Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136510.roa
File:                     AS136510.roa (raw, json)
Hash identifier:          SS4YvVlHsN8TgK/5ihXI8SrrfxQWOZZphAceWDGoZqc=
Subject key identifier:   28:8D:5D:03:F9:EB:EF:3C:88:C8:C2:BA:1D:70:02:87:C1:2B:00:63
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       715881326F0FE0CC8A5D7E38ED1334D6F49AFE82
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136510.roa
Signing time:             Tue 04 Jun 2024 20:20:52 +0000
ROA not before:           Tue 04 Jun 2024 20:15:52 +0000
ROA not after:            Tue 03 Jun 2025 20:20:52 +0000
asID:                     136510
IP address blocks:        83.142.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:58:81:32:6f:0f:e0:cc:8a:5d:7e:38:ed:13:34:d6:f4:9a:fe:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jun  4 20:15:52 2024 GMT
            Not After : Jun  3 20:20:52 2025 GMT
        Subject: CN=288D5D03F9EBEF3C88C8C2BA1D700287C12B0063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:36:e9:71:36:aa:0d:9c:6c:64:3d:3e:db:
                    2d:b1:37:a3:be:85:35:17:7e:16:c5:67:4a:2d:c9:
                    6e:7f:0a:0a:0c:c1:c4:af:45:5d:99:26:a5:b6:92:
                    d6:6e:d4:ca:e4:21:7a:df:37:a0:24:c4:b5:da:89:
                    3a:23:cb:a9:28:18:ae:f9:48:37:23:62:ca:de:2e:
                    f8:87:e8:e6:7e:24:b2:5b:64:b2:43:11:d3:d5:2c:
                    47:82:04:ab:8f:3a:c0:a8:f7:ac:e7:a1:fe:d0:0f:
                    37:05:d2:38:39:53:2a:6a:95:10:95:9b:2c:41:06:
                    0f:a6:a7:33:09:e4:16:60:49:a8:ac:44:8e:fa:13:
                    6e:22:57:d4:8c:d1:c3:e2:40:a7:64:fc:26:1e:ca:
                    63:68:55:c8:9b:aa:7d:db:d2:2e:aa:e8:ad:fc:4c:
                    d7:bc:40:76:86:02:ca:f4:82:d3:ca:f3:10:1d:0e:
                    41:67:89:17:ed:e1:ef:e2:21:c0:76:71:b1:e6:a6:
                    6f:04:c0:fc:38:3e:8f:5c:c4:9d:13:2f:f4:46:60:
                    df:a8:0d:b0:5f:1c:3e:ef:ae:0c:4d:10:9c:b6:90:
                    a9:94:c6:ea:12:a3:d1:51:c7:26:b2:b2:f7:93:5c:
                    27:88:d1:d9:3c:fe:1e:1d:49:af:ba:49:a9:a4:b2:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8D:5D:03:F9:EB:EF:3C:88:C8:C2:BA:1D:70:02:87:C1:2B:00:63
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136510.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:3d:f9:31:8a:d1:59:87:46:37:a1:e2:4f:b7:a6:e3:92:93:
         3d:57:9b:27:a2:37:90:aa:5b:67:d3:4e:c4:94:f1:b7:35:78:
         e6:f8:b8:5e:04:60:d7:66:50:d2:f0:d3:65:94:ac:f1:fc:1f:
         d2:aa:76:39:1e:71:3c:34:cb:f7:8b:f4:58:b1:c0:d5:e0:ae:
         45:24:98:e5:6c:41:46:4e:02:ee:ee:2b:96:ca:d7:81:ed:be:
         51:b8:17:cd:e5:55:a7:f7:8f:4b:14:b7:c7:84:36:d6:ca:9e:
         90:4a:3b:0f:80:ee:b0:82:e0:b6:49:85:93:32:f1:40:a8:d8:
         17:ba:2c:d8:9d:17:74:12:8c:e4:26:b1:0c:65:a4:f0:d1:2e:
         f7:38:19:e5:d2:77:d8:bb:2f:18:e2:9c:66:99:3c:0d:e3:a0:
         17:79:ef:86:24:1e:30:c7:0f:e7:cd:ba:30:c4:51:7a:b8:ce:
         f0:8b:bd:c6:d3:f6:ff:c1:ad:dc:93:aa:a0:f8:37:bd:52:bb:
         84:7f:c0:ff:10:21:c7:09:81:6d:bb:9e:38:0b:54:f3:c3:3d:
         99:ac:05:ef:4f:18:0c:69:14:ef:a9:db:f9:09:1e:84:5d:47:
         15:b0:88:33:37:49:6b:f3:f7:50:10:c7:e8:f9:a9:18:02:bc:
         d3:6c:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org