Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa
File:                     b5345dc5-a721-346f-a285-62853822bb1b.roa (raw, json)
Hash identifier:          Fkk6FHjlu537zxzp2I7wWTRo9KhKP0iTUW/ZGmZ1p8Y=
Subject key identifier:   5E:13:C7:45:CC:2D:0A:51:7E:53:CE:8B:B7:1F:78:1A:6C:F2:4F:FB
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584561284F70AB17D693AFE36640
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     137922
IP address blocks:        136.228.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:4f:70:ab:17:d6:93:af:e3:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=1d6fa15b-6e2d-4e61-8e2a-1009f906486c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:20:67:49:7d:f9:f5:5c:7a:3a:99:cc:aa:
                    2c:54:56:fe:41:0f:33:5c:11:9d:7d:8b:93:33:c8:
                    49:06:a8:37:4b:74:42:6d:d3:1a:e9:6f:8e:b9:ca:
                    76:52:92:98:24:48:c5:a3:16:95:60:78:60:d8:a2:
                    10:92:a0:05:49:5b:f6:22:6b:69:e7:34:4f:b9:98:
                    f1:0b:02:8c:47:fb:ce:31:de:76:5f:56:dc:12:1a:
                    1a:eb:ac:ab:1b:00:31:54:a5:de:47:e5:ad:88:e7:
                    38:03:28:12:68:b8:16:fd:1f:02:93:c2:8e:34:88:
                    01:c4:e0:61:d6:02:8c:c8:70:1d:c2:c4:40:7c:75:
                    28:52:41:f6:3b:16:80:11:35:aa:6e:9a:39:b1:04:
                    ac:f4:7a:92:cf:84:85:01:f0:68:9f:c2:7a:45:cd:
                    82:bc:e9:c5:aa:c8:82:87:03:76:97:9e:3e:86:bf:
                    e1:08:57:d5:27:79:62:bb:b0:28:66:3b:ec:5a:0a:
                    89:66:00:26:71:6f:09:26:cf:f7:71:02:e8:ac:66:
                    29:32:95:65:c9:26:e9:e4:77:94:90:d9:6c:36:74:
                    c2:b2:73:e8:9b:a8:70:76:97:9a:ef:b2:d5:a4:fe:
                    12:4d:94:62:0b:dc:ef:3a:cb:88:4f:79:01:08:37:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:13:C7:45:CC:2D:0A:51:7E:53:CE:8B:B7:1F:78:1A:6C:F2:4F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:20:e7:42:36:45:0b:bc:fe:d5:25:a5:75:24:d8:47:25:dc:
         1e:86:2a:c5:58:5c:e5:0b:c1:dd:2b:7b:95:4d:45:de:51:91:
         c8:15:a5:77:13:8e:21:9b:06:52:91:fc:59:fd:34:28:79:7e:
         8c:a3:d6:84:1c:85:f7:48:32:b2:f9:ad:1d:62:8d:bc:df:c9:
         fa:99:23:88:fd:92:24:81:3d:27:df:15:83:1f:3c:69:40:ef:
         69:4c:55:66:81:c5:ca:8a:86:1c:db:ca:cb:82:c2:54:e9:7d:
         61:c1:4a:bf:08:80:14:ef:45:36:e3:05:3a:7d:64:dc:d8:0b:
         45:0c:03:7e:d1:2a:66:b0:59:aa:a5:81:02:57:1d:6d:9f:b7:
         62:e2:67:0e:b7:c2:00:07:c8:64:2e:38:05:26:7c:e0:13:b0:
         51:8c:a5:43:27:58:f0:04:0e:2e:ca:e6:23:5d:b7:77:51:1e:
         45:1e:b5:2f:7b:c5:36:2f:27:54:c8:93:d0:4f:e1:ac:7b:85:
         49:b3:c8:1e:a3:e7:4e:db:46:5e:b3:3c:9f:da:ad:b3:1b:5e:
         21:3f:68:7d:8f:55:0f:af:97:38:82:fc:bb:0c:4f:97:0b:85:
         6c:ac:18:84:a4:4e:06:10:5f:fc:9e:bc:b2:fb:70:0b:47:c7:
         87:65:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:32 2024 by rpki-client on console-fra.rpki-client.org