Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/20c76ec3-5160-3b90-bb10-6884b085ce8e.roa
File:                     20c76ec3-5160-3b90-bb10-6884b085ce8e.roa (raw, json)
Hash identifier:          2ncfOcl8w6XsZS5xYObt5M52F1S2mZ/eWmWbe9FiwmQ=
Subject key identifier:   62:54:D4:05:2F:ED:34:88:8C:32:A4:58:FC:B1:1E:B3:6E:8A:03:0E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858475AE20348FD449FF01BD66F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/20c76ec3-5160-3b90-bb10-6884b085ce8e.roa
Signing time:             Fri 27 Sep 2024 16:38:05 +0000
ROA not before:           Fri 27 Sep 2024 16:38:05 +0000
ROA not after:            Thu 26 Dec 2024 17:38:05 +0000
asID:                     40676
IP address blocks:        136.0.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:e2:03:48:fd:44:9f:f0:1b:d6:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 27 16:38:05 2024 GMT
            Not After : Dec 26 17:38:05 2024 GMT
        Subject: CN=773479f0-9869-4d5d-9457-97ddb4d5162d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:76:f7:17:cc:b0:88:c3:5e:52:e1:d4:9d:c4:
                    63:ba:b7:c8:ab:ce:60:16:db:ff:07:60:5b:76:30:
                    9e:e8:cd:27:9f:9a:18:dd:25:69:85:73:55:e5:59:
                    ab:9a:76:64:8f:fd:7e:31:00:d7:dd:6c:f2:c4:01:
                    cb:c0:0f:8d:f4:17:ad:3b:06:1b:c5:55:1a:9b:08:
                    19:1d:c2:4d:85:67:1f:4a:54:b2:9b:60:38:0f:86:
                    2a:18:69:be:53:01:b4:a9:3b:ff:3d:5e:7f:be:81:
                    f7:45:7b:51:aa:82:f0:84:a4:7b:c2:0c:85:9c:f9:
                    a2:5f:eb:80:00:d8:57:17:01:9a:b4:9f:11:44:73:
                    80:5c:5c:25:cc:0b:6d:ae:92:46:8d:cc:f9:e1:c7:
                    0e:f5:c7:84:3e:7d:06:2d:e0:63:4d:83:37:ad:54:
                    b3:4f:a4:ca:00:4b:fb:02:20:be:43:ba:14:b9:00:
                    85:8c:60:87:b4:e3:4b:98:6b:cf:5e:ed:a4:ca:d1:
                    98:09:39:d5:fc:ab:65:13:2c:83:62:5b:ca:bf:bc:
                    33:1b:dc:59:f8:53:93:2c:c5:a6:2f:39:b9:85:31:
                    be:9e:43:c0:2a:99:0d:af:78:35:34:a6:4e:5b:b5:
                    a0:a8:55:b1:d8:b0:24:34:b1:4c:aa:ef:74:3a:53:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:54:D4:05:2F:ED:34:88:8C:32:A4:58:FC:B1:1E:B3:6E:8A:03:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/20c76ec3-5160-3b90-bb10-6884b085ce8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:08:67:83:84:69:7d:25:a1:ee:91:77:86:4b:d7:84:33:
         19:9b:37:e7:db:dd:70:fb:64:a4:60:a4:01:34:04:11:f3:15:
         c3:24:00:e8:f7:6f:1b:42:3c:3f:f9:6d:f3:7f:fb:21:66:87:
         1a:70:50:f1:5b:92:88:2c:3c:13:52:17:f3:c0:28:ed:32:c3:
         21:28:f9:ac:b9:56:eb:15:fd:c0:2a:54:73:cc:2c:8a:d2:ea:
         ce:71:19:c1:cc:cc:10:0b:1b:3e:87:72:67:53:08:40:5c:2c:
         df:bf:24:48:16:c0:4e:83:9f:02:ea:4c:8a:c5:b7:a9:61:47:
         d8:41:88:d8:4b:87:3f:ac:77:7a:7d:8b:8e:e3:96:bc:5d:cc:
         cc:70:a9:47:d1:b3:91:3a:2c:76:4c:fa:5a:ca:cb:93:f5:96:
         5d:5d:9a:8f:d6:e2:58:30:29:59:76:71:89:b7:05:91:d8:ad:
         89:45:6c:43:cc:7c:7d:16:eb:7d:a8:f8:ad:4c:97:3a:1d:00:
         23:58:51:89:f0:f6:c1:30:fb:5d:83:8e:cb:d0:49:87:0e:14:
         b4:fd:12:7f:a5:f0:0c:d6:32:2d:66:32:53:96:69:9d:77:99:
         67:81:38:29:e0:60:06:8b:a1:d5:dd:b9:48:d8:19:d7:21:68:
         b9:94:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:52 2024 by rpki-client on console-fra.rpki-client.org