Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa
File:                     42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa (raw, json)
Hash identifier:          mmqhZvacnjU8Yu7Ke+e0NYXr5ISM4nXfs69U5s6M004=
Subject key identifier:   E7:20:05:7B:03:33:98:AE:EB:0E:D9:CB:F8:86:B1:B1:43:FD:28:12
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584566BDB5ED832A94D1DD67AE00
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        136.184.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b5:ed:83:2a:94:d1:dd:67:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=0d352a5c-38aa-42f8-b691-9a414dcf90a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:f9:41:b3:94:75:c2:4a:dc:48:19:5a:b4:
                    98:fe:c7:91:93:88:59:1c:31:51:6d:be:d0:b0:ca:
                    b4:f1:3b:75:14:69:32:c7:20:fa:91:a1:d9:a5:4d:
                    66:ce:ff:b1:29:d3:41:ee:91:a6:a6:69:62:5a:53:
                    ef:fc:2d:f8:11:59:49:4c:dc:f3:87:96:a0:7d:08:
                    f5:8c:85:e7:e8:75:e6:d4:38:7b:1d:a7:92:81:16:
                    86:3d:4b:ad:57:19:39:4b:aa:27:79:ea:da:f6:a1:
                    81:e3:4d:a6:b1:7d:52:55:5f:cf:7d:70:8e:bb:16:
                    65:c7:e7:57:e0:c2:f5:c6:3d:66:b6:26:3e:b6:fe:
                    b1:87:a0:8e:e6:f8:5b:43:ae:0b:16:85:12:db:6b:
                    d1:64:f9:07:ae:10:0a:96:55:5b:a1:99:48:40:a7:
                    12:1c:11:66:43:c2:32:89:c7:ee:39:20:73:9a:05:
                    08:b4:f9:a5:52:d1:2e:b5:9a:32:7d:01:58:f3:aa:
                    f9:30:52:74:a0:58:4b:54:1d:6d:ad:13:1a:83:34:
                    00:aa:89:29:ea:fe:e1:54:0b:e0:ad:e4:78:f8:95:
                    75:7c:7e:88:42:34:c4:46:1d:da:ca:9e:a7:8a:d5:
                    d2:eb:6d:73:83:ad:65:ca:03:7a:a1:5b:49:2d:26:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:20:05:7B:03:33:98:AE:EB:0E:D9:CB:F8:86:B1:B1:43:FD:28:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:5d:56:0a:2e:2b:12:da:d4:58:35:28:62:46:3e:b4:fd:
         17:97:a3:58:d6:5d:17:62:d7:dc:79:eb:06:36:ce:13:48:bb:
         09:a5:3c:1c:19:7e:cb:f1:55:81:8d:e8:bb:bd:1a:88:5e:ec:
         a7:57:16:32:11:e2:b4:b4:25:7c:06:3b:cd:c2:c0:aa:78:bb:
         ac:3c:e2:3e:3e:56:dd:ff:50:01:0e:1d:9d:5b:07:99:68:99:
         b9:b0:02:98:ab:f9:bc:aa:a8:e6:65:11:b6:c8:07:c1:10:1e:
         4c:dc:0f:27:6e:08:b2:94:52:e3:b6:84:43:c7:f8:51:aa:ae:
         5b:00:84:16:20:db:74:f9:5e:d4:07:c7:53:0f:00:91:ca:aa:
         96:25:99:62:b3:8c:06:1b:1b:f3:75:44:ce:11:43:cd:71:95:
         f2:bb:4a:d3:35:88:35:5d:ea:84:7e:0d:c7:c3:eb:59:af:f5:
         ab:33:4b:2b:9a:6d:c9:d8:d6:7b:e8:0f:f6:99:1d:36:86:3d:
         f3:3a:2e:a4:c5:33:38:27:e8:0e:be:03:41:87:0c:bb:dd:b5:
         7e:cf:50:85:11:59:9a:b0:ca:a4:3d:57:6d:79:43:87:28:5d:
         23:41:46:b2:1f:ae:a2:5a:7d:d9:8b:85:dc:43:b1:78:3b:17:
         07:5a:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:45:15 2024 by rpki-client on console-fra.rpki-client.org