Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/deedbcc2-1e5b-31af-bb3c-5f3520ca1a13.roa
File:                     deedbcc2-1e5b-31af-bb3c-5f3520ca1a13.roa (raw, json)
Hash identifier:          9lYogRX/Bb6AVFeh3stT+QvgcuJdXFkpMJ81vzrl684=
Subject key identifier:   98:D6:24:7A:00:D7:3D:7C:0D:8B:58:CF:47:55:E6:CF:BC:38:6C:DC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F637036A9F59ED6C16E780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/deedbcc2-1e5b-31af-bb3c-5f3520ca1a13.roa
Signing time:             Fri 12 Apr 2024 17:24:41 +0000
ROA not before:           Fri 12 Apr 2024 17:24:41 +0000
ROA not after:            Thu 11 Jul 2024 17:24:41 +0000
asID:                     12271
IP address blocks:        136.0.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:37:03:6a:9f:59:ed:6c:16:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:41 2024 GMT
            Not After : Jul 11 17:24:41 2024 GMT
        Subject: CN=3a010fee-77b2-4705-96f5-00cd5b84dd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:99:2d:67:c9:11:e8:bf:b4:d2:12:c4:69:
                    71:26:75:fd:15:fb:9c:da:a7:55:33:8a:83:68:c4:
                    c2:52:3d:62:fa:d8:90:f4:f9:67:35:d1:2a:34:ad:
                    79:bc:f2:78:5f:1d:dc:48:80:83:6c:55:be:08:01:
                    57:29:95:42:ca:7d:2d:2b:d9:f0:fc:0b:35:12:98:
                    be:21:20:f4:64:26:55:1d:87:b2:5f:9f:52:45:95:
                    d4:9c:e8:fe:7f:18:7b:07:b4:76:cf:be:4d:d0:b3:
                    90:4b:8d:26:20:09:8a:3d:14:c1:cf:4a:c7:6d:f3:
                    6e:17:9b:d4:61:2c:33:01:58:07:f7:ae:f8:9a:ef:
                    98:e1:dc:58:30:04:59:11:e4:6b:98:f9:c3:b0:c4:
                    36:f8:16:3f:f5:f9:75:c3:dc:75:44:76:0a:4c:f8:
                    d4:f2:ec:c0:a6:b9:d2:95:6b:ac:33:52:f7:04:48:
                    36:7e:ac:00:7b:ab:54:77:27:32:aa:60:03:0f:55:
                    7f:83:92:bb:81:3b:c1:bf:e1:d4:2e:d6:68:1f:ba:
                    23:eb:3d:8a:6a:24:aa:a4:cb:71:e4:b4:65:66:a8:
                    d5:be:c3:30:00:9b:33:ec:47:11:91:5c:90:fa:92:
                    bc:a1:1d:73:96:9b:a9:79:08:c2:0d:dd:74:31:6c:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:24:7A:00:D7:3D:7C:0D:8B:58:CF:47:55:E6:CF:BC:38:6C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/deedbcc2-1e5b-31af-bb3c-5f3520ca1a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:fd:b6:16:ea:80:c3:41:19:24:44:08:6f:bd:f6:5e:af:
         57:e4:a0:65:d5:4d:79:31:3e:58:fd:6b:06:66:82:32:c0:70:
         8e:19:8e:9e:a0:6d:ab:a9:de:f3:10:b6:23:1b:09:ae:0c:a9:
         b3:b4:f6:e7:f1:70:0e:10:4c:d7:70:17:f6:07:04:95:5c:27:
         ca:0c:9d:4d:17:0e:ab:e5:c3:8c:1d:df:3d:8e:3c:d0:6f:5f:
         46:d0:2a:4a:af:0f:59:12:16:77:64:d0:f7:0d:79:52:bc:cc:
         0a:04:97:5f:97:e9:87:1b:e6:75:43:97:d8:e4:b6:cc:5a:ac:
         29:55:ca:fa:55:06:52:7a:f8:97:98:91:b4:cb:2b:52:8c:5c:
         71:da:57:a8:fa:a6:48:eb:e1:63:61:74:95:fc:73:66:d6:51:
         cd:f4:dc:c3:ca:99:db:6f:4e:34:ef:01:79:29:4a:2a:e2:ad:
         d8:c7:99:a1:a1:86:6d:4b:59:85:18:87:bb:a5:a3:19:ca:4a:
         2d:c3:02:24:f0:73:f3:9b:61:25:2a:bb:6f:15:51:4c:3c:ab:
         9c:4c:da:d5:b8:c4:88:1a:5e:42:92:31:da:28:bf:f3:f0:4c:
         5f:25:a3:73:21:b9:7c:83:db:d0:4c:13:a4:4d:84:46:85:1a:
         38:06:2a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:57:28 2024 by rpki-client on console-fra.rpki-client.org