Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/71a135ef-7814-382b-9b02-f3624da4613f.roa
File:                     71a135ef-7814-382b-9b02-f3624da4613f.roa (raw, json)
Hash identifier:          91SHjZ/oBEoJWf6KmNHFIt/l1reCS8ln13r/9pwCKIg=
Subject key identifier:   9C:18:B2:75:FF:E6:FD:E6:FC:03:78:69:CA:66:B1:49:9B:B1:C6:E2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D4049E3F0EE203DD3E83D900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/71a135ef-7814-382b-9b02-f3624da4613f.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     209854
IP address blocks:        136.0.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:9e:3f:0e:e2:03:dd:3e:83:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=611157cb-1b6d-4e3a-afb9-818a7f41f75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:47:f4:86:24:4b:8d:6f:ba:80:06:bb:35:
                    c9:67:65:28:54:99:1f:7d:97:9e:40:45:a4:79:3d:
                    d8:a5:09:2f:52:62:18:18:ce:67:99:5b:c7:0f:f0:
                    1a:2b:85:3d:83:ea:83:e0:1c:dd:54:59:77:da:7a:
                    a0:0d:4c:7f:53:ae:7d:6f:d8:1e:76:c4:e9:9f:c5:
                    0d:da:44:f7:be:54:09:2f:37:a8:10:81:9e:65:48:
                    1b:de:33:77:fc:77:cb:d6:c6:f2:1b:62:aa:49:f4:
                    0d:47:d9:24:8f:77:0b:84:fb:37:ce:64:91:c5:f0:
                    b3:fa:cf:1f:45:a2:d9:49:86:c7:17:df:9c:b3:71:
                    67:63:fa:dd:30:f0:33:99:f5:14:bf:6b:47:72:95:
                    ac:c4:60:bb:ba:5b:88:b3:82:18:76:4a:30:34:d0:
                    5c:3d:be:6a:67:3c:8e:ae:ec:0e:25:7b:0c:c8:6f:
                    58:be:6e:98:08:48:a7:27:e4:2e:2d:5f:00:ce:6c:
                    f9:13:4a:01:a4:2b:30:7c:b9:1b:b0:3d:35:f6:09:
                    60:3f:8b:39:42:92:01:e6:3a:5e:92:9f:f7:42:01:
                    cf:b8:a9:c6:80:cd:ee:f4:23:57:fd:8e:88:8c:9d:
                    76:db:7d:9d:6e:0e:d4:31:ce:07:9f:d7:aa:f0:0f:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:18:B2:75:FF:E6:FD:E6:FC:03:78:69:CA:66:B1:49:9B:B1:C6:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/71a135ef-7814-382b-9b02-f3624da4613f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5a:fe:b5:46:ab:d0:bf:3e:00:e3:ea:ab:35:20:b3:1c:3f:
         44:0c:dc:e4:a0:b6:51:00:12:6e:54:4a:76:32:72:39:51:65:
         90:fc:d0:13:cd:a6:bd:ba:1a:cc:f7:36:17:5f:75:fb:75:cc:
         5b:e4:b8:db:7d:36:f0:3d:80:60:fd:95:de:32:14:f3:f3:60:
         12:a6:0e:91:fd:f7:d5:9e:ce:8c:43:1e:72:af:af:7d:7b:ce:
         f7:9f:92:06:fa:89:47:1f:4c:b5:ef:c0:4d:56:8a:cf:d7:e4:
         6d:ac:c5:d5:c0:c9:54:ce:a6:41:ea:c8:a3:f5:d4:cc:db:6b:
         b9:66:44:5b:2a:64:c0:27:8a:10:c2:fe:9e:ba:76:6d:40:6c:
         2a:6b:e3:b6:ae:b9:2e:d7:31:20:03:fd:c2:66:5c:33:b9:3b:
         de:d3:85:18:32:54:a2:80:82:39:ca:c7:15:62:3a:51:fa:ac:
         f3:23:6c:0c:b5:11:4c:3d:6d:2b:5c:43:8d:d5:9f:69:3c:cc:
         75:40:cf:36:10:02:63:52:a0:2b:16:aa:c8:2f:a2:f2:f2:6a:
         54:41:63:b2:1e:e3:60:20:95:c8:9c:c0:bb:5c:a9:99:d9:d9:
         b5:d5:80:90:82:22:93:a1:ef:bc:72:ac:b7:6b:8e:e4:fe:2a:
         a1:0d:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:46:03 2024 by rpki-client on console-ams.rpki-client.org