Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16a4e6e1-9134-34de-b730-e6c6f772ab4d.roa
File:                     16a4e6e1-9134-34de-b730-e6c6f772ab4d.roa (raw, json)
Hash identifier:          /uAOfCCngIBZ39xu4kHm5uGTou9sh9KTkmdwhlyVnj0=
Subject key identifier:   64:A5:EC:D1:BE:4E:31:AA:E1:D3:D6:5E:E7:1E:16:30:11:74:9B:67
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63CF5A0AD5B0C255C8D40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16a4e6e1-9134-34de-b730-e6c6f772ab4d.roa
Signing time:             Fri 12 Apr 2024 17:24:43 +0000
ROA not before:           Fri 12 Apr 2024 17:24:43 +0000
ROA not after:            Thu 11 Jul 2024 17:24:43 +0000
asID:                     136787
IP address blocks:        136.0.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:3c:f5:a0:ad:5b:0c:25:5c:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:43 2024 GMT
            Not After : Jul 11 17:24:43 2024 GMT
        Subject: CN=98445a6d-c8f9-4745-8d8c-03a740e7589a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:e4:22:e9:4f:1a:ee:86:ad:a7:db:e1:e0:
                    76:6f:b2:f2:15:bd:57:b5:49:5f:e8:1b:bd:a3:62:
                    9f:97:fc:94:6c:ab:26:4d:6e:11:0f:17:0c:33:05:
                    43:31:cc:99:b4:bb:5e:87:4d:7e:28:40:d5:4b:45:
                    48:6a:0f:81:f7:f7:29:ee:df:a9:ac:98:e0:9b:57:
                    24:ba:e9:11:60:0b:20:9c:7b:03:88:91:87:ef:98:
                    91:99:cb:fb:bd:29:d1:91:b4:9a:00:d2:86:d1:68:
                    b5:a4:2d:eb:a5:3a:67:f2:be:64:a5:f4:10:91:e1:
                    0a:7a:f7:53:7d:83:97:dd:45:b2:92:e9:e8:bc:a6:
                    07:ff:05:49:66:32:ed:ac:29:2a:d7:5d:c9:7e:85:
                    b6:5c:59:b3:6b:b2:b4:44:1f:7e:8a:29:2c:75:3f:
                    8a:0a:b0:1b:9d:c4:c8:81:cc:42:ce:10:ca:ec:65:
                    c7:64:bc:b1:2d:05:fd:b1:4b:43:b9:ad:4a:9b:54:
                    70:05:68:db:ec:6a:06:15:bd:61:27:b8:65:10:88:
                    1c:60:f1:df:76:27:19:5a:db:a4:80:2d:cb:ea:19:
                    2b:b7:7b:6d:02:5d:d4:31:d8:4e:e2:13:36:34:45:
                    5d:84:e2:78:79:be:25:6b:20:c5:eb:53:e1:6b:94:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:EC:D1:BE:4E:31:AA:E1:D3:D6:5E:E7:1E:16:30:11:74:9B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16a4e6e1-9134-34de-b730-e6c6f772ab4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:dc:26:0d:38:2e:e9:04:7f:5e:3c:e6:31:81:56:fb:eb:53:
         b1:f3:d0:b6:84:2d:e0:48:28:65:13:f5:ed:6a:b5:4e:7e:a2:
         d8:00:19:49:5d:76:79:5e:30:8a:9b:76:94:8a:c4:2a:df:d7:
         06:38:ba:ab:a1:2c:97:70:e8:4b:ee:19:69:81:ab:c3:e3:da:
         5a:48:6f:4c:35:0f:8c:92:4a:b8:6b:4e:75:d2:16:7b:be:56:
         45:06:08:1c:99:06:f0:7d:a5:4f:ed:ef:31:6f:e6:85:eb:5a:
         56:f2:11:a7:01:18:2e:93:5b:5e:be:af:31:55:fd:5c:d8:15:
         af:b4:a9:4f:f5:36:c2:17:a7:1f:4b:6d:29:fc:ab:45:3b:ea:
         28:e0:94:c3:b3:83:59:5e:19:20:75:ec:13:0a:f1:43:8b:b0:
         5b:a5:ef:18:c2:93:6f:ef:75:a1:93:7c:43:0e:77:ec:87:95:
         af:ce:9f:bd:cf:a1:67:01:04:4d:9b:29:14:9a:ac:75:d3:21:
         9c:1f:bb:dd:18:c9:50:79:9b:86:7e:ec:2f:5c:8c:d6:48:81:
         55:b2:ba:57:e7:b7:79:68:68:ed:fd:0c:df:07:88:aa:ee:b5:
         a5:4e:4a:e1:6f:05:6b:36:3f:da:e8:69:cd:e5:e8:2d:47:bd:
         1e:8b:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:35:01 2024 by rpki-client on console-fra.rpki-client.org