Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0da6f764-118c-3add-a3b1-d7bff12ca7b3.roa
File:                     0da6f764-118c-3add-a3b1-d7bff12ca7b3.roa (raw, json)
Hash identifier:          pOxcEYl/9k8LizRfwpcPvhSSzg+0tXuGm68FmW0+HG0=
Subject key identifier:   DB:36:55:37:B3:A6:55:D1:04:0B:3C:75:62:3B:7A:78:CC:F6:7A:7D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4DF631125EAFC80E7EA10
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0da6f764-118c-3add-a3b1-d7bff12ca7b3.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        136.0.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:df:63:11:25:ea:fc:80:e7:ea:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=8e45ad81-8eb0-4d1c-b6d4-ae901ca6e45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:3f:33:de:4a:81:d7:a0:f7:bd:28:b0:4c:
                    03:f5:42:e5:51:15:fd:ca:46:36:f3:fa:df:e7:19:
                    2b:7d:f2:fd:61:38:9d:f4:9f:5d:0e:10:93:67:ca:
                    55:ad:92:68:1b:c3:7d:3d:e1:18:7d:1a:dd:42:91:
                    a2:fd:9f:d6:e7:57:e1:91:1c:59:6b:02:02:63:11:
                    02:14:d2:73:45:ef:48:7b:8c:f2:2e:05:4d:3d:97:
                    b9:2d:e3:de:62:85:58:00:42:f5:75:4c:34:0b:be:
                    56:2c:0f:05:42:f9:75:47:19:ec:ed:77:55:94:4c:
                    94:60:55:2b:92:cf:20:45:01:f0:8d:d5:99:af:54:
                    ac:9b:07:f0:ad:20:82:2b:e1:bc:d8:02:34:7d:14:
                    42:81:cc:af:39:8a:74:0b:45:b8:96:e1:dd:cd:60:
                    c8:6e:f1:48:f4:b2:47:79:fb:c8:33:b0:3a:82:50:
                    6a:59:f4:e3:30:48:f2:0e:8f:ed:90:14:cb:24:96:
                    5f:ee:51:a9:33:88:a4:c7:dd:b2:aa:a6:52:ef:0e:
                    74:0f:05:bc:d9:06:76:18:69:2d:ca:f0:a9:e7:b6:
                    34:fb:cb:34:e1:84:76:9b:1f:31:ee:f7:55:87:42:
                    4d:e2:1c:40:ed:bf:a6:97:d8:ec:c4:3f:b8:a5:bb:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:55:37:B3:A6:55:D1:04:0B:3C:75:62:3B:7A:78:CC:F6:7A:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0da6f764-118c-3add-a3b1-d7bff12ca7b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:31:2b:91:08:e4:a9:d0:78:5d:23:a0:a1:21:c6:11:75:81:
         c1:76:cd:ba:72:6b:01:55:19:18:b1:af:1c:30:47:9e:98:60:
         b1:54:08:4a:b3:1d:b3:5e:7a:f2:2f:da:cb:c5:10:86:af:89:
         cc:bd:ed:b5:65:f5:95:97:eb:78:89:52:35:1a:64:67:0c:92:
         1d:80:22:d4:ce:e9:81:75:e1:01:85:13:37:07:c7:33:3e:4d:
         ee:90:d0:5f:cb:90:85:59:9c:82:31:05:6e:67:eb:f3:18:e1:
         43:23:b1:48:3f:55:f3:38:5c:99:44:68:1b:67:b7:8a:7b:13:
         21:7f:21:89:f0:0a:c8:8f:81:b4:89:be:53:b3:66:0f:52:af:
         ab:65:f2:b4:ac:a9:fa:27:af:7e:21:18:b0:6a:8f:0a:e5:a7:
         ad:9f:8c:10:35:cb:d7:30:1d:f6:9f:d3:97:f9:3c:6e:15:8a:
         f8:e2:ae:02:2d:52:13:9c:04:f4:c8:c9:b9:2f:a4:1d:30:bb:
         87:6e:8f:4b:2a:98:f0:f7:d6:61:8a:a2:d7:fb:76:34:c0:c9:
         40:7a:46:e6:11:9c:4d:15:22:3f:42:8c:21:b5:e9:fb:5d:44:
         78:6f:7f:fe:b5:aa:e8:4b:8a:2c:6f:e5:ab:b1:c2:3b:de:b7:
         34:dc:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:52 2024 by rpki-client on console-fra.rpki-client.org