Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fdb8823-ce6d-35d2-a014-1d4bdacd529c.roa
File:                     3fdb8823-ce6d-35d2-a014-1d4bdacd529c.roa (raw, json)
Hash identifier:          FaFFAeepYhREXyl6ifLwBSSSBn7npHkW6P6wPnvnF8A=
Subject key identifier:   4C:E8:4E:F1:C1:79:D0:EB:C5:B0:96:75:C7:A9:C1:D1:62:60:F2:F9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F6406FC75336BF1A778F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fdb8823-ce6d-35d2-a014-1d4bdacd529c.roa
Signing time:             Fri 12 Apr 2024 17:24:45 +0000
ROA not before:           Fri 12 Apr 2024 17:24:45 +0000
ROA not after:            Thu 11 Jul 2024 17:24:45 +0000
asID:                     204957
IP address blocks:        136.0.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:40:6f:c7:53:36:bf:1a:77:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:45 2024 GMT
            Not After : Jul 11 17:24:45 2024 GMT
        Subject: CN=cdc8242b-e4f0-4bbb-9d0f-98896fde5897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:57:67:fa:79:84:8a:8e:40:9c:87:d3:33:
                    26:53:d8:bf:84:55:67:a2:1a:a9:53:60:9f:d4:b6:
                    9c:ec:c6:de:9f:01:d9:9c:e4:30:f2:f4:43:f1:63:
                    c6:2c:fd:8e:95:bc:94:c1:bc:23:de:22:83:3f:56:
                    d0:58:fd:87:4c:28:8b:35:cb:f7:97:04:88:f9:2e:
                    cb:14:12:bc:0f:bb:82:2c:4f:a1:38:db:e1:0f:c9:
                    75:0b:45:ac:02:83:b0:ff:d7:4f:a3:42:ac:50:86:
                    21:e7:b7:ff:a3:8d:db:a6:a6:78:35:b0:99:51:de:
                    f1:ef:f2:eb:ec:81:1d:5f:99:d5:1a:a0:bf:a5:16:
                    cb:00:bc:07:96:06:98:fc:e9:79:a8:11:d9:f5:cc:
                    74:70:05:ea:77:62:58:b0:f9:4c:39:c1:93:dc:f6:
                    9e:eb:0c:9e:0e:2a:d6:93:8b:96:42:fe:4f:78:d8:
                    78:5c:97:0c:e8:7f:14:39:93:6e:dd:18:a2:ac:52:
                    57:96:04:5b:dc:d4:90:19:3a:fa:13:1d:38:c7:7a:
                    93:20:96:64:8d:97:05:4a:0d:6b:ef:c9:78:78:62:
                    03:9c:1c:b2:21:aa:0b:cd:d6:15:6f:ff:76:2b:20:
                    8d:25:98:71:0a:63:20:99:9c:35:0c:35:25:2b:2c:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E8:4E:F1:C1:79:D0:EB:C5:B0:96:75:C7:A9:C1:D1:62:60:F2:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fdb8823-ce6d-35d2-a014-1d4bdacd529c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:46:d8:bd:95:99:bf:61:35:20:40:8e:22:05:32:f1:c1:
         16:59:5d:4d:41:d4:f2:d1:8c:d7:eb:9b:c7:23:f9:b4:81:d3:
         94:aa:8f:f4:e2:c5:5e:26:33:7f:57:c4:c2:bc:0f:f0:70:b4:
         5f:99:38:ce:7c:f5:19:16:58:4b:42:00:ff:71:6c:59:ba:05:
         49:4a:87:19:15:00:18:a4:4d:31:15:6e:59:4c:fc:ce:bf:23:
         19:29:ba:df:c0:47:f4:90:78:88:0e:f9:78:d9:ed:a0:c9:41:
         f1:c8:e6:6c:9c:fe:1f:1d:9a:70:b5:d2:3c:2b:98:c6:df:f5:
         a4:e2:e1:a6:1e:61:35:3b:39:ed:67:4d:a1:69:ec:83:b9:0c:
         0f:f8:3d:93:d2:1d:f9:19:28:2a:d0:39:0f:12:b1:c8:b6:42:
         fe:ed:93:b7:4e:b6:78:11:3c:10:25:5c:fb:26:7a:a2:cb:76:
         c7:ec:f0:ae:2c:c0:bf:50:8c:f5:08:7a:e8:fe:c8:ed:bc:a2:
         c0:4f:34:f7:77:fc:38:44:7b:14:5f:6b:75:a9:7d:f0:3c:f7:
         0c:02:18:43:de:c8:fa:b8:c7:fc:b6:4a:e5:3f:6c:a6:e6:13:
         f0:72:10:2c:a6:84:ce:32:ae:46:56:22:25:4f:95:06:7e:f8:
         54:64:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 19:46:29 2024 by rpki-client on console-fra.rpki-client.org