Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/3fe1e8f5-320d-39a9-a808-8859f3928adf.roa
File:                     3fe1e8f5-320d-39a9-a808-8859f3928adf.roa (raw, json)
Hash identifier:          5D5853dLOvM69EoCoxigf216dKidipSGOIGdyinrDO8=
Subject key identifier:   16:1E:47:40:06:74:38:E4:D6:FA:51:1E:A9:1A:AE:5B:88:AB:73:C0
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584510502E854F83D7C61F3B9940
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/3fe1e8f5-320d-39a9-a808-8859f3928adf.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     396253
IP address blocks:        136.228.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:2e:85:4f:83:d7:c6:1f:3b:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=fb3dbe57-558a-463b-bee5-a03cc22ea070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:80:7b:8d:cb:80:11:71:87:c1:54:4d:b1:
                    08:0f:8e:7f:86:28:fe:7c:00:35:0b:df:39:67:2c:
                    1b:f9:b7:06:50:fa:05:b4:a1:0d:4c:fc:37:85:32:
                    c2:c1:af:6c:99:43:d1:0c:db:e5:8f:ea:4e:bb:a7:
                    2d:16:b9:e5:c3:f3:90:ad:31:8e:e6:af:9d:26:1f:
                    aa:64:93:16:df:ec:8f:44:b1:41:c1:c2:d6:c6:c4:
                    b8:ca:4f:4f:ed:11:dd:8b:5c:7e:bf:c8:01:8a:49:
                    9f:01:26:d1:87:dd:e1:af:01:a5:57:de:de:f6:93:
                    bf:88:83:70:2d:c7:2e:57:a1:a4:b1:80:47:b4:3d:
                    24:eb:06:70:5e:59:16:52:e5:77:05:c4:03:1d:96:
                    aa:43:bf:b2:d5:c7:11:e4:91:32:4d:1c:2c:8c:2a:
                    bd:be:33:39:fe:d9:5a:cc:5b:4e:1d:c2:b8:c2:fc:
                    eb:cd:b8:91:eb:ff:60:6c:7d:eb:1e:0e:69:b9:a2:
                    63:aa:a8:c6:78:a9:df:d5:98:e3:a4:0e:b3:6c:fa:
                    d7:18:d6:dd:aa:91:32:72:a2:4f:f3:8a:cf:f1:82:
                    2f:74:19:55:cb:63:80:a9:72:42:36:10:37:fa:c7:
                    cc:6d:e1:7d:1e:59:6f:e9:64:58:41:9f:29:73:17:
                    24:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1E:47:40:06:74:38:E4:D6:FA:51:1E:A9:1A:AE:5B:88:AB:73:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/3fe1e8f5-320d-39a9-a808-8859f3928adf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:24:43:73:7b:01:21:b1:ed:92:43:1f:04:6b:6c:d0:76:3f:
         91:ec:5d:fe:ae:3d:cc:d5:e9:54:09:89:b3:1b:6b:65:15:75:
         c2:3e:11:1b:96:7b:38:d5:0e:16:62:81:0f:e9:f6:f2:fe:48:
         04:7c:a8:c5:88:eb:95:3e:81:bc:78:67:5e:f1:86:a4:44:7e:
         c7:71:16:0e:4b:e4:88:ec:de:d7:b1:36:6f:3a:be:16:04:a9:
         38:bf:96:30:1b:13:ae:c9:fe:ba:0b:dc:1c:82:82:ee:5c:af:
         6a:d7:9e:14:fc:11:22:26:75:b3:fb:31:29:30:0c:ee:75:95:
         fc:9e:f7:73:9f:43:f5:3f:04:b4:41:24:85:a5:34:c7:83:16:
         ad:d4:69:c4:f1:4e:c4:fd:52:e8:67:0c:53:4d:df:9a:92:77:
         f4:e3:5e:8a:e0:39:0c:84:6f:b2:10:f1:33:05:47:e2:a2:d7:
         d6:95:fd:cc:eb:c8:7b:2c:9e:a5:e4:e3:d0:67:84:e6:cd:44:
         e0:9f:0f:b1:3f:d4:46:84:c6:ca:40:83:3e:9d:79:63:40:31:
         e4:b4:9a:b0:a2:e7:11:27:ad:70:71:d1:7c:d5:b1:5a:c0:ce:
         5d:13:42:d5:e1:28:cf:99:37:a4:ad:1d:0a:75:8f:80:fb:e8:
         a0:eb:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:46:50 2024 by rpki-client on console-fra.rpki-client.org