Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb655295-d492-3d3d-8c54-5137fa269385.roa
File:                     bb655295-d492-3d3d-8c54-5137fa269385.roa (raw, json)
Hash identifier:          N8uc3YnR3yfSRQenSQh9O392qO9yW9dm3SIKqjnTcHU=
Subject key identifier:   94:43:D6:5E:E7:B2:2E:9F:45:64:0F:7C:5E:4B:1C:DA:96:C6:59:0F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D4049EA0A0ABCC11D137EE80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb655295-d492-3d3d-8c54-5137fa269385.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     209854
IP address blocks:        136.0.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:9e:a0:a0:ab:cc:11:d1:37:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=df8977ca-ae54-4f97-bac3-0c9cd4c26d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f1:8d:50:32:96:27:64:53:ae:5f:1b:c7:ef:
                    24:88:a4:3d:8c:43:90:18:bf:1e:9a:af:88:d7:28:
                    ed:37:ab:da:46:fa:7c:5e:60:74:87:1b:83:a1:4f:
                    ab:37:db:2e:44:fb:db:d1:db:43:16:74:d8:f5:87:
                    85:49:38:c3:2e:b7:39:4b:f1:e6:45:2c:2c:ab:df:
                    50:64:70:5c:06:6d:f5:a3:a5:18:60:db:6a:01:8f:
                    0c:ac:3d:44:b1:34:c3:c8:7f:25:a9:e3:9e:f3:fc:
                    38:d4:69:39:4e:b1:02:e2:f9:70:fc:fa:aa:af:9e:
                    50:f9:bc:e8:6a:a0:94:6f:59:3d:bc:04:6e:aa:50:
                    5f:bf:b2:c9:e0:c2:2b:6f:70:ee:cc:b5:34:64:4d:
                    45:6c:4a:c6:fa:06:49:61:68:4b:2c:26:1a:cd:fe:
                    7b:f2:90:de:a5:3b:04:c3:89:f3:60:18:34:4e:71:
                    b7:95:c9:d6:14:d8:24:35:94:67:53:6d:3a:57:f7:
                    cf:66:cc:53:d0:d5:4a:6e:b8:35:4d:fb:d6:6b:d9:
                    19:b5:c8:8e:e2:8b:8b:c2:67:20:f5:49:3b:c5:ee:
                    0a:40:b7:0f:49:0d:d0:72:66:2c:a8:8f:6a:13:0d:
                    61:1b:e8:10:92:90:74:a9:38:45:2c:7c:39:af:23:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:43:D6:5E:E7:B2:2E:9F:45:64:0F:7C:5E:4B:1C:DA:96:C6:59:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb655295-d492-3d3d-8c54-5137fa269385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:08:de:03:b3:12:3d:8a:9d:4f:f5:2e:8f:bf:3b:85:5b:bc:
         db:c1:53:c6:5e:8b:72:b0:ff:d1:0a:b1:77:e8:47:3d:15:1d:
         8b:77:7f:80:58:2c:64:0c:21:0d:c2:0c:53:2a:61:6d:c2:7b:
         bc:c4:ec:1e:22:ce:67:e2:97:b1:21:91:14:16:3f:a2:89:e8:
         5d:e3:3a:19:43:53:80:4d:3b:18:4a:61:b3:ca:9f:20:b1:07:
         de:ee:56:31:7d:e3:6c:a6:63:97:8d:b1:21:6c:09:ce:c1:0c:
         06:0a:8d:8b:f6:9c:f2:88:7e:1a:ed:81:1c:06:60:00:89:e5:
         08:57:3a:48:8c:e2:e0:56:87:02:f3:4b:9d:96:9e:ae:05:e9:
         03:13:2a:69:3c:bd:bd:1e:9d:31:e8:1c:33:93:1d:85:d8:10:
         37:c8:45:a5:83:62:b2:df:57:47:a6:01:8c:fe:90:b8:db:27:
         49:e5:58:02:fc:bf:c1:6b:17:a1:ad:5b:54:b3:d0:30:b6:50:
         b5:70:6f:db:07:e4:09:6b:ae:37:f4:e6:94:44:f0:85:4f:eb:
         19:b4:bf:fa:07:50:0a:67:9f:06:37:ee:a5:7c:73:db:83:ec:
         02:5f:56:ff:1f:d1:20:2c:61:bb:5c:35:60:cf:76:6c:94:19:
         6f:62:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:46:05 2024 by rpki-client on console-ams.rpki-client.org