Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/a86bb747-e58b-341e-a8ab-0edb1319f570.roa
File:                     a86bb747-e58b-341e-a8ab-0edb1319f570.roa (raw, json)
Hash identifier:          qNAPaBMM8f+XcSDDVXlT2nuRB/yAHvoDWJZqCwdb26o=
Subject key identifier:   C5:E9:EB:3A:BD:42:B1:CB:A7:F7:D9:D1:A1:C1:BF:55:9D:78:62:DC
Certificate issuer:       /CN=c235459b-705a-42fb-9059-b6a9bf0c853f
Certificate serial:       010D0C9F432858450E67BE00422B5EBD4C972D80
Authority key identifier: 15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/a86bb747-e58b-341e-a8ab-0edb1319f570.roa
Signing time:             Thu 29 Feb 2024 21:36:25 +0000
ROA not before:           Thu 29 Feb 2024 21:36:25 +0000
ROA not after:            Wed 29 May 2024 20:36:25 +0000
asID:                     393905
IP address blocks:        136.175.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:67:be:00:42:2b:5e:bd:4c:97:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Validity
            Not Before: Feb 29 21:36:25 2024 GMT
            Not After : May 29 20:36:25 2024 GMT
        Subject: CN=927ddd91-c140-4bf1-bd95-45edf905651f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:9e:6f:c6:32:63:c2:26:f0:f5:83:68:72:
                    57:4a:74:ba:1b:80:c4:cf:13:ac:05:76:a1:6c:c1:
                    56:37:d1:eb:6c:f3:5c:cf:8a:cd:dd:61:15:6a:59:
                    b4:94:c1:77:08:74:56:a7:b6:0f:93:76:2c:da:29:
                    db:96:ff:19:ed:aa:6e:57:64:8e:9b:74:cd:96:1d:
                    19:fb:6d:b3:7e:95:82:87:9f:33:15:c2:b7:e0:ff:
                    c5:04:2d:c1:57:7f:60:2f:cf:92:0a:4c:47:a2:f4:
                    22:59:e1:d5:76:7e:31:3f:6e:f8:6c:d8:a7:96:11:
                    6d:50:7b:42:f8:15:a6:ec:35:06:fa:e7:da:8b:b4:
                    37:81:de:08:98:9b:a7:b9:5a:da:1c:ab:10:60:82:
                    5c:6e:7d:a3:48:f8:e6:b6:d7:d0:2c:ae:a6:d7:6d:
                    76:26:1d:52:ed:78:b3:4d:95:0e:60:4e:d1:06:74:
                    0f:88:70:3a:d2:19:dd:11:77:51:3c:6b:ef:98:71:
                    7f:63:60:0a:18:10:5e:e3:e9:60:0b:12:22:f2:64:
                    8e:f0:ad:7b:7b:a9:c1:51:78:30:a0:89:6c:20:6c:
                    57:03:25:68:84:4c:b7:9f:c4:b1:32:8b:b5:80:b1:
                    7f:00:47:c6:7d:37:ba:f1:8e:3a:31:10:e8:0e:7f:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:EB:3A:BD:42:B1:CB:A7:F7:D9:D1:A1:C1:BF:55:9D:78:62:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/a86bb747-e58b-341e-a8ab-0edb1319f570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl

            X509v3 Authority Key Identifier:
                keyid:15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:61:1c:c4:bf:7d:c4:a6:b7:92:43:7d:90:ac:c3:5f:85:36:
         9d:65:1e:39:14:fb:6d:16:cb:bc:6d:63:47:5e:ce:65:7b:5e:
         ac:f3:f7:f0:63:e0:22:37:a6:86:a0:c9:06:da:99:a5:15:14:
         e6:87:b7:cc:af:eb:db:11:d9:bc:c7:4e:b1:22:8a:60:ba:63:
         fc:d1:97:2b:0e:7e:2e:77:38:93:2b:bd:b7:93:57:fe:78:a5:
         3e:4c:07:89:36:52:f4:2b:63:34:54:36:b9:bd:78:2b:22:87:
         63:f8:ba:5d:0a:51:7a:40:74:bb:b3:31:d4:de:4a:f5:b4:64:
         01:ab:f7:bc:66:bb:50:ce:9a:a5:0a:6f:48:c3:6c:55:5a:cc:
         58:9a:1b:00:3a:63:89:17:9f:b2:b5:93:92:88:2b:d3:36:92:
         85:94:0b:eb:cd:96:83:47:50:6e:ba:2d:01:d1:ba:04:c2:d5:
         db:b8:49:8d:f3:7d:b2:10:92:e9:a3:3b:e4:82:6f:c9:a8:7c:
         59:c6:84:b6:4d:3a:84:32:84:cc:87:29:df:e9:7c:19:70:8c:
         66:4d:bf:53:c5:56:b4:ae:d5:b8:23:2b:27:6e:cf:95:43:3b:
         ca:49:44:a7:81:12:67:ea:83:e1:6c:f5:0a:15:88:ae:2f:c3:
         fb:47:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org