Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa
File:                     0250530e-60f1-3b41-aba9-e6d0f26b8737.roa (raw, json)
Hash identifier:          Sw6GDlw8Hu3AmvpcD5Za2ngWAeEYXdxFx/b+PwmK+oA=
Subject key identifier:   B0:79:AB:B4:94:01:4F:CA:56:81:84:3F:08:D8:C4:B3:13:2A:89:DF
Certificate issuer:       /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial:       010D0C9F432858456F1DC7903DB48EF7B97611C0
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     36136
IP address blocks:        131.201.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:c7:90:3d:b4:8e:f7:b9:76:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=327e204c-41e1-4dac-9c86-584f2f02b338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b4:de:a8:90:64:90:c0:c5:08:46:da:45:0f:
                    2a:5a:89:54:70:a8:e7:95:f0:6d:40:3a:d4:90:fe:
                    d7:fc:a3:f6:bf:05:55:7f:8b:7a:d8:cd:31:95:a4:
                    9e:f9:6f:c8:e2:98:d2:26:ab:73:0f:4b:a6:7e:50:
                    73:0b:eb:8f:5f:dc:3c:38:98:84:b4:c6:dd:d8:0f:
                    0f:77:49:0c:f0:9e:db:3a:84:26:b1:d9:c0:26:7d:
                    f5:d3:b2:99:e6:9b:3e:e8:27:27:d8:18:61:7a:d9:
                    1a:ae:d4:c9:2e:a3:b4:d0:6f:64:e9:de:71:65:29:
                    89:81:34:59:eb:c1:a8:42:d1:2b:8e:03:ad:de:82:
                    e3:df:16:04:a4:be:0b:c3:e9:89:8d:24:7d:39:39:
                    9d:b1:ff:c1:ad:58:29:00:43:01:a1:e8:ec:ea:1a:
                    27:36:c9:d4:c3:c8:1f:35:bb:07:93:72:ab:08:1f:
                    61:e4:ac:b5:c6:04:f1:84:8b:31:af:3b:2c:9b:a2:
                    c2:57:6b:25:bf:86:40:ca:f1:af:e8:97:d6:d3:91:
                    8d:5e:7a:84:b1:25:7e:07:85:99:8f:96:f1:c2:32:
                    d8:1f:fc:72:66:55:d7:af:61:cb:c6:5f:e0:2c:aa:
                    37:81:e4:82:a4:8d:a5:aa:a4:a1:e7:2a:54:d1:cd:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:AB:B4:94:01:4F:CA:56:81:84:3F:08:D8:C4:B3:13:2A:89:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl

            X509v3 Authority Key Identifier:
                keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.201.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a6:d6:32:6f:ec:aa:1f:14:42:f9:8c:1f:7f:f4:af:c1:5b:
         a0:72:22:97:17:ba:93:01:77:34:94:e7:25:40:35:87:4b:53:
         34:74:34:cb:3b:35:b5:4c:7f:c5:1b:db:29:fa:cc:93:fb:18:
         6b:f2:75:17:ee:fe:54:db:37:fd:00:b3:f6:fb:ed:19:f7:bb:
         2c:68:96:3a:bf:67:fc:b8:08:60:55:f6:7c:c2:64:94:f5:ff:
         57:01:d5:06:d1:b9:f4:ec:56:3b:fe:54:d7:5d:2d:94:1f:79:
         c4:f3:35:10:57:22:23:b0:9c:b8:05:bc:bb:ef:ce:35:a9:81:
         c8:27:aa:93:eb:47:26:8d:37:f2:1e:fc:39:03:8c:18:bb:b9:
         4b:54:a4:5f:c9:42:b1:24:0d:f9:96:39:46:5f:e8:bd:8b:e5:
         c7:b7:87:13:0e:38:80:bb:81:0e:d0:d0:d4:92:89:98:83:8e:
         ac:f5:84:91:e5:c6:9b:b5:5f:31:d0:90:75:e1:47:e0:ae:e9:
         78:24:64:69:15:c6:95:fa:67:ae:1d:6c:10:45:37:51:40:fd:
         8a:dd:c3:ac:bd:bf:9a:2b:ed:b4:ae:55:6c:a2:42:cd:10:7c:
         9f:c6:90:a6:07:ef:53:5c:73:20:fe:9e:b1:97:b3:0c:40:08:
         23:0b:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org