Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
File:                     0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa (raw, json)
Hash identifier:          rOT27DSP+eUUdQ/VaL0K0ld3nnHhT2qO8fXXPaxzcpk=
Subject key identifier:   13:1D:21:6B:A7:DD:B0:16:63:2A:C3:C8:61:5A:B3:91:89:F7:F6:E6
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285845D0D3A362E106DBA65CBA4640
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     202276
IP address blocks:        136.228.221.0/24 maxlen: 24
                          136.228.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:a3:62:e1:06:db:a6:5c:ba:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=82c1edd4-4734-44b1-84f6-31308208426c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b0:d2:ff:4f:22:48:27:48:60:08:30:bc:44:
                    09:f5:5b:dd:7f:87:b2:4b:70:25:3d:27:fb:2d:0b:
                    9d:b2:cb:54:b2:f0:e6:63:54:9e:1d:ba:02:74:c0:
                    9e:86:7c:a4:75:79:bf:9f:21:9e:14:ef:55:c1:30:
                    5f:15:96:28:e5:7c:f8:71:07:ec:7b:c4:4b:20:96:
                    fe:ef:2f:a4:eb:32:77:40:0f:f0:33:73:17:d2:a0:
                    bb:86:6f:bf:4b:70:4c:99:8b:7e:9e:9c:58:b8:cb:
                    a8:9d:52:db:3c:6a:58:35:d8:4a:5b:3e:f0:6d:df:
                    f3:37:be:d6:f4:53:e4:d0:56:41:d3:cb:d7:14:f0:
                    e4:fd:3a:3d:6d:a3:83:29:6c:fd:d4:6e:b8:a7:22:
                    e1:d1:8c:f6:10:65:c3:4a:32:a9:91:fe:38:4d:c6:
                    2a:c5:0f:e3:b4:c3:18:43:05:49:1f:88:be:0f:27:
                    a5:bb:40:cb:a6:8d:74:f2:3a:4d:7d:e2:7b:45:af:
                    d1:55:0a:ce:a7:32:dc:d2:b6:4c:59:f8:b9:b3:5e:
                    00:5e:51:94:26:43:48:d0:0f:f0:22:31:91:4b:e5:
                    12:ca:9e:41:78:7d:6e:05:75:24:5a:9d:b6:b7:23:
                    37:1a:b3:76:d2:1f:5a:d6:bb:ba:b1:14:fa:df:9f:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1D:21:6B:A7:DD:B0:16:63:2A:C3:C8:61:5A:B3:91:89:F7:F6:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.221.0/24
                  136.228.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9e:66:2e:7a:fb:e7:80:07:5b:8f:b9:e1:e4:a0:6f:37:34:
         c8:62:04:f4:95:36:d8:21:f7:49:00:fd:c8:75:d4:56:37:4d:
         3b:d4:b7:b7:c5:5e:9f:a5:ef:71:0d:18:2c:1e:50:0c:9b:29:
         ac:3c:2f:3e:7e:bc:95:5c:c0:97:f2:16:49:e9:11:44:f4:a3:
         7a:ab:83:c6:5f:bc:37:47:14:49:4d:85:16:84:96:19:5c:ab:
         95:d6:ff:81:72:27:f6:82:23:7a:c9:f7:75:2b:c4:93:01:98:
         2b:07:91:8e:c9:dc:c6:15:1e:59:ee:f6:95:8e:5f:9e:ce:39:
         11:8a:1f:1c:6a:56:66:c6:1f:15:af:54:20:40:d5:7c:8a:65:
         17:fb:55:0a:5b:fe:46:70:93:90:07:7c:00:15:17:21:de:f0:
         41:0b:e1:87:3e:13:7d:cb:fe:d2:fe:d3:75:d4:67:2e:67:53:
         3e:63:37:0d:82:80:ab:3a:63:a8:17:dc:aa:7c:d4:64:d9:ce:
         18:43:18:e6:df:ae:f9:11:03:f2:c1:17:e5:50:40:43:2e:b1:
         bd:ee:d0:30:ef:aa:52:fe:a4:35:b1:60:fb:68:04:6c:ef:e1:
         92:82:86:3d:d7:92:57:a6:95:fc:00:57:38:0c:5d:dd:58:47:
         83:68:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:38 2024 by rpki-client on console-ams.rpki-client.org