Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa
File:                     ea31493e-fb8b-3c77-a212-6b2e1708156a.roa (raw, json)
Hash identifier:          01GBjJeZpZyWdAwgCcVxF8xPuCsE6smRLbrcc2Fia9U=
Subject key identifier:   1C:3A:BA:76:C9:27:C4:C3:E4:2C:11:56:20:1B:20:9D:54:05:FC:04
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F432858471775B75CD07EE824C7FB2AA0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     202276
IP address blocks:        136.228.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:b7:5c:d0:7e:e8:24:c7:fb:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=1e57ec5b-294d-45bb-b827-5bedb2e2937c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:ff:c3:b2:83:17:6f:da:44:d2:54:0b:77:
                    f5:ab:f7:81:04:a2:9c:c0:3a:dd:d0:f2:4d:d8:86:
                    e9:32:10:63:f6:b4:60:cb:87:e6:86:01:32:04:9d:
                    0c:df:cc:6e:50:69:48:53:a4:47:23:3c:44:52:f4:
                    d0:68:37:34:8e:07:05:e5:ad:2c:2f:dd:dc:ff:8c:
                    0e:aa:d2:93:a5:5c:aa:1f:bf:c9:b6:33:8e:06:6c:
                    2e:ab:54:00:40:6e:f0:83:b1:e0:1d:a7:61:e6:3c:
                    6f:ff:f1:bc:33:c3:09:e3:1e:ea:36:c7:a0:17:fd:
                    77:07:57:c8:68:46:c3:3d:69:d3:bb:94:bb:ce:bb:
                    b6:94:22:49:7e:09:78:7e:4b:45:75:e1:9f:e9:a4:
                    a7:c5:fb:98:e9:c1:59:74:ed:b6:82:7a:79:2c:51:
                    8f:b4:25:73:e1:d9:54:76:60:5b:94:e2:15:f8:9a:
                    b8:0e:ba:66:f3:8d:6f:63:1f:88:2c:77:92:12:ec:
                    87:28:30:bf:af:66:56:e5:ba:8b:6a:29:ee:e3:ae:
                    b5:4a:50:74:bd:fa:7b:b9:07:a4:df:ba:2f:29:b2:
                    9f:95:f5:86:30:35:bc:4c:93:29:dd:ce:bf:6a:e9:
                    d6:d3:37:10:99:eb:13:cf:a9:89:42:ad:b0:98:31:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3A:BA:76:C9:27:C4:C3:E4:2C:11:56:20:1B:20:9D:54:05:FC:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:5f:59:9a:18:9e:9e:9e:4c:0b:33:16:fd:d1:ce:34:cb:50:
         8e:8d:9b:ad:5a:35:43:07:70:71:64:45:ab:8a:bd:17:83:8d:
         9b:f1:05:04:ef:2d:b9:67:51:b1:68:b7:bb:35:4f:83:b6:c2:
         f2:93:0f:9a:71:94:f4:53:45:15:bb:a8:6a:60:bf:2e:5e:4e:
         c3:b2:32:52:c9:ec:02:22:4d:be:40:ab:c3:0f:d6:8d:c2:f1:
         e4:22:23:ed:82:3d:5c:a7:25:2f:64:ff:a2:26:81:b3:bd:9d:
         0f:06:22:c0:d0:4e:c4:87:88:d6:21:76:3a:96:a1:c9:f8:c7:
         ac:44:e6:13:0a:e8:ea:1a:87:a6:48:06:6f:f2:fa:49:38:af:
         2e:d5:c2:32:75:72:28:56:a3:3d:16:1e:0d:04:ea:85:3a:a4:
         19:85:3b:2c:91:31:a7:99:00:07:60:1b:76:ff:d0:50:d9:0a:
         80:79:05:0a:a5:cc:0b:69:c4:f7:2e:47:be:c6:fd:c7:29:81:
         b1:95:eb:8e:0b:44:23:91:05:f1:9f:0d:b3:37:40:38:7c:c4:
         66:66:53:0a:61:df:3a:a8:2d:75:53:76:09:d6:77:39:3f:ee:
         d3:fe:0b:30:9f:db:94:8b:b0:f0:87:dc:be:05:d6:55:f2:01:
         4a:27:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:00 2024 by rpki-client on console-ams.rpki-client.org