Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4284a39b-03ec-3337-83d3-f393255ebd2c.roa
File:                     4284a39b-03ec-3337-83d3-f393255ebd2c.roa (raw, json)
Hash identifier:          sV22oeniilVFXpdJvC9e/edFxdUE1decTzEPhrzHtNU=
Subject key identifier:   1F:F2:7F:A0:E4:D4:1E:88:6D:74:22:A0:39:1B:A0:27:EC:67:AD:28
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4DA9A7EBF2BF9197EF200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4284a39b-03ec-3337-83d3-f393255ebd2c.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        136.0.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:da:9a:7e:bf:2b:f9:19:7e:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=ab252d69-6153-4d8f-bc89-0263c3a8b6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:8f:ac:04:68:f2:39:bc:7d:aa:82:31:fb:
                    38:3d:9d:63:ad:7e:c1:09:d3:81:7b:ec:87:69:d3:
                    b2:6d:f5:2b:33:f9:13:5e:92:54:f4:e6:c8:f0:67:
                    8b:18:52:72:70:bc:b0:99:7f:32:de:23:c2:d9:88:
                    82:43:ef:75:ac:7b:bd:bc:45:43:9e:33:5c:3e:bc:
                    7b:5a:ab:26:61:5c:32:23:a7:ad:d2:c5:41:cb:a0:
                    b1:c4:3c:2e:98:a2:fe:66:c9:37:1a:7b:e9:8b:ac:
                    73:2c:61:83:3b:da:71:1a:d0:00:55:59:5e:27:04:
                    bd:94:cd:a3:12:94:d1:cc:ab:5e:5e:b6:04:19:e6:
                    45:91:3b:fc:47:59:ef:00:55:8e:48:60:57:7d:0d:
                    01:d2:8f:ba:07:43:74:3f:f5:99:1d:f8:b4:58:38:
                    80:d6:ae:12:3c:35:f0:71:8b:e6:fa:7b:34:ab:aa:
                    0b:29:6c:db:a3:ad:cc:4e:37:1b:97:1b:a6:72:c0:
                    6d:96:e6:c8:d0:95:c1:75:ed:1e:46:91:65:6b:0b:
                    e0:40:12:36:13:0e:1d:3a:87:0f:ae:5a:79:51:5e:
                    b1:32:9f:cb:e3:f1:83:96:a9:86:2c:09:bb:8e:b2:
                    6a:0d:12:f1:ff:ff:24:9e:ca:d1:da:76:b4:24:a2:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F2:7F:A0:E4:D4:1E:88:6D:74:22:A0:39:1B:A0:27:EC:67:AD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4284a39b-03ec-3337-83d3-f393255ebd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:f9:4a:e2:7e:23:8e:a6:0e:f2:33:55:2e:7a:16:0f:ec:
         93:e9:8e:d5:d5:1e:a9:de:15:df:e1:32:66:95:3b:89:24:21:
         58:3b:c1:69:a7:2a:0f:9c:0f:f0:dd:a9:25:65:c4:e9:ec:b7:
         f8:3c:b3:cf:48:36:49:82:9e:2c:92:a8:72:83:9a:71:76:61:
         60:d6:b8:47:70:ef:79:8e:bc:1f:f5:7c:28:14:b9:9f:8c:b0:
         c3:e8:b8:99:39:64:25:54:d5:42:55:9a:f4:ba:0f:60:1d:90:
         dd:c9:e9:ab:41:89:84:b1:14:bb:52:2c:c4:84:ca:52:ab:89:
         df:93:6c:8c:87:b7:1c:e0:9e:01:ae:9f:12:a0:a7:e7:9c:ee:
         7a:99:ba:54:e2:d9:8f:75:d4:ae:ff:1c:be:c0:b6:84:d8:2a:
         5c:93:38:16:c8:fe:45:d4:95:99:af:23:a9:26:b2:d7:24:7c:
         d1:38:bc:e9:24:8d:2e:55:1f:04:d4:d9:63:b5:64:84:e6:37:
         d8:4b:9b:10:1d:88:ba:9b:d7:67:87:47:97:ca:01:11:c1:ef:
         ca:4c:65:5c:85:f7:e0:06:ed:04:28:d5:40:6f:bc:35:77:0f:
         e7:c1:a3:36:b9:f6:ec:23:ee:71:bf:bd:c7:43:cc:6c:fc:49:
         75:29:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:53 2024 by rpki-client on console-fra.rpki-client.org