Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa
File:                     e218169e-d661-33ed-b65c-0a3b861e3023.roa (raw, json)
Hash identifier:          Vqe3Sn4VsYqfIhE8pj0QtzpdUlCwctTNxpaiBH2rkjw=
Subject key identifier:   86:A7:D7:DF:55:27:91:65:68:19:7D:30:E9:C6:EC:68:87:90:A0:D1
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584529528BD86C13FB22457F2180
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     396253
IP address blocks:        136.228.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:8b:d8:6c:13:fb:22:45:7f:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=38518e83-c42c-4f94-9867-08e6fbb181da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:5c:b9:21:78:4d:68:ec:1c:a9:1d:c8:1b:
                    ec:2f:8f:e5:65:84:b1:bd:eb:97:f4:03:32:a1:26:
                    30:5e:08:7a:40:df:02:3d:ca:6e:4b:25:b2:e5:94:
                    18:0c:51:f2:bf:1d:e8:09:b6:27:c0:ea:65:fe:a9:
                    a3:d0:99:ff:85:7b:27:92:b9:63:4b:a9:06:1d:cc:
                    45:bb:84:43:fb:55:a4:c2:66:5a:d2:e6:fc:7a:c4:
                    44:06:56:ca:47:04:2b:cc:af:a6:1e:d4:d4:e6:fb:
                    eb:f3:ad:19:d4:57:70:7c:38:d5:9d:d7:98:48:b7:
                    86:ff:6f:6d:25:be:1f:d8:3f:a1:87:f7:0c:2d:a9:
                    36:79:bb:87:88:70:d8:41:fc:22:1f:35:09:51:10:
                    0e:e0:8d:c3:5c:eb:80:08:84:69:b2:d2:9f:4d:53:
                    f6:28:25:a7:9c:ac:ee:14:c3:a7:5d:53:ee:d3:31:
                    12:35:e9:48:b8:de:2a:5c:a2:c9:58:01:83:df:ac:
                    57:52:6b:84:9d:7d:14:8c:76:4b:7c:e0:df:5f:52:
                    77:22:e1:0b:af:fc:c6:2f:89:22:c4:15:7f:ca:36:
                    cd:05:f6:38:b4:1a:01:37:ca:ce:55:0c:81:64:a1:
                    62:a8:66:54:25:98:e5:a2:16:e7:c4:10:47:14:5e:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A7:D7:DF:55:27:91:65:68:19:7D:30:E9:C6:EC:68:87:90:A0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:96:05:fb:31:f6:dd:33:a6:7a:a0:24:73:ae:60:a8:f5:7c:
         c7:9c:cb:51:9c:4f:7e:e6:c5:85:af:fd:76:8b:0f:56:32:86:
         4d:ac:65:0b:35:04:69:a9:48:10:87:f0:92:d5:3e:19:e0:6b:
         bb:41:e5:d9:6a:a7:d9:8e:71:4a:b7:5a:2a:6c:18:c6:5a:9f:
         7f:f4:1c:53:11:f6:5f:4b:72:81:a7:8b:26:e7:9c:bc:45:43:
         ef:68:07:a2:28:7e:ef:83:90:4e:bf:5b:fa:f6:ce:f0:2f:f0:
         8d:61:16:03:f8:6b:75:51:08:6b:fa:34:c0:aa:23:c2:9b:40:
         71:ec:c2:68:6e:ba:d9:c6:80:1b:59:f2:2a:66:95:74:2e:bd:
         6e:85:a5:41:60:92:cb:ba:7a:a9:cb:8c:9e:79:8c:6b:21:71:
         bd:c0:14:9b:87:f0:8d:a3:dd:8c:0f:d8:fc:eb:3e:6f:88:c2:
         5d:ad:5e:2a:d6:cb:2c:29:04:00:76:58:61:0a:67:d1:5b:81:
         c3:fa:81:0f:8b:5b:1f:08:52:ef:9e:9f:f4:34:16:e7:bc:4a:
         b5:b6:77:4a:38:ac:87:1e:5c:11:d2:dd:85:a4:91:76:0a:9c:
         e0:5e:d7:50:98:20:10:ca:bd:e4:34:e7:ab:86:dc:9c:a5:a3:
         01:10:d5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:32 2024 by rpki-client on console-fra.rpki-client.org