Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09629e46-c575-3a70-a4b7-a35fce78fd05.roa
File:                     09629e46-c575-3a70-a4b7-a35fce78fd05.roa (raw, json)
Hash identifier:          BpHaC21raGLImUSQU8/O0mXoS/yBMRq8Jnxfxzv3ggg=
Subject key identifier:   21:95:8E:7F:1D:84:D8:27:94:9E:0F:34:8B:87:0C:4C:21:B1:F6:D5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F636780F74FC3E1AB4BB70
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09629e46-c575-3a70-a4b7-a35fce78fd05.roa
Signing time:             Fri 12 Apr 2024 17:24:40 +0000
ROA not before:           Fri 12 Apr 2024 17:24:40 +0000
ROA not after:            Thu 11 Jul 2024 17:24:40 +0000
asID:                     11351
IP address blocks:        136.0.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:36:78:0f:74:fc:3e:1a:b4:bb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:40 2024 GMT
            Not After : Jul 11 17:24:40 2024 GMT
        Subject: CN=75ce6d1a-a4d9-4531-83f0-6b0f7d52e282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:d4:f7:6f:33:09:f6:ba:bf:58:3b:0f:07:
                    4e:c4:1e:6e:fd:53:64:ab:bb:1d:5e:89:eb:39:b9:
                    d7:2b:58:e5:c0:1b:eb:04:05:af:cf:12:9c:ef:10:
                    70:9b:9c:de:18:7e:42:fe:5a:fc:25:b9:5f:b8:39:
                    33:56:a8:de:f2:e9:60:ec:05:bb:8b:42:b4:7f:45:
                    ca:4f:d0:6a:2e:54:80:a3:2e:38:dc:7e:0d:1f:89:
                    a9:96:42:12:2c:ed:09:25:0e:31:a8:5c:5c:b1:55:
                    00:f8:3c:fe:77:6c:f9:3c:da:f8:99:ea:35:ba:02:
                    0d:5f:5e:ae:a7:43:96:7c:8f:48:f7:f5:b8:94:14:
                    2c:f3:1e:90:db:89:ee:1c:a5:e4:4c:09:e8:88:db:
                    1f:ef:9f:8d:23:35:c4:6c:46:b9:91:02:32:1e:6b:
                    4d:f9:fd:dc:4f:5c:2e:13:f9:7f:f3:5c:bf:05:86:
                    de:b8:cc:ea:96:41:05:dd:c1:31:57:ff:7f:f9:9b:
                    e5:b4:8f:c2:d8:73:d5:8c:7d:06:39:a8:fc:75:f7:
                    97:2d:d7:df:c9:e9:b8:4b:b8:31:24:60:40:cc:e4:
                    be:be:23:39:9d:b2:5f:cd:ef:79:62:e1:4b:1c:9a:
                    76:ce:fb:aa:69:4e:b2:97:f9:b8:bd:13:6f:e8:77:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:8E:7F:1D:84:D8:27:94:9E:0F:34:8B:87:0C:4C:21:B1:F6:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/09629e46-c575-3a70-a4b7-a35fce78fd05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:3d:3e:49:2f:8c:6d:20:2b:b0:59:56:cf:ae:0c:7c:6a:26:
         60:7f:5c:ce:ed:0c:a8:a8:1f:dc:3e:9f:30:f7:63:43:ba:50:
         ff:63:ca:2d:ec:7d:51:ac:f5:04:45:f7:8e:e8:4f:c5:0e:16:
         9b:cc:74:b6:30:49:43:e0:77:f8:b3:6a:56:e1:23:2b:b3:90:
         f6:9a:d4:39:67:66:dd:0f:ab:16:b0:57:1c:12:34:d6:e9:a0:
         f1:fd:1e:af:4c:16:15:43:1d:0a:67:a1:76:0b:4e:b5:5c:8a:
         5f:3a:fe:86:44:48:92:78:4e:5f:a1:9a:48:40:f2:b9:67:af:
         08:4a:43:bf:ad:34:0d:12:c0:b3:0f:c1:72:a1:93:21:88:b6:
         94:c9:31:91:53:1b:69:7d:b5:41:82:30:95:f3:99:ad:c3:68:
         87:be:62:7b:e2:1f:2a:9b:44:da:b5:25:54:99:61:28:f3:20:
         cf:43:09:28:37:2e:44:cf:75:e5:12:1a:83:15:97:b9:b0:56:
         d9:d7:21:13:32:b8:c0:91:f5:ec:65:e9:1c:fb:0a:8d:51:84:
         ff:38:f4:15:f3:79:1b:1a:66:42:ba:24:5c:70:cc:bf:13:06:
         8c:ab:3f:f6:9a:4b:03:48:6e:82:2c:44:a6:49:27:ef:81:c8:
         90:5d:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:54:01 2024 by rpki-client on console-fra.rpki-client.org