Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa
File:                     3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa (raw, json)
Hash identifier:          h5O8vitoCAPVlhD8EfibOArQ6nl5yGaZZZh+i/q8hj4=
Subject key identifier:   2F:66:54:72:DC:2A:CA:FB:14:8D:F7:AC:25:2A:94:1C:0C:54:6B:E3
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285845304D3A33293B8D9114B5A600
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     400025
IP address blocks:        136.228.46.0/24 maxlen: 24
                          136.228.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3a:33:29:3b:8d:91:14:b5:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=4f24c334-d280-4100-a742-19e64539778e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:9b:85:46:ef:1a:5d:70:ca:c9:88:cc:29:
                    2c:6f:c2:ac:65:af:5b:1e:7d:1e:38:eb:28:49:f1:
                    b6:74:24:6e:13:20:5c:8a:dc:5e:24:9e:c7:77:35:
                    e4:5c:85:7f:4f:98:05:2b:f7:60:7a:ba:13:1b:f9:
                    36:a0:e2:63:ec:c0:07:e0:d7:4a:a4:cf:08:a7:9a:
                    7c:41:2a:cb:08:5e:4c:4a:50:19:99:c5:94:39:64:
                    95:15:eb:55:eb:1f:7e:61:cd:85:70:ae:23:6e:9f:
                    a2:30:c3:d0:a7:82:75:42:37:ee:2e:ab:5d:4f:41:
                    26:d7:38:57:37:57:6f:f5:a9:68:b8:1d:50:40:42:
                    86:74:bd:9f:0b:30:84:3f:0f:e8:f4:f2:79:39:c2:
                    11:e9:bb:72:ad:dd:ef:a0:07:34:8e:21:31:2b:55:
                    09:5a:40:d6:69:9b:b6:31:5e:cd:61:69:4d:61:98:
                    16:52:bf:40:fe:3a:8b:48:66:bc:1a:88:7d:f0:dc:
                    e1:69:f0:b5:62:aa:c6:6b:3d:e1:71:11:38:e6:ec:
                    08:10:01:4e:ea:b8:b2:02:16:b6:c2:fe:c7:70:ae:
                    58:f8:5b:7c:0f:8f:5f:ab:6f:a0:aa:44:1b:f3:48:
                    69:0c:cb:c9:8b:76:4b:71:5a:f5:16:cc:8d:60:db:
                    c7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:66:54:72:DC:2A:CA:FB:14:8D:F7:AC:25:2A:94:1C:0C:54:6B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.46.0/24
                  136.228.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:86:33:bd:5e:84:1f:6a:10:32:da:12:30:62:a1:53:4a:cb:
         f9:14:61:d9:f3:1d:26:f8:22:89:98:03:1b:09:7f:ee:0b:4d:
         6a:90:b4:a0:78:32:57:44:08:3f:65:42:8f:6f:b9:d8:ed:24:
         50:00:35:27:0d:3f:84:36:3c:47:58:12:bc:d4:a8:cf:e7:6b:
         78:70:8e:97:d0:c1:a8:2e:16:d5:78:e4:ab:66:76:12:df:c7:
         7c:64:87:29:4d:8b:a6:67:2f:49:fa:aa:bd:41:c4:74:ce:ad:
         e1:13:90:b3:2f:29:f4:c3:0e:b9:4a:8a:df:11:b0:12:c5:76:
         51:a6:e2:49:7e:3b:79:14:ff:b9:49:4f:7c:55:57:d2:0e:9f:
         55:e5:65:5b:07:8a:71:26:54:15:09:84:5e:03:d1:ba:93:4c:
         60:64:fb:35:9e:07:54:ec:53:67:d1:37:cc:4a:16:74:7d:74:
         31:08:3a:0e:d6:32:59:75:43:14:23:bf:c5:d6:9b:07:85:cb:
         d4:94:70:17:cb:6c:a6:92:07:18:91:17:5f:1e:ab:85:e0:02:
         49:1c:34:9c:6a:be:52:84:eb:37:24:13:76:28:7c:31:08:d9:
         b4:da:a5:eb:02:1b:94:26:29:75:e0:f5:51:a6:91:f6:d5:30:
         ee:ea:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:57 2024 by rpki-client on console-fra.rpki-client.org