Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa
File:                     df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa (raw, json)
Hash identifier:          ZdEOp3hnloWwA+03rA04SB9OImF44JrDUXJ+xQvwLZs=
Subject key identifier:   06:CD:D6:66:55:C1:40:0C:8E:15:3A:25:83:F3:7C:15:1A:3B:A8:0E
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285847E78F594C7E9F9B0CF435E600
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     401307
IP address blocks:        136.228.47.0/24 maxlen: 24
                          136.228.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:59:4c:7e:9f:9b:0c:f4:35:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=a784f0c3-c7a0-4d6f-be57-202e4b18453c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f2:76:1b:e5:5c:3d:17:37:04:75:da:a8:d6:
                    dc:f7:a0:9c:2f:91:0f:d4:4b:f0:39:33:cd:4f:59:
                    36:a3:c4:2c:8d:1f:54:88:de:7e:dd:98:9b:ed:19:
                    20:94:17:1b:2c:e3:44:4d:dd:0b:23:42:f1:ad:e1:
                    a2:4a:c3:50:4d:38:db:33:38:2b:ff:f5:fa:ce:d7:
                    20:da:d1:d5:27:c4:99:3a:b4:3a:b8:ea:3f:2a:e7:
                    65:01:4f:e4:83:7d:66:55:70:96:7f:c4:ad:ee:93:
                    4c:9b:8b:76:2d:f3:2f:93:c8:b4:21:1e:16:0b:28:
                    5e:60:5d:0f:c8:07:b0:f0:81:1a:c8:ed:bf:eb:c8:
                    69:5c:72:5f:fe:93:39:cc:60:77:f9:9f:e1:cd:93:
                    98:f0:9c:06:8c:21:d6:89:ea:c6:cc:62:1d:b9:d7:
                    e0:42:2b:fb:1f:7f:f3:6d:ed:e0:17:90:16:f2:ea:
                    ae:5f:cf:83:79:a2:d8:4f:4f:a2:8c:2e:fb:69:99:
                    d0:95:da:61:ea:70:fa:a2:cd:93:fa:01:d3:41:07:
                    84:58:7e:f0:4f:93:e6:51:5f:a1:df:a7:d2:03:f2:
                    0c:6f:db:c3:aa:02:3c:fe:b6:21:26:db:38:74:55:
                    62:9c:f6:32:3c:28:46:27:ff:a5:b8:45:af:00:e4:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:D6:66:55:C1:40:0C:8E:15:3A:25:83:F3:7C:15:1A:3B:A8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.47.0/24
                  136.228.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9a:09:b5:5d:2a:a2:fd:30:0e:08:94:00:14:cf:18:a9:82:
         4b:dd:1b:b6:8c:5a:ed:f1:b6:15:18:f4:22:b8:53:6e:8c:0b:
         e7:8b:dc:1e:4b:35:1a:a6:44:12:72:d1:89:eb:1e:c2:08:21:
         12:2e:cd:52:a4:5e:01:03:2f:b5:ef:74:a8:37:cc:d8:aa:59:
         e7:76:df:eb:77:95:9a:8d:31:43:92:7b:6f:cb:65:2c:46:78:
         e7:55:8f:e2:c0:f7:c9:33:e6:23:32:41:15:02:59:1d:c8:3d:
         cc:ab:c9:af:8a:26:54:54:e9:b0:b9:28:3d:8d:41:6d:0a:22:
         13:a8:eb:83:e9:85:6f:08:6d:a7:fa:1c:36:f7:dd:d0:c7:cb:
         dc:a7:3b:a7:5d:30:ca:35:27:cf:c4:1a:84:4f:88:88:4b:78:
         1f:49:9f:26:11:2d:bf:bf:4c:66:3a:e9:f0:6d:9f:de:b6:24:
         53:ce:ec:ab:bb:8a:85:f5:82:cb:4a:c3:c8:43:6f:3a:f6:12:
         59:26:5f:2d:91:13:f7:95:50:6f:60:71:8a:2a:fd:c1:e6:8e:
         0b:45:d0:cd:d7:49:0b:bc:de:83:29:1f:97:ac:0b:29:d7:18:
         a6:0f:9c:22:f7:1f:d6:f0:16:e4:a5:ac:14:4a:c5:88:bf:53:
         63:a5:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:04 2024 by rpki-client on console-fra.rpki-client.org