Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38d77ee0-1423-33c7-905d-21969a456138.roa
File:                     38d77ee0-1423-33c7-905d-21969a456138.roa (raw, json)
Hash identifier:          kkMEi5MAlkb40IZig32DejS+mXqbTPYy7VZiDXoSOJg=
Subject key identifier:   0D:91:51:E8:E5:75:1E:7D:B6:97:13:C2:B9:FF:FC:4E:4E:F7:F6:AC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A10EA658D46D48A5145C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38d77ee0-1423-33c7-905d-21969a456138.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33588
IP address blocks:        137.26.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:0e:a6:58:d4:6d:48:a5:14:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=4535fb67-833f-434c-b7af-a92c43c920e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:f5:fd:2c:35:e8:8b:99:c4:fd:13:29:e7:
                    99:38:eb:e7:40:25:7e:e1:4a:12:58:a1:2b:7a:bd:
                    80:b7:90:7e:d3:e0:bb:31:75:3c:8d:09:3b:71:3a:
                    35:c2:5c:81:a3:9f:70:03:a9:a9:8d:66:e2:9e:a6:
                    f7:45:ff:75:98:7e:1a:e2:ce:c3:d7:ea:22:b9:fe:
                    7d:25:94:87:a0:ec:54:fa:44:8b:f6:6b:c7:d7:2a:
                    ef:2a:87:a0:6b:62:16:b4:1b:72:6f:cc:9b:ef:33:
                    72:7a:0c:20:57:8c:14:dd:be:2c:e7:d2:2e:8d:1f:
                    d7:62:77:a8:e2:e6:d2:1c:4e:1f:4d:2d:35:ff:8a:
                    e9:52:ba:28:d9:8d:d0:aa:f3:5e:d1:90:41:83:9c:
                    ce:75:64:9a:4a:5d:60:f3:8c:1e:7f:0f:36:08:da:
                    cb:47:df:ff:01:62:5e:62:b9:66:28:7d:02:86:50:
                    41:7d:d4:a9:b3:76:f9:c2:08:b1:47:b2:c9:76:d9:
                    4a:0b:d4:1c:61:9d:35:02:f4:be:cd:a1:a4:56:a5:
                    fe:ce:c2:e4:22:79:81:2d:5b:7c:14:af:81:83:2a:
                    99:8f:c0:4c:c1:1b:ee:95:5f:72:3e:2b:99:da:33:
                    69:bc:cf:d9:98:4d:ad:f5:7b:55:8e:5f:49:67:ac:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:91:51:E8:E5:75:1E:7D:B6:97:13:C2:B9:FF:FC:4E:4E:F7:F6:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38d77ee0-1423-33c7-905d-21969a456138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.26.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b0:c1:d7:77:92:ef:d1:f0:74:ae:26:75:67:bf:75:ee:f5:
         c4:50:a8:68:b3:a5:0a:41:78:60:78:ad:1e:1a:69:04:e1:4a:
         0b:98:cf:b1:9c:59:88:94:3e:f9:aa:1a:83:8e:b9:78:36:ff:
         8d:48:01:2e:7b:6f:ad:b3:6c:d5:d0:85:bb:a6:3f:01:0e:5b:
         20:08:9c:09:f4:46:86:74:ec:ea:b6:17:40:8f:59:33:2b:67:
         6b:23:a1:c1:32:f8:38:66:8e:d7:db:75:1a:2c:8b:b7:67:d9:
         3f:c4:f7:d3:90:8d:2f:2b:3e:1e:8e:18:3d:f1:c3:f0:98:cb:
         61:0e:c6:be:d6:67:df:f5:26:96:a2:e4:af:f7:dd:18:ad:5c:
         23:cd:ad:a9:72:3c:2d:1f:f1:67:ec:b5:4b:33:a1:5b:95:f6:
         2b:27:61:7a:4b:9c:55:5f:5b:46:bf:43:d4:c9:34:68:9b:64:
         ef:9c:5f:ad:1d:9c:58:ab:29:3c:af:c7:fc:2b:03:2a:b2:e8:
         ba:da:72:ea:64:b0:5e:65:a5:53:70:98:4d:cf:59:6d:fb:70:
         2c:8b:c5:72:03:45:0c:07:83:5b:74:8e:d1:8c:9e:5f:40:ce:
         fb:a1:67:4a:c0:cb:0c:ac:a7:ed:27:77:d4:7c:ef:79:c3:ee:
         6f:62:41:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:05 2024 by rpki-client on console-fra.rpki-client.org