Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/82e6e065-dfaa-30c4-9bf4-bdbb913bb374.roa
File:                     82e6e065-dfaa-30c4-9bf4-bdbb913bb374.roa (raw, json)
Hash identifier:          7jEX434Qa22Fif/QOjiXFhp8Xff7G14KxNCkqOFY2Lk=
Subject key identifier:   87:6F:91:F7:05:58:71:7E:0A:D7:0B:08:37:77:90:C7:C4:FB:EB:2C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F637B98B2759E08C183900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/82e6e065-dfaa-30c4-9bf4-bdbb913bb374.roa
Signing time:             Fri 12 Apr 2024 17:24:41 +0000
ROA not before:           Fri 12 Apr 2024 17:24:41 +0000
ROA not after:            Thu 11 Jul 2024 17:24:41 +0000
asID:                     18530
IP address blocks:        136.0.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:37:b9:8b:27:59:e0:8c:18:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:41 2024 GMT
            Not After : Jul 11 17:24:41 2024 GMT
        Subject: CN=c2e4f251-ff9b-43e3-9d83-116434089db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8b:37:d0:a6:3b:84:05:66:df:29:51:d0:4f:
                    09:4c:18:85:7e:e7:2e:7d:19:45:a1:c3:29:f6:b3:
                    11:7d:91:6d:5e:5f:95:92:dc:41:92:96:fd:5c:1a:
                    a4:8b:8e:48:a0:52:cf:3d:b7:c0:10:49:7e:46:a0:
                    4d:6c:85:37:55:f7:ea:ea:93:bb:8b:e9:35:eb:b7:
                    be:f7:88:27:8e:aa:73:82:de:23:92:d3:e1:63:ef:
                    8f:2d:78:df:ee:bd:cb:8e:95:f7:7a:b6:37:76:6b:
                    ea:03:39:e0:b5:5c:42:54:e3:6a:10:ba:ad:39:a7:
                    cc:12:cd:04:1b:43:6c:e8:34:33:f5:55:dd:c3:54:
                    4b:42:d0:43:b0:7e:8e:bc:2f:a0:4e:8c:de:7b:8d:
                    62:ba:85:c6:59:0c:e8:a5:52:dc:a6:23:60:33:a5:
                    99:f0:13:95:59:8a:ee:61:36:63:57:71:a4:cf:01:
                    fd:60:a8:db:80:56:3b:ca:32:de:84:f7:46:b6:c3:
                    37:45:08:b7:87:4e:f9:66:6d:4d:d7:e2:29:20:0b:
                    f3:88:6c:ac:fb:f5:d9:09:4b:18:c5:64:61:03:81:
                    b4:84:85:39:a5:fa:c0:fc:e7:5d:e3:31:f3:e6:b3:
                    94:ad:f8:23:79:88:df:79:3b:26:e0:9a:49:86:0d:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6F:91:F7:05:58:71:7E:0A:D7:0B:08:37:77:90:C7:C4:FB:EB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/82e6e065-dfaa-30c4-9bf4-bdbb913bb374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2b:5a:de:3d:34:dd:89:d6:b7:de:d2:d6:65:37:a0:0f:d8:
         36:c5:60:69:63:19:45:4f:dd:8c:dc:b8:20:3a:ab:52:63:f5:
         a6:c6:da:0d:92:8e:49:b2:9d:b3:b2:6b:c8:01:80:d5:0c:84:
         95:b2:ce:33:9a:9e:70:b7:14:f6:e6:bd:a8:94:88:ec:2e:35:
         91:ac:ba:d0:12:21:07:9f:78:c9:3c:a3:e4:c0:55:14:5a:d1:
         33:15:1e:45:e8:ca:4f:9b:42:2d:f7:49:15:56:c3:09:54:12:
         08:38:a7:3c:b5:32:7d:86:6e:17:ed:ba:5d:e9:26:ee:40:a2:
         86:3e:df:5c:da:92:69:6b:21:99:3b:b6:56:2e:08:fd:c6:ad:
         c9:8c:ca:c8:e3:69:72:6f:a8:0b:58:36:d8:61:9c:2a:f0:63:
         f0:51:99:51:59:3d:59:9e:5a:4f:d9:d5:e7:0b:1f:ed:59:2f:
         7e:c0:bc:0e:ed:1e:fd:43:59:02:0f:2f:27:e8:2d:3c:59:3d:
         17:bd:71:8f:29:d3:fb:f5:13:b2:ca:1f:99:b1:9e:f3:f7:f3:
         ba:53:30:ea:5e:11:b8:eb:43:53:b8:e2:0a:c9:c8:0d:a7:d1:
         c1:6a:72:6e:3f:c4:6a:00:f9:f8:1b:0d:28:35:4f:ee:4f:0f:
         3a:b4:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 13:55:14 2024 by rpki-client on console-ams.rpki-client.org