Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/7cd7d03d-37bd-375c-a9a0-143249c23df0.roa
File:                     7cd7d03d-37bd-375c-a9a0-143249c23df0.roa (raw, json)
Hash identifier:          hkL8c8eHinTeb6HZZS9FOqmNKxtN1Fsvhp1PP03y8QE=
Subject key identifier:   B5:C9:8F:CD:9D:25:89:CE:23:3C:C0:6E:80:F5:33:36:5D:CC:16:5F
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285847E78F603BD5B59B3F7EBC5138
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/7cd7d03d-37bd-375c-a9a0-143249c23df0.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     401307
IP address blocks:        136.228.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:60:3b:d5:b5:9b:3f:7e:bc:51:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=c92ede97-4aa7-4082-8420-0ac8a92d4579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:23:e4:ac:a2:c7:89:83:ac:c0:ed:03:ca:
                    80:7c:76:b3:a3:7e:25:e7:bc:a4:c3:70:3d:47:7d:
                    9d:61:0c:9f:4f:c2:20:b3:a1:41:0e:16:db:09:c2:
                    5a:d3:f0:65:96:64:7d:f4:51:16:78:c5:30:e8:44:
                    51:c2:1a:47:2b:41:43:07:c9:fd:08:fe:1a:48:08:
                    aa:04:e9:fe:aa:7a:6e:da:6a:69:b5:21:3b:ac:b2:
                    a5:eb:34:f0:c8:ee:7a:99:8c:2f:71:73:eb:31:6e:
                    2c:24:51:16:bd:04:84:25:1c:ce:dc:04:e5:15:5c:
                    ef:79:64:8f:77:7f:8c:a4:06:20:0c:65:82:19:83:
                    a7:ba:3c:2e:6d:a4:4b:60:4b:a2:00:72:d2:4f:01:
                    0a:5e:f4:31:ce:25:76:c5:a0:3a:66:43:54:2f:32:
                    99:e4:19:04:46:cf:18:1d:b6:00:21:6a:08:ce:ed:
                    ac:4e:a7:b4:9c:71:b5:66:6b:12:06:8b:62:1e:26:
                    d5:d0:73:27:e9:7f:78:5f:34:63:4e:95:74:ad:57:
                    71:de:b0:e8:ff:53:f6:39:07:f5:65:4c:d2:31:85:
                    54:fb:b0:a6:c1:62:0a:62:be:a4:5d:53:ac:f8:ce:
                    3a:d8:0c:b6:0c:da:4a:0f:71:a3:c9:fd:ed:03:06:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C9:8F:CD:9D:25:89:CE:23:3C:C0:6E:80:F5:33:36:5D:CC:16:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/7cd7d03d-37bd-375c-a9a0-143249c23df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:dd:fa:9a:ba:59:3b:56:26:8e:3c:0c:6d:a8:cb:78:54:6a:
         5a:1c:fb:09:54:10:5e:03:16:6b:8a:d7:00:48:e9:a8:6d:69:
         14:63:1d:f2:d1:4b:53:f0:f0:b2:6c:cb:12:f4:47:a0:d9:77:
         89:ed:5d:c6:84:f4:73:4c:f7:e3:ce:6b:12:7d:06:44:4a:82:
         75:09:b2:ce:09:0d:51:aa:84:cd:95:b6:ab:cc:49:7d:55:20:
         c0:fe:9d:eb:5c:6b:00:9e:b7:2f:14:12:ce:b6:ea:a3:85:41:
         3e:62:c5:c7:c9:c9:8e:fa:a1:c8:d9:e3:c6:51:7e:64:44:de:
         3d:8d:a9:f9:06:1f:ca:ca:15:52:6b:6d:91:0d:55:b6:4e:4b:
         37:eb:24:43:c2:f0:49:95:bf:fc:ef:47:0b:c5:71:11:5c:75:
         f5:c8:3f:64:98:ed:3f:b1:95:bd:47:04:e1:b4:91:c2:71:10:
         91:88:49:6b:b0:e9:30:4b:57:90:ee:14:2f:f7:38:be:bc:9f:
         da:8e:84:68:38:7c:4c:84:de:22:fb:e2:ad:23:d3:c3:e4:73:
         18:d1:1a:00:76:6e:ce:4d:01:fd:21:89:10:ad:43:09:82:f1:
         f5:2e:8e:21:13:a5:e5:51:2e:43:9b:4e:9f:55:68:fd:6a:c8:
         88:73:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:04 2024 by rpki-client on console-fra.rpki-client.org