e6:ea:90:63:67:0d:b7:d7:ed:
                    c4:00:24:b6:eb:e4:b8:1e:45:12:e0:6a:08:99:09:
                    3a:88:a3:94:51:e9:05:76:77:27:65:aa:c7:b5:e9:
                    d4:16:a3:bd:f0:77:5b:f0:d0:00:90:8d:48:50:48:
                    7f:a1:d8:3b:d4:f4:9c:3f:7f:6c:61:33:ab:70:6a:
                    c0:7d:f1:af:0c:d5:fe:cc:43:9e:2a:d5:9e:0f:a5:
                    d0:45:8e:13:de:ff:14:5a:6b:7b:d5:dd:95:93:aa:
                    57:e9:4c:be:68:1c:6a:c6:82:73:3b:ee:b3:60:b8:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A3:97:F3:9A:5C:1D:A5:72:8F:84:EB:0B:18:6D:D2:7B:32:03:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/537bd3b2-fe36-36b4-b5b2-ffa59de34d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94/13f2987b-65e9-4b0f-9061-f324b366fd94.crl

            X509v3 Authority Key Identifier:
                keyid:C6:DD:C5:F3:AF:38:3F:F0:6A:87:FA:FA:F8:CA:F5:AE:CA:C4:C3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/13f2987b-65e9-4b0f-9061-f324b366fd94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.136.0/21
                IPv6:
                  2620:a8:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:60:da:8b:b2:d5:69:e2:eb:67:9b:a9:85:88:af:6a:c3:
         f4:35:98:37:af:4c:eb:fd:9b:e7:7b:eb:23:c8:e4:02:7c:bc:
         19:cf:20:4e:bb:ba:8f:97:4d:fb:33:17:23:e4:95:c8:2a:b8:
         23:17:34:59:a4:61:e0:f1:b1:d6:d8:f5:ef:3c:1f:ff:78:bc:
         0c:7b:b6:7c:7e:78:75:07:aa:b1:9c:56:25:42:35:b8:9c:1c:
         86:b6:77:0d:c7:44:03:ae:c1:96:84:1a:b3:d6:3b:7a:aa:d6:
         86:76:2d:fb:0e:5a:ff:ae:5a:94:52:21:26:ad:3c:29:98:77:
         79:ee:24:eb:17:cb:3c:01:76:e1:58:86:21:4b:d3:de:35:02:
         10:d1:b6:de:35:cf:de:d8:ac:2d:d6:d1:07:ed:12:66:b7:05:
         22:1c:bb:98:76:80:e7:8d:87:45:f6:6b:33:41:7e:5b:2a:70:
         8b:8f:e2:1b:92:9c:1f:02:49:46:1e:1e:31:90:fa:ee:55:59:
         b8:e6:02:a6:d8:0f:00:33:66:f7:29:ab:a1:f8:db:18:76:a1:
         81:a2:5e:5b:1f:52:52:de:fd:21:00:65:44:66:f8:1e:f5:74:
         f0:1b:7d:0c:c6:ea:70:a0:98:7b:3f:9c:f2:61:54:d4:e9:37:
         ef:eb:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:27 2024 by rpki-client on console-fra.rpki-client.org