Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d3a9fe2-dfac-30cd-a263-c1a82f65e686.roa
File:                     3d3a9fe2-dfac-30cd-a263-c1a82f65e686.roa (raw, json)
Hash identifier:          NRC73HqXk1QqoL0CW6FRtPi6Qx18ILW8V5O/1yoRfqo=
Subject key identifier:   A3:DB:93:DC:32:84:3A:E3:8D:C8:87:6F:E3:27:9B:2D:96:10:55:85
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F6347148C80DD552A1FE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d3a9fe2-dfac-30cd-a263-c1a82f65e686.roa
Signing time:             Fri 12 Apr 2024 17:24:39 +0000
ROA not before:           Fri 12 Apr 2024 17:24:39 +0000
ROA not after:            Thu 11 Jul 2024 17:24:39 +0000
asID:                     6939
IP address blocks:        136.0.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:34:71:48:c8:0d:d5:52:a1:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:39 2024 GMT
            Not After : Jul 11 17:24:39 2024 GMT
        Subject: CN=f1aac558-1088-4e6b-9af3-67f3f5976521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:53:64:26:70:06:07:62:ef:f1:98:0b:d5:
                    49:42:f3:ee:7e:a1:ba:bb:d1:da:62:be:cb:e7:7e:
                    27:57:40:27:10:0e:c1:9a:c0:0d:81:7d:14:9c:e8:
                    66:97:e7:70:c9:40:b2:66:92:3b:d4:82:58:2e:31:
                    7d:53:64:b2:53:92:fc:11:27:09:1e:c4:52:2a:ae:
                    b1:e4:32:a5:13:23:43:40:62:b5:6b:4d:a4:c4:b2:
                    e0:48:3e:9b:d5:48:de:3f:68:fc:3e:f8:74:77:69:
                    b3:35:00:8f:7a:d2:dd:f4:73:0c:76:99:29:4a:96:
                    96:bb:4a:be:b4:5f:f2:6a:b8:00:d4:7f:a0:ab:2a:
                    2c:69:23:11:09:cd:2c:ee:48:a1:fb:b1:50:1a:8a:
                    10:04:43:cd:84:47:c7:b6:a7:ed:f3:56:b8:6b:72:
                    fd:14:78:36:7e:19:4f:ce:96:f4:75:fe:9e:e8:37:
                    6d:a8:29:4d:16:47:5d:0f:d4:96:48:31:18:2f:33:
                    03:23:95:ba:f9:4d:64:37:18:87:48:ee:0c:6e:31:
                    98:e1:ea:1d:2c:6c:12:e8:53:7a:bb:c2:f2:5b:ee:
                    cd:8e:7b:c6:37:e5:82:43:82:dc:f2:a9:7f:02:07:
                    df:08:c5:8f:92:a8:e7:0d:d3:41:57:d5:74:80:ab:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DB:93:DC:32:84:3A:E3:8D:C8:87:6F:E3:27:9B:2D:96:10:55:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d3a9fe2-dfac-30cd-a263-c1a82f65e686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4e:85:e2:73:5f:f5:1f:6f:50:93:73:08:5c:ee:8f:aa:e8:
         6e:90:a9:9e:45:63:5c:4c:33:08:23:ff:70:b2:49:a0:52:b8:
         6c:7d:50:d8:5a:e6:53:5e:9d:5e:a5:63:7c:8b:18:0d:90:1c:
         16:92:81:cc:0d:a1:5c:76:60:17:c2:e9:48:90:e5:93:05:5c:
         09:5e:d3:2d:21:0d:23:76:d7:33:6a:d4:3c:cd:a6:d5:3d:6b:
         88:1b:f6:3d:dc:9b:f2:b8:1a:36:ec:f1:d4:d6:9c:ed:94:e6:
         96:d8:46:e2:95:8b:f0:ea:a5:2b:75:ec:8d:e8:71:de:bb:cd:
         ea:8d:d8:04:c2:b6:47:ab:07:de:1f:dd:8f:21:97:0c:61:cb:
         2c:26:97:9b:8b:a2:bd:65:32:0c:1f:a8:47:74:07:e0:3e:c0:
         55:5d:5b:c5:f0:45:8e:b7:fe:15:af:2b:5a:cc:8a:08:2a:87:
         38:f1:82:a6:3b:5d:de:5f:86:6f:63:44:8c:c3:9d:0a:a8:9b:
         3d:11:79:73:f6:3a:81:81:e6:11:3a:39:84:6a:07:5e:5c:67:
         9a:08:11:3f:05:61:90:1d:09:30:c6:85:c1:7e:fc:69:41:73:
         f1:10:52:48:83:51:fb:7c:4f:fd:68:09:84:f7:83:61:66:13:
         73:5c:34:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWF9jRxSMgN1VKh/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDQxMjE3MjQzOVoXDTI0MDcxMTE3MjQzOVowLzEtMCsGA1UEAxMk
ZjFhYWM1NTgtMTA4OC00ZTZiLTlhZjMtNjdmM2Y1OTc2NTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk71TZCZwBgdi7/GYC9VJQvPufqG6u9HaYr7L
534nV0AnEA7BmsANgX0UnOhml+dwyUCyZpI71IJYLjF9U2SyU5L8EScJHsRSKq6x
5DKlEyNDQGK1a02kxLLgSD6b1UjeP2j8Pvh0d2mzNQCPetLd9HMMdpkpSpaWu0q+
tF/yargA1H+gqyosaSMRCc0s7kih+7FQGooQBEPNhEfHtqft81a4a3L9FHg2fhlP
zpb0df6e6DdtqClNFkddD9SWSDEYLzMDI5W6+U1kNxiHSO4MbjGY4eodLGwS6FN6
u8LyW+7NjnvGN+WCQ4Lc8ql/AgffCMWPkqjnDdNBV9V0gKsGLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPbk9wyhDrjjciHb+Mnmy2WEFWFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2QzYTlmZTItZGZhYy0z
MGNkLWEyNjMtYzFhODJmNjVlNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtOheJzX/Ufb1CTcwhc7o+q6G6QqZ5FY1xMMwgj/3CySaBSuGx9UNha
5lNenV6lY3yLGA2QHBaSgcwNoVx2YBfC6UiQ5ZMFXAle0y0hDSN21zNq1DzNptU9
a4gb9j3cm/K4Gjbs8dTWnO2U5pbYRuKVi/DqpSt17I3ocd67zeqN2ATCtkerB94f
3Y8hlwxhyywml5uLor1lMgwfqEd0B+A+wFVdW8XwRY63/hWvK1rMiggqhzjxgqY7
Xd5fhm9jRIzDnQqomz0ReXP2OoGB5hE6OYRqB15cZ5oIET8FYZAdCTDGhcF+/GlB
c/EQUkiDUft8T/1oCYT3g2FmE3NcNF0=
-----END CERTIFICATE-----
Generated at Sun May 5 18:16:02 2024 by rpki-client on console-ams.rpki-client.org