Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/88d3dcc7-1b28-350a-90c9-f2f9a282c2e3.roa
File:                     88d3dcc7-1b28-350a-90c9-f2f9a282c2e3.roa (raw, json)
Hash identifier:          otlePYow/fPqD+F3lAoci4b8/i5R5JUtQSBN3K6iYvA=
Subject key identifier:   A7:80:98:6E:10:FC:41:C3:45:60:3B:0F:90:94:C1:0B:45:12:2C:40
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285847E78F60296ED0E557B4658D00
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/88d3dcc7-1b28-350a-90c9-f2f9a282c2e3.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     401307
IP address blocks:        136.228.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:60:29:6e:d0:e5:57:b4:65:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=9b09d7ce-5855-4203-99c9-e18ad2ef084f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:08:b6:1d:70:ef:01:a9:bd:e1:cd:8f:9d:d8:
                    a0:a0:d0:f6:27:6b:e6:f9:87:fa:8b:b1:86:a6:43:
                    a1:97:31:4f:30:76:2f:01:a2:7d:ae:c2:be:99:cb:
                    a7:ae:0a:b5:9e:b4:b3:f1:53:28:5e:d8:30:04:5b:
                    d0:a4:b3:3c:9a:21:16:05:91:e6:8e:1d:d9:08:dc:
                    5d:ec:4d:de:62:79:f7:15:6e:a5:f9:12:94:e9:9b:
                    60:d2:dd:9f:f5:5b:a7:16:e2:1e:df:85:66:26:26:
                    bb:6f:a1:81:c1:5e:f4:62:6e:b8:7b:d6:c4:b5:4d:
                    63:a2:30:a7:4f:3a:28:c3:90:74:87:ef:c7:c8:6d:
                    dd:37:61:9b:ef:5a:d1:fd:1e:a3:53:67:15:08:97:
                    97:68:87:73:eb:b8:14:46:77:ec:2a:32:5a:33:a7:
                    b3:28:d3:1a:67:52:89:71:87:92:5d:38:0e:64:b4:
                    09:94:18:44:5d:7c:fa:f9:09:e9:70:51:fe:0b:df:
                    bb:2a:4d:cd:3e:d6:80:59:24:50:d9:5c:4b:21:4b:
                    20:5d:70:41:67:7c:6e:0e:4d:45:79:2c:98:dd:70:
                    0a:e9:19:9d:30:97:7c:5a:a5:5f:aa:0e:e7:70:17:
                    5a:01:7d:c6:6e:c6:b9:51:ea:89:2c:69:89:d7:48:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:80:98:6E:10:FC:41:C3:45:60:3B:0F:90:94:C1:0B:45:12:2C:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/88d3dcc7-1b28-350a-90c9-f2f9a282c2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d9:fa:f4:bc:3b:77:99:bc:56:37:93:07:70:5f:6f:a2:be:
         ff:43:cb:d3:bd:5f:95:0e:f4:56:b9:8f:d9:9c:15:4b:a0:f4:
         2f:4e:fc:35:99:9c:5d:fd:80:70:dd:bd:1b:de:17:74:6f:63:
         54:4a:00:71:8d:22:09:cc:6a:12:40:d5:1c:1f:e8:a2:0f:45:
         b5:84:23:18:6f:27:ed:f1:73:c9:35:b3:d0:ff:be:43:d7:e7:
         d3:5e:4a:ef:f8:51:69:f4:47:5f:91:f0:6c:30:8f:f0:53:03:
         05:e3:f0:a2:40:52:32:78:43:d5:95:93:82:92:4b:ac:31:e1:
         03:41:b6:68:48:c8:9e:2e:cb:7d:2c:b8:6b:57:b1:ee:8a:5d:
         53:18:b0:ac:e2:b6:69:1d:4f:3c:6a:7b:6a:46:74:ad:6d:d2:
         81:bc:dd:a4:85:cc:39:b6:74:ad:82:b1:cf:c3:20:b8:a2:53:
         31:5f:8c:8c:ea:69:d6:01:97:84:a9:6a:80:b0:5e:c0:d3:d7:
         c5:81:26:c6:ef:7e:83:2b:fb:cd:b9:2d:1f:55:3e:1b:b1:5b:
         4c:b8:d0:68:aa:53:db:2d:bf:a1:d2:fe:89:02:39:2f:bb:77:
         e2:20:96:bc:46:ac:81:3a:71:f6:87:c3:31:6e:5c:7a:25:cf:
         4f:09:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:04 2024 by rpki-client on console-fra.rpki-client.org