Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa
File:                     ea31493e-fb8b-3c77-a212-6b2e1708156a.roa (raw, json)
Hash identifier:          UcVR1ssyjWNcrHDzFeVOMCTck1meertLXiAoMllMPFo=
Subject key identifier:   18:25:B9:13:EF:CC:CE:58:A1:4D:D5:72:1F:3D:20:42:4C:11:CB:10
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584558C83741C073EDF64EC33700
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     202276
IP address blocks:        136.228.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:37:41:c0:73:ed:f6:4e:c3:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=70f79b0d-1516-4fba-8e84-ce1a2e4b1133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:79:3c:78:e9:65:74:96:10:0d:47:a4:de:
                    fe:9b:d5:cc:33:02:67:56:9c:69:b6:38:ce:d9:66:
                    9a:d9:d2:3d:c3:34:68:5b:3f:8d:ff:10:d2:66:b4:
                    6f:89:05:1b:8d:52:0c:da:05:03:8e:ef:71:ff:a4:
                    8a:d1:e4:91:c6:33:ab:cb:12:d9:b2:3d:71:e4:8a:
                    e4:c0:2c:1d:1f:9d:5f:c7:84:68:02:ef:7b:cd:2c:
                    b1:86:4a:2e:27:98:60:38:f4:d3:55:07:53:c8:1c:
                    22:32:92:38:4e:b8:a2:a2:1f:17:e0:97:0a:63:fe:
                    42:85:68:0e:a0:6c:a5:10:c1:ae:3e:f4:9d:6e:50:
                    5f:dc:5c:57:99:48:91:a6:f3:89:aa:e7:9a:61:70:
                    ac:da:c1:46:58:cb:d6:51:9a:28:2c:89:27:71:2d:
                    1f:82:a1:75:0a:a9:08:60:15:4f:aa:e3:68:2c:d0:
                    4a:66:8e:eb:4b:90:6a:67:25:f7:1c:25:db:6f:85:
                    ed:71:a7:6a:19:3a:1c:be:92:17:10:7f:00:55:d9:
                    18:80:cf:c3:f3:e5:55:91:42:5f:4e:f7:1d:71:44:
                    1e:a3:0a:c9:88:95:c3:07:80:ad:5e:dc:b6:e8:c8:
                    d4:d1:fe:3a:b9:d9:83:c0:81:fe:6f:77:f2:5c:de:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:25:B9:13:EF:CC:CE:58:A1:4D:D5:72:1F:3D:20:42:4C:11:CB:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4b:af:d6:fa:d0:48:a2:c4:da:ef:70:2a:fb:d8:cb:a3:66:
         11:a6:31:70:01:56:da:b1:3d:2a:a3:78:3b:59:0b:38:a0:1d:
         bb:75:75:30:8b:40:af:6b:59:30:85:3c:d3:7b:c2:14:52:18:
         9d:aa:89:66:4b:80:3d:37:b9:49:36:4d:f6:63:a0:33:fd:d2:
         16:78:40:d3:b6:a5:f3:0a:3b:94:14:34:e0:50:11:bd:08:77:
         0b:72:48:f8:67:8e:66:6f:40:78:2e:db:d6:6d:f1:df:b1:ce:
         ec:f5:7d:ea:67:5a:ae:fb:d9:99:c6:65:f4:5c:12:7d:5f:eb:
         79:09:41:05:d4:51:a9:ac:6d:5d:84:4e:a7:c7:fb:0b:5c:8c:
         fb:a7:32:c2:ba:61:87:b4:7e:b1:26:30:d1:01:b0:8c:7e:f9:
         0f:62:5d:0e:8e:ab:a2:55:a4:a6:68:63:95:60:57:0e:2e:02:
         9b:55:d7:a6:0f:52:38:dd:54:80:d4:5b:0a:1e:1f:fe:c3:61:
         00:f0:be:5f:75:84:ba:31:91:f7:1e:73:26:d6:ee:58:7c:d2:
         88:32:6f:5f:a1:96:00:3f:5b:12:a1:b3:12:eb:27:1c:20:88:
         20:33:f6:10:94:5d:b1:17:4e:b4:68:97:88:70:0c:4b:05:21:
         63:c2:04:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:50:10 2024 by rpki-client on console-fra.rpki-client.org