Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa
File:                     410c888b-87d0-38d4-abe0-40515be0096e.roa (raw, json)
Hash identifier:          HdrM3daDIuB85XCf+khsQ9YR9x2xJ7Sv6FaJT6StFI0=
Subject key identifier:   23:B2:27:53:8F:56:97:AC:D3:24:28:3B:D2:35:22:FC:99:E5:87:FF
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F432858479D76B7175D1B5DE7D67AF000
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     396253
IP address blocks:        136.228.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:b7:17:5d:1b:5d:e7:d6:7a:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=675865ce-1e2d-49ca-b694-c808ab5b4646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:ab:8f:1c:f9:df:fb:ad:a3:8a:9b:af:92:
                    9a:bc:7e:81:61:b5:d2:b4:38:6a:a2:97:ad:8b:25:
                    2e:33:02:7c:d1:6a:06:3c:58:c2:95:a8:ba:b3:52:
                    e0:e1:4a:c9:30:e3:11:f6:a6:eb:59:eb:b5:28:ab:
                    31:52:a2:47:12:e1:45:48:4d:09:28:62:f6:29:57:
                    06:04:ec:21:ef:e7:c3:23:e5:80:cc:30:6d:40:38:
                    2a:da:77:19:90:9c:75:08:45:b3:1c:60:85:23:82:
                    80:e5:9c:ff:a5:06:5d:78:64:17:ac:f8:ac:49:32:
                    aa:39:d6:40:ab:eb:75:29:e6:2d:50:77:10:6d:01:
                    7e:25:9d:8e:e5:dd:03:52:ab:9c:52:fb:6a:53:7d:
                    da:fd:9c:4e:51:99:14:e8:61:d1:79:7e:7e:17:1d:
                    5e:3e:d2:45:b8:ef:7d:36:89:a2:8d:e2:96:fa:54:
                    2a:1d:1b:21:70:63:f7:2d:31:17:0d:a5:0e:1e:3a:
                    1e:92:5a:08:a3:35:0c:4b:a8:cc:08:27:3f:89:3b:
                    06:4c:6f:d7:15:c0:e3:75:73:12:09:3b:5e:77:d4:
                    6f:a6:eb:2b:b5:83:c7:93:82:20:be:3a:0a:42:cf:
                    ab:fa:b8:97:ec:16:6e:9c:e2:b4:5a:72:81:9b:2f:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B2:27:53:8F:56:97:AC:D3:24:28:3B:D2:35:22:FC:99:E5:87:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:e4:37:b5:68:09:4e:73:48:8a:42:d5:cb:42:ad:97:5c:
         f2:2b:4d:ff:ee:46:28:a0:e6:cd:94:03:c8:55:25:87:8b:fd:
         79:d2:2e:6f:5e:1c:26:e7:83:bb:2f:20:84:2c:d2:17:fe:29:
         e3:be:5f:e0:73:c1:1a:34:a3:8e:45:47:f6:57:23:a2:ca:8b:
         77:47:cf:f2:d4:cc:fd:88:ac:0d:6a:b0:99:64:e1:03:be:d1:
         0e:8c:23:39:8a:20:95:53:2a:e6:00:5a:81:3d:be:42:98:af:
         4c:35:75:3e:b8:40:89:bf:34:5f:02:ab:ad:4f:e0:0c:f2:64:
         01:11:0e:a3:0d:20:09:ca:2f:53:51:d0:e3:99:68:c5:fc:27:
         8f:a3:2e:ee:93:75:b9:6d:f6:24:b6:77:fc:99:6c:d7:52:f3:
         b5:84:4e:18:62:bf:53:f3:7d:b0:6d:ed:5d:b1:33:be:64:a2:
         36:9f:76:f3:4c:4a:f2:9d:59:02:9a:dc:b9:54:90:6b:2c:f8:
         55:99:08:14:16:63:8c:69:cb:4c:a1:15:39:22:47:39:25:d8:
         9c:52:90:2c:8e:eb:25:f0:2a:02:a3:2f:2b:9f:c6:51:ed:36:
         43:7c:d5:5b:1d:ad:98:5f:d8:49:f5:af:53:fb:e7:ad:2a:b8:
         d7:a7:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org