Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c253d6f-f707-384b-917a-a08124990300.roa
File:                     6c253d6f-f707-384b-917a-a08124990300.roa (raw, json)
Hash identifier:          nDACfo6VXOP27UmG4SQLqO9EB+UnKCbrGSQ0wllfEys=
Subject key identifier:   D9:E9:95:E3:E2:22:DF:BE:35:CF:E6:07:FD:44:20:62:76:A2:95:73
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858475AE20328FE71126CE7EC3700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c253d6f-f707-384b-917a-a08124990300.roa
Signing time:             Fri 27 Sep 2024 16:38:05 +0000
ROA not before:           Fri 27 Sep 2024 16:38:05 +0000
ROA not after:            Thu 26 Dec 2024 17:38:05 +0000
asID:                     40676
IP address blocks:        136.0.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:e2:03:28:fe:71:12:6c:e7:ec:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 27 16:38:05 2024 GMT
            Not After : Dec 26 17:38:05 2024 GMT
        Subject: CN=b8637d43-391e-44d0-a23d-8c67f76d98a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:dd:b8:2b:02:0b:66:f5:73:f2:5f:ef:69:
                    58:b5:f5:59:a1:0b:33:4f:ae:4b:1c:e0:41:e3:12:
                    16:03:36:86:8c:b5:24:09:51:e1:66:3e:a6:02:de:
                    7e:1d:10:ea:25:20:e5:bb:7b:c0:da:67:77:cb:4d:
                    80:ca:03:27:78:06:65:e3:12:7a:b0:6a:9b:e2:0b:
                    ea:2d:e2:1b:a7:f3:3c:c0:c5:6c:16:b0:25:22:9c:
                    25:ee:e8:bf:7e:c6:be:25:6a:f6:8a:00:0a:f9:a3:
                    e7:e3:27:35:e8:05:ad:78:cc:04:43:bd:44:9e:09:
                    25:f2:fd:b5:9a:5f:40:cb:d1:b8:cd:cd:49:40:26:
                    6f:aa:49:d9:e4:3d:45:5b:f3:a8:ee:6e:85:a7:d2:
                    7c:89:86:b4:2f:97:a1:8d:cd:ef:ab:f0:a0:5c:ad:
                    b0:8c:d5:d1:cd:68:c8:31:da:be:a9:0c:0c:43:0f:
                    8e:70:b6:ea:d8:b6:54:d9:9c:fb:a5:69:a7:31:78:
                    71:0b:6d:2d:44:41:64:dd:68:06:35:16:ea:8e:1b:
                    0d:dc:f1:ef:fd:8c:df:96:4b:3c:9e:89:ef:92:0b:
                    02:a1:76:f1:5b:c2:88:93:a6:46:38:77:05:9e:c5:
                    6d:0c:7f:15:87:6d:38:61:46:88:56:9b:18:4c:ff:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E9:95:E3:E2:22:DF:BE:35:CF:E6:07:FD:44:20:62:76:A2:95:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c253d6f-f707-384b-917a-a08124990300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:fa:6a:e6:07:ff:e8:84:8d:e2:8b:36:d3:2e:3b:72:5c:
         6b:4d:0e:38:7e:70:c3:c3:27:2c:9d:d8:42:f9:13:85:f1:9c:
         fa:bb:d2:44:f3:d2:88:a1:3e:14:b9:74:4d:5e:aa:68:2b:77:
         70:ef:62:d4:26:1a:19:ae:50:ab:30:45:65:e6:e4:80:28:37:
         8a:2e:a8:6e:a2:ba:89:fd:b8:88:51:66:b3:8a:a0:94:e2:fe:
         aa:49:ac:5f:25:50:e7:b5:74:be:23:02:9d:10:e9:84:c3:99:
         3d:40:27:94:82:6c:f9:2d:fa:19:25:b1:7d:0b:8a:3a:89:9b:
         bc:17:15:14:2a:28:20:54:e0:34:9b:27:2d:64:65:00:97:60:
         78:5c:33:e4:81:ba:4a:aa:ea:6f:32:44:ce:40:2d:2d:92:13:
         6b:b8:07:a8:14:7b:6c:d7:09:da:d1:fe:96:70:9b:0e:e7:c3:
         6a:38:b0:11:fa:b1:50:a4:7d:15:f1:0b:7d:79:60:6e:27:6d:
         ff:ab:e5:bf:62:ab:be:e0:13:7f:00:7a:bd:74:d0:3d:27:fe:
         9b:cc:b6:72:96:74:c5:65:9f:3a:d3:d6:fa:fe:95:b8:04:52:
         b4:7a:33:e0:07:7b:8a:27:17:58:c7:ac:bf:9e:25:75:3e:47:
         51:bb:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:23 2024 by rpki-client on console-fra.rpki-client.org