Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86cd643d-c041-35e5-a9ce-0b8757d8d8c3.roa
File:                     86cd643d-c041-35e5-a9ce-0b8757d8d8c3.roa (raw, json)
Hash identifier:          Y2fpjoCNweCS07OlkW5Otvh4u6koo/ZFEO2nKOrdyT4=
Subject key identifier:   22:67:81:B2:27:6E:22:1B:1F:2C:53:8C:4D:10:06:53:6F:49:B3:2B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63339089BA99E3216D040
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86cd643d-c041-35e5-a9ce-0b8757d8d8c3.roa
Signing time:             Fri 12 Apr 2024 17:24:39 +0000
ROA not before:           Fri 12 Apr 2024 17:24:39 +0000
ROA not after:            Thu 11 Jul 2024 17:24:39 +0000
asID:                     5650
IP address blocks:        136.0.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:33:39:08:9b:a9:9e:32:16:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:39 2024 GMT
            Not After : Jul 11 17:24:39 2024 GMT
        Subject: CN=f65fc367-2040-4211-a1c7-d902b9707532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:71:96:19:b5:6d:61:d3:41:76:12:41:c2:
                    1d:fc:86:79:ae:ea:21:9b:2c:f5:0b:29:d3:2b:07:
                    7d:a7:f7:c7:11:97:49:2d:6a:39:e4:da:6f:a7:08:
                    44:0a:f3:ac:a2:29:91:89:fe:0c:67:a0:e2:7e:f6:
                    17:dc:1b:a2:62:1d:27:60:95:04:37:7d:66:5d:0b:
                    a2:0c:e7:cf:a0:fb:3c:4e:9d:df:a0:5a:c2:31:f3:
                    14:89:ab:76:6a:32:c9:23:5a:d8:c5:73:ec:ee:4d:
                    a8:4c:0c:f4:c1:1b:65:30:8d:18:b2:f8:c2:e2:83:
                    ef:be:fa:9d:9b:09:53:2c:9a:12:d3:bc:d8:f9:a5:
                    ed:fc:7c:d4:28:79:9a:a0:95:54:24:10:85:94:73:
                    a7:6f:2b:13:67:08:1d:7c:be:bd:75:b9:2c:f8:a9:
                    71:10:1d:42:3d:cf:2c:96:f0:ad:3c:98:4c:2c:dc:
                    b0:b6:8d:ba:c0:dd:4c:54:d9:0b:93:18:ca:81:32:
                    93:1c:2b:53:ab:91:5d:74:e7:66:78:82:a7:ba:8a:
                    9d:d9:d3:ad:61:34:78:07:23:a0:44:1f:ba:1f:75:
                    c5:72:45:b7:3c:99:ac:5f:f7:50:d5:3a:15:b2:be:
                    f5:05:60:77:7a:43:48:5e:29:03:a6:f1:df:98:67:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:67:81:B2:27:6E:22:1B:1F:2C:53:8C:4D:10:06:53:6F:49:B3:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86cd643d-c041-35e5-a9ce-0b8757d8d8c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:4f:41:15:ac:6f:a7:ac:8a:f6:46:22:b5:ae:ca:d6:96:14:
         4d:99:06:1a:f9:7c:35:b5:aa:ef:80:55:21:0a:99:33:f6:9f:
         d1:8d:cf:69:90:56:ec:ff:20:5d:b7:9d:27:77:79:41:f9:ba:
         be:10:7d:01:4a:e7:4f:30:bd:a6:2f:1c:56:a4:fb:9b:e5:d0:
         f3:6f:f7:2f:e9:5a:95:c2:39:4c:26:53:a7:7f:6f:bb:23:9d:
         bc:54:f6:99:64:b4:6a:d0:f5:29:c6:9e:76:c2:cc:08:47:c8:
         e0:67:68:db:2e:3b:40:34:84:0b:50:db:3a:6f:3c:fc:e2:8a:
         32:d4:fa:0d:ac:1d:e3:98:cc:f7:8c:03:77:4a:31:b3:44:83:
         d0:36:5c:9f:13:f1:62:df:55:60:14:49:b9:dc:3b:1b:d9:95:
         1d:cc:86:20:8a:b0:8f:c7:49:75:3a:e7:c7:d4:24:06:49:9d:
         c6:ed:4d:b8:77:b0:87:c7:13:d0:18:e0:1b:ae:6e:14:a6:08:
         11:80:bb:04:0c:26:b3:ac:a3:f1:b2:90:12:9e:ad:a4:dc:ee:
         7a:37:60:4e:13:ad:44:15:eb:c8:e7:a2:93:af:17:e1:c3:d9:
         d4:ea:36:ec:8e:d8:96:46:55:4d:18:2b:57:0c:fa:33:09:88:
         8a:b7:01:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:54:26 2024 by rpki-client on console-fra.rpki-client.org