Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/aaa144f2-cbcb-3cce-9036-1350d18085ff.roa
File:                     aaa144f2-cbcb-3cce-9036-1350d18085ff.roa (raw, json)
Hash identifier:          QRur7/2mKH18nxvyY95USnFORL8ORfTeO/u2n/if+ns=
Subject key identifier:   93:27:2D:4B:DC:A1:38:F1:6E:F2:A8:08:BC:5B:1A:B3:8B:D0:BB:98
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285845D0D3A372114462C9138D3240
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/aaa144f2-cbcb-3cce-9036-1350d18085ff.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     202276
IP address blocks:        136.228.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:a3:72:11:44:62:c9:13:8d:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=f68b272e-3f22-41c4-a249-699a4d8f4240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:f7:d1:5f:56:e5:b2:14:2c:97:bc:26:48:
                    9a:2d:18:0e:7b:14:3b:ca:64:aa:32:54:9d:c6:3f:
                    db:b3:c6:a6:93:85:0e:e8:47:7a:b9:37:4f:5b:c7:
                    20:94:a8:81:ae:07:2c:a0:e1:c0:26:ca:d8:9d:01:
                    81:a0:87:e3:7c:bb:c8:4e:ef:56:33:fc:14:a1:16:
                    fa:b6:93:92:e5:5d:12:c8:8e:47:11:39:9f:ef:1d:
                    b4:ba:a2:b2:1f:28:bf:f6:5d:7b:61:72:52:77:01:
                    1b:09:f5:df:5d:73:07:20:36:72:2b:b1:89:aa:e6:
                    e7:9b:65:59:8b:e7:87:0a:7f:32:f6:b4:6c:be:e3:
                    d3:7d:b4:71:01:f7:da:10:a3:c2:c7:75:fd:aa:8d:
                    00:d6:22:fa:eb:4b:47:be:db:74:d3:d9:b3:ba:f7:
                    41:57:1c:3f:3b:74:fa:8a:b0:db:d7:f4:42:10:ba:
                    96:44:ac:06:a2:a6:30:c8:49:b0:c5:26:f7:f0:6b:
                    d9:a9:3f:fc:fe:da:9a:41:32:86:86:df:cd:c4:89:
                    4f:cc:4b:f9:2e:62:30:d5:6b:11:92:c1:e1:0c:62:
                    cd:b6:1b:15:8d:c2:d1:1d:1a:56:71:66:3f:51:94:
                    d2:0a:29:2e:d8:4e:50:96:d5:5f:78:24:a6:03:64:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:27:2D:4B:DC:A1:38:F1:6E:F2:A8:08:BC:5B:1A:B3:8B:D0:BB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/aaa144f2-cbcb-3cce-9036-1350d18085ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:90:12:ce:bf:ac:88:7b:35:b5:d4:14:d5:49:d3:10:14:41:
         55:ef:af:ec:f2:65:0f:30:d2:95:40:e2:dc:b0:4e:5c:b7:05:
         81:e1:cc:9d:16:05:12:0f:4f:03:8e:f3:53:12:8a:71:3f:9f:
         b3:e5:9f:fd:3c:d5:08:cf:bf:ff:98:61:49:f8:2e:94:ac:5a:
         cb:63:2c:74:ce:ae:29:18:56:8c:d8:7d:c2:1a:fc:92:e0:59:
         dc:4d:75:13:e6:16:15:43:13:dd:6a:56:e1:ce:a6:a1:03:9b:
         12:1c:72:7a:99:a4:4f:a9:28:b5:1d:cc:c2:fe:9a:3f:95:70:
         b5:fa:5e:46:6c:a1:a7:08:41:12:67:6e:83:02:88:ff:df:56:
         de:3e:2c:53:0d:ff:89:1f:55:8b:b4:69:c6:66:f8:4d:95:70:
         b3:a9:33:02:d7:9c:ca:dc:7d:e5:d0:ba:a1:62:84:f4:2d:ba:
         d3:5a:61:55:35:b0:32:ca:c3:22:39:22:b6:6c:86:14:3e:71:
         05:94:62:c3:31:70:08:68:50:a5:81:03:b8:38:ed:67:b0:de:
         0a:d0:a6:78:9b:27:36:38:ce:1d:7e:98:7a:8f:25:c0:82:61:
         5f:ab:3d:a0:a7:ea:6d:ab:b5:82:eb:e2:ef:32:c7:6b:3e:f6:
         08:af:ad:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:53:04 2024 by rpki-client on console-ams.rpki-client.org