Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/41b5d0e4-b603-3b36-8902-f9dc4b63ee1a.roa
File:                     41b5d0e4-b603-3b36-8902-f9dc4b63ee1a.roa (raw, json)
Hash identifier:          QeRzkWFuIF7wzvwFcdgB2Y9C1UjAWpkVHIpXWpyU8GU=
Subject key identifier:   3E:E1:51:3B:6C:BF:CC:82:AB:41:EE:73:D9:C9:D5:C8:5F:0F:40:97
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584566BDAA560C44F14DBE0F7800
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/41b5d0e4-b603-3b36-8902-f9dc4b63ee1a.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        136.184.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:aa:56:0c:44:f1:4d:be:0f:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=a1b6bc85-436b-4177-afb9-f00412c43ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:fa:d3:d7:80:d2:68:f6:42:60:4d:e5:a4:
                    11:45:77:93:07:25:aa:a5:01:8b:14:9d:86:a7:a1:
                    d3:bb:65:2c:4d:89:f1:40:db:a6:41:fa:4d:3f:df:
                    0f:bd:9c:6d:21:02:df:6b:84:cb:40:a3:4a:d0:e0:
                    e1:4d:4f:2f:a7:3b:83:a1:cc:62:bf:08:b5:7c:b5:
                    18:85:10:ed:3d:48:cb:c9:09:3f:50:93:52:2d:36:
                    47:67:c1:a4:0a:6c:4f:5d:68:82:cc:96:96:28:16:
                    79:e6:3f:54:1d:3c:3b:db:69:77:c1:f5:23:b3:ae:
                    13:e0:ae:d1:03:17:9d:96:86:25:83:c7:d2:33:1e:
                    fb:07:42:8e:48:57:a9:6b:01:18:3b:5c:ab:6d:b8:
                    08:bc:ed:a4:19:b9:e1:6b:66:66:57:33:af:54:0a:
                    ff:ab:c0:4f:a5:cc:a7:29:12:11:3d:ce:8c:00:77:
                    4f:3f:fe:ca:53:f1:4c:81:f2:1a:4e:55:8b:17:d1:
                    ad:50:09:ea:04:a5:7a:dc:4d:12:0e:ec:9b:91:c3:
                    0b:dc:ad:cd:c0:7e:42:ea:22:ff:5f:96:f7:9c:47:
                    db:5d:8c:66:05:f1:40:fc:e5:09:38:ca:43:40:19:
                    f9:8d:fa:94:eb:a5:d7:b9:fb:7a:b3:06:50:64:e1:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E1:51:3B:6C:BF:CC:82:AB:41:EE:73:D9:C9:D5:C8:5F:0F:40:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/41b5d0e4-b603-3b36-8902-f9dc4b63ee1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:71:ed:68:5a:89:31:91:77:c1:b8:3f:b4:54:fd:02:01:d8:
         1f:60:a3:83:85:8e:01:34:97:31:dc:5d:3f:af:03:2e:57:40:
         20:72:eb:f6:8f:97:59:ab:cc:d3:1a:ab:48:7d:46:69:2e:e3:
         a0:cc:a3:62:d8:3b:cf:0a:d0:3e:4d:fa:68:9f:f6:d6:a7:c1:
         2d:c7:07:6a:bb:26:a8:c3:ff:5c:11:83:42:11:0b:4a:2b:4d:
         07:9c:79:30:b5:95:b3:11:ce:d1:67:01:d6:f9:79:59:23:17:
         cf:d4:e3:4b:15:df:50:e3:21:e5:b8:b1:01:d0:16:f0:bc:21:
         8c:7e:55:cd:b9:e4:21:9a:73:15:f5:2f:85:e6:06:25:9a:7f:
         99:2c:47:4e:eb:37:04:68:4a:58:59:42:56:34:cd:19:2d:b5:
         96:d9:55:55:ad:06:5b:5a:2d:44:70:48:4e:b9:da:48:2c:bc:
         a2:5e:73:38:3f:7b:ac:12:44:29:07:20:fb:8a:eb:3e:e0:45:
         4b:48:db:04:d3:c2:70:53:99:53:a2:bd:38:0b:bf:3b:9e:aa:
         e1:6e:0f:b1:c2:0e:fa:55:fc:08:00:26:b9:55:21:9b:39:c0:
         d7:0c:31:c9:d8:bf:e3:03:95:dd:53:8d:b6:56:97:39:d3:b7:
         83:97:4d:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVmvapWDETxTb4PeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNk
NTRjMB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk
YTFiNmJjODUtNDM2Yi00MTc3LWFmYjktZjAwNDEyYzQzZWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhz609eA0mj2QmBN5aQRRXeTByWqpQGLFJ2G
p6HTu2UsTYnxQNumQfpNP98PvZxtIQLfa4TLQKNK0ODhTU8vpzuDocxivwi1fLUY
hRDtPUjLyQk/UJNSLTZHZ8GkCmxPXWiCzJaWKBZ55j9UHTw722l3wfUjs64T4K7R
AxedloYlg8fSMx77B0KOSFepawEYO1yrbbgIvO2kGbnha2ZmVzOvVAr/q8BPpcyn
KRIRPc6MAHdPP/7KU/FMgfIaTlWLF9GtUAnqBKV63E0SDuybkcML3K3NwH5C6iL/
X5b3nEfbXYxmBfFA/OUJOMpDQBn5jfqU66XXuft6swZQZOFpBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7hUTtsv8yCq0Huc9nJ1chfD0CXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcw
MzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvNDFiNWQwZTQtYjYwMy0z
YjM2LTg5MDItZjlkYzRiNjNlZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzM3MDM1ZjAtZDVkMS00NWQwLWI2
NDctN2EyM2Y5ZTNkNTRjLzMzNzAzNWYwLWQ1ZDEtNDVkMC1iNjQ3LTdhMjNmOWUz
ZDU0Yy5jcmwwHwYDVR0jBBgwFoAUQxtL6ZGGkmChwHIkxJcDv+hKMW8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIz
ZjllM2Q1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLjiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVx7WhaiTGRd8G4P7RU/QIB2B9go4OFjgE0lzHcXT+vAy5XQCBy6/aP
l1mrzNMaq0h9Rmku46DMo2LYO88K0D5N+mif9tanwS3HB2q7JqjD/1wRg0IRC0or
TQeceTC1lbMRztFnAdb5eVkjF8/U40sV31DjIeW4sQHQFvC8IYx+Vc255CGacxX1
L4XmBiWaf5ksR07rNwRoSlhZQlY0zRkttZbZVVWtBltaLURwSE652kgsvKJeczg/
e6wSRCkHIPuK6z7gRUtI2wTTwnBTmVOivTgLvzuequFuD7HCDvpV/AgAJrlVIZs5
wNcMMcnYv+MDld1TjbZWlznTt4OXTbY=
-----END CERTIFICATE-----
Generated at Thu May 2 14:35:47 2024 by rpki-client on console-fra.rpki-client.org