Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a3fe507d-fd7b-3e9d-981f-12f88d8f43cb.roa
File:                     a3fe507d-fd7b-3e9d-981f-12f88d8f43cb.roa (raw, json)
Hash identifier:          HK0KkmDLBXospqU3glOEMYJWm8jvoGBgC/X/Q7t/hps=
Subject key identifier:   B6:E0:91:A8:BE:17:95:F0:FB:58:ED:48:C7:79:64:6B:D1:EB:28:87
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584785BBAD0780792A86872C9040
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a3fe507d-fd7b-3e9d-981f-12f88d8f43cb.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     14618
IP address blocks:        137.164.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:ad:07:80:79:2a:86:87:2c:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=38837bd7-1bfb-463b-bb15-46bf333dfb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:cd:31:4c:90:c6:3b:85:18:8b:96:b6:f6:
                    d7:ae:43:5e:f4:2a:95:3f:c9:2c:12:1f:b2:12:a8:
                    31:e8:f7:8f:26:1b:5b:bd:d9:21:d2:89:1b:20:53:
                    30:07:ef:63:04:2d:2f:fa:46:9c:7f:5d:bf:c4:da:
                    02:87:3d:e1:d7:93:65:da:90:bd:5c:31:51:10:60:
                    42:b5:0e:9f:42:aa:9c:bc:80:88:86:ed:58:51:b7:
                    48:82:ed:5f:dc:42:6b:43:06:b4:73:cb:9d:49:e6:
                    69:44:45:05:bb:2b:ef:b7:08:e0:96:63:03:1d:73:
                    f0:71:59:ce:6f:64:5a:cf:87:97:68:24:0d:24:97:
                    96:31:39:9f:61:67:87:db:97:18:24:ea:c4:af:9c:
                    d4:ad:30:26:41:bd:ee:16:f2:31:dc:42:ca:da:90:
                    1c:5d:aa:fe:d7:50:e2:f0:c0:3a:b3:23:50:52:e9:
                    39:6a:ee:3f:2d:a7:99:99:f5:af:2e:47:29:56:0d:
                    62:9e:5c:65:6e:18:36:24:2a:4b:24:c7:48:4a:62:
                    a4:45:f3:b2:9a:94:55:a4:d4:16:da:51:59:39:88:
                    37:01:e7:69:7d:55:a7:ce:73:37:f3:70:96:49:cb:
                    68:52:66:86:c0:3a:68:e8:f1:05:5e:df:0e:f4:07:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:91:A8:BE:17:95:F0:FB:58:ED:48:C7:79:64:6B:D1:EB:28:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a3fe507d-fd7b-3e9d-981f-12f88d8f43cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:7d:8a:60:df:eb:db:36:c9:8d:57:de:d4:3d:7b:99:e0:
         1a:19:b4:31:21:37:e9:3b:55:d1:eb:b2:9f:8e:85:3d:a9:e4:
         3b:27:53:07:b3:7d:b4:c2:fa:c9:a9:b4:eb:b3:54:b6:b5:9a:
         07:d5:41:17:ab:59:fd:48:a4:d9:c2:17:5b:67:ce:32:39:28:
         1b:5d:c3:90:6a:d6:8d:ed:74:42:46:2b:6c:c5:1b:43:a7:11:
         c1:9e:d5:8a:e8:fa:02:78:a5:4b:c5:1c:f0:04:b1:2d:43:19:
         12:8b:c6:92:14:76:3d:9d:3f:49:71:fe:14:7b:5a:f9:a7:8a:
         36:20:0c:33:19:82:dd:72:ee:a9:a4:f7:62:85:3c:80:05:d5:
         dd:39:bc:0e:14:fe:0d:06:b1:11:4e:7d:86:a4:64:ba:3c:ff:
         35:be:13:fe:2e:04:34:e9:e7:e2:3c:6c:2e:32:20:03:62:ad:
         fa:e7:e3:fa:b2:59:85:c4:96:6f:c0:16:4b:66:00:55:24:4c:
         6e:9e:01:6c:68:fa:7d:f2:c2:91:d6:32:2f:81:ce:8f:42:d7:
         26:3f:cf:7b:c9:16:24:e6:6a:af:76:39:aa:77:fb:e9:34:64:
         a3:a3:b8:6a:6b:11:b0:c3:84:68:b5:5a:88:08:aa:2a:c2:6e:
         ee:9f:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:18:35 2024 by rpki-client on console-fra.rpki-client.org