Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3253f508-d6a0-3b59-abc7-8a3344a0e12c.roa
File:                     3253f508-d6a0-3b59-abc7-8a3344a0e12c.roa (raw, json)
Hash identifier:          L+lAoab+EpyhGs2gc3QqSwjBP/5ZVENnhhm11mTVBfk=
Subject key identifier:   EE:B1:F6:A1:D8:99:9B:92:DD:DE:97:9A:3B:FA:63:E0:E5:08:DE:39
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285845A428B5F472F9949AC9D76E00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3253f508-d6a0-3b59-abc7-8a3344a0e12c.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     396982
IP address blocks:        136.227.140.0/23 maxlen: 24
                          136.227.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:b5:f4:72:f9:94:9a:c9:d7:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=5d036998-1ef7-4175-94dd-57c96d7e16e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ad:90:95:b6:c8:8f:17:5a:a6:36:5c:2d:a8:
                    89:f1:f0:ba:4f:ee:14:05:e6:6d:dc:53:a0:e1:bb:
                    3f:29:be:d0:b4:93:d3:4c:73:4b:2c:ce:08:79:2f:
                    02:85:00:2c:ff:f6:e6:a1:2d:3a:c7:bf:45:79:ff:
                    b1:75:06:5f:d4:59:ec:a1:26:34:1a:10:f1:bf:6b:
                    62:86:fe:e3:73:f9:61:0b:89:ce:d5:a2:dc:be:f0:
                    eb:7e:8f:67:93:73:7c:cd:8f:db:34:8d:07:86:ac:
                    d3:ab:ba:6e:55:e1:ed:37:99:fc:f5:82:ba:08:78:
                    c9:87:35:fc:86:b3:e8:69:dc:20:7d:83:18:40:d8:
                    fb:73:a4:32:9a:1e:0a:4c:eb:2b:e4:5c:1d:1d:bf:
                    3e:05:92:0e:89:89:26:eb:d8:ee:5a:68:20:31:13:
                    77:b0:24:9e:5e:7a:d3:e0:a0:ac:15:1e:ed:4f:7e:
                    2f:3f:13:87:4f:79:08:11:44:03:88:b2:f3:ae:23:
                    de:c5:27:92:2d:b9:71:27:b7:e3:64:61:ca:c8:3d:
                    cf:cf:fa:37:30:a4:9c:9f:b7:68:d7:e8:61:1d:96:
                    3d:0e:55:20:c6:f2:30:ad:15:d2:d3:f0:75:d3:5d:
                    45:dd:16:2c:72:cc:60:00:52:1a:ea:22:79:e2:18:
                    d9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B1:F6:A1:D8:99:9B:92:DD:DE:97:9A:3B:FA:63:E0:E5:08:DE:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3253f508-d6a0-3b59-abc7-8a3344a0e12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.227.140.0-136.227.142.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a5:1e:5f:e1:ef:1a:ae:9b:7f:b9:c2:27:83:91:03:c1:c0:
         7a:95:d4:f9:10:9e:3e:9d:07:5a:c9:4b:92:1d:34:0f:bc:30:
         b0:3d:fb:a0:62:f1:c3:60:8f:77:46:59:d9:fa:88:97:94:33:
         ee:92:0a:8f:11:e6:b7:20:e9:75:23:55:e5:e0:73:94:dc:7f:
         53:99:13:81:33:b0:4e:c1:a3:ce:c4:5c:10:90:ef:0d:ad:a0:
         b6:16:8d:96:03:3d:a9:2d:31:ee:a8:a8:db:b6:df:f8:a2:b8:
         f5:65:c3:da:c5:87:83:79:0d:4e:75:e1:df:4e:b3:e1:d0:53:
         d5:d3:e3:77:84:6c:72:9a:73:7d:9d:74:57:18:ad:6f:28:c2:
         5d:26:62:39:e8:a1:71:9c:6b:5c:53:5a:ae:66:56:b3:b2:f9:
         14:02:82:b4:6a:3e:01:c3:4e:d7:83:2e:ff:26:12:12:43:70:
         3f:5f:fb:d1:41:02:a8:76:ef:3b:4a:d9:58:dc:d2:9c:92:8d:
         31:3a:90:7f:0c:20:b4:c5:a8:16:df:16:db:c4:ec:38:8d:84:
         da:2c:cc:5b:7e:25:c9:66:2d:8e:98:db:e1:8b:97:30:8b:93:
         de:aa:78:41:d4:2b:84:fd:8e:56:bc:da:79:88:7c:35:c8:05:
         5c:3b:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:52 2024 by rpki-client on console-fra.rpki-client.org