Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a210f20-39a1-30a6-bbf0-556e7efe1d72.roa
File:                     9a210f20-39a1-30a6-bbf0-556e7efe1d72.roa (raw, json)
Hash identifier:          SBdlXDWvKWHLzKbcsgHcOsyp1rWPtvtS0fsAVRfR6r0=
Subject key identifier:   EB:C4:16:89:52:7F:99:22:BF:05:48:0A:63:F9:5C:CD:95:13:30:23
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63D429E21515963358380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a210f20-39a1-30a6-bbf0-556e7efe1d72.roa
Signing time:             Fri 12 Apr 2024 17:24:44 +0000
ROA not before:           Fri 12 Apr 2024 17:24:44 +0000
ROA not after:            Thu 11 Jul 2024 17:24:44 +0000
asID:                     136787
IP address blocks:        136.0.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:3d:42:9e:21:51:59:63:35:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:44 2024 GMT
            Not After : Jul 11 17:24:44 2024 GMT
        Subject: CN=5b9c8080-b879-4fb0-9ba2-d000f05bf381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:68:3a:c8:fc:1e:52:ae:34:9e:d0:8d:17:
                    cc:6c:69:0a:d8:96:03:dc:83:49:cd:cc:d1:45:a0:
                    72:a7:13:5a:8d:4f:a5:a2:9f:ae:08:28:99:50:77:
                    fa:b7:a4:74:23:7f:12:59:c9:60:e9:77:09:ea:b1:
                    1d:bd:b1:06:a1:89:1d:fb:f0:b1:e3:0d:7d:7d:b1:
                    64:d5:0d:20:26:e8:45:75:ed:4b:38:66:2e:09:ae:
                    62:65:ab:8d:67:97:2f:8a:ee:5e:d4:bd:61:92:27:
                    1d:13:95:07:d5:58:64:9e:78:3b:ca:47:18:0b:b5:
                    d2:a2:9d:bd:56:08:4d:59:ae:01:a2:31:be:68:56:
                    ba:c7:f9:92:df:a1:0a:be:a1:b9:d8:91:72:d2:84:
                    b5:84:9d:d8:11:81:a0:17:e9:a6:37:d1:c3:2a:b9:
                    17:7e:07:35:a1:c3:51:97:90:7f:e7:22:bf:62:5c:
                    41:3b:16:b2:7c:5e:24:77:fd:a0:bc:41:78:14:eb:
                    12:c3:9e:85:9c:dc:1d:db:46:8b:a9:a5:72:bc:91:
                    c8:0d:95:ab:79:bf:81:9f:21:6c:9e:cb:88:d0:ac:
                    40:23:f5:b3:ad:58:1b:d0:99:f0:84:95:77:36:24:
                    09:0b:b2:ef:d1:09:14:8f:3d:76:35:aa:63:dc:da:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C4:16:89:52:7F:99:22:BF:05:48:0A:63:F9:5C:CD:95:13:30:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a210f20-39a1-30a6-bbf0-556e7efe1d72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:db:32:be:00:7b:81:0a:d8:a9:07:8f:56:4e:fd:08:0d:3b:
         25:a3:d5:b5:09:74:cd:32:42:dd:27:ad:e9:f3:27:6b:33:db:
         eb:5e:69:26:6c:5e:55:16:d4:e2:a5:1f:d9:a8:38:66:96:db:
         9f:80:d1:43:26:08:ce:3b:8e:58:31:c4:4c:34:50:d0:4e:bb:
         13:e4:5b:78:6a:6b:ab:81:bb:ac:88:c6:68:f7:7a:c0:2c:ac:
         e9:e7:de:3a:75:97:15:42:50:ac:8a:53:02:b3:a6:a1:24:69:
         4b:e2:03:58:54:4b:b5:de:0d:86:5e:f6:19:34:ad:4c:ef:da:
         55:c9:12:22:fd:da:e6:76:f8:a0:98:89:2c:0d:b8:eb:7e:25:
         5b:32:40:f0:12:ad:60:d4:35:cc:69:01:08:95:9b:c8:9e:d6:
         d2:2f:d8:48:8e:74:4d:a9:b9:42:75:46:31:4a:83:a8:ee:8f:
         c2:fe:d3:ef:92:8e:f8:20:87:14:a6:a2:6a:a2:7f:9c:9f:44:
         88:a0:84:8f:24:4f:23:c8:19:cc:da:e8:22:c1:8e:e6:cb:df:
         e2:e3:89:01:56:50:72:cc:f7:aa:33:8b:21:eb:32:17:db:d9:
         47:5c:e0:f1:6b:29:dc:a7:f0:95:58:24:70:dd:fe:fc:2a:42:
         f2:4f:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:35:01 2024 by rpki-client on console-fra.rpki-client.org