Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4f05f23-a5a9-3434-9812-19103f5b19f5.roa
File:                     e4f05f23-a5a9-3434-9812-19103f5b19f5.roa (raw, json)
Hash identifier:          SDMo9lofnav27xONBZMYdLMyRtB4aAfpx0/+9S8hBrA=
Subject key identifier:   FE:1E:66:66:DC:C8:97:2A:CA:DC:E3:8E:B7:E1:24:61:A6:80:F9:22
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584792C8A973BBD7FE3EAC260180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4f05f23-a5a9-3434-9812-19103f5b19f5.roa
Signing time:             Thu 17 Oct 2024 17:12:17 +0000
ROA not before:           Thu 17 Oct 2024 17:12:17 +0000
ROA not after:            Wed 15 Jan 2025 18:12:17 +0000
asID:                     9009
IP address blocks:        136.0.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:c8:a9:73:bb:d7:fe:3e:ac:26:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 17 17:12:17 2024 GMT
            Not After : Jan 15 18:12:17 2025 GMT
        Subject: CN=ab72e085-6379-4c64-9bb7-e0be1062335b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:b9:1d:7b:5d:38:0d:63:06:08:86:ea:fa:
                    6e:54:e8:a7:3f:e7:31:13:19:15:a7:22:24:c6:6c:
                    3e:e1:ee:fc:f1:46:d5:47:6e:ae:e9:5b:7b:6f:34:
                    89:6b:a3:26:f3:a8:3d:b1:34:9b:1b:d5:b2:e4:e1:
                    8c:ca:2c:c2:c8:90:5a:f1:f1:25:c3:d5:2a:96:b8:
                    fa:d7:ee:a1:f3:60:4a:89:90:32:20:c6:27:0e:35:
                    3c:d2:00:3c:3e:84:45:d2:ad:39:8a:1a:13:b1:09:
                    1d:13:ef:cd:80:e2:68:b1:9e:20:ee:86:ab:fe:07:
                    da:f5:cd:01:75:59:6a:60:1a:55:9d:de:84:ef:dd:
                    35:09:d9:3b:a3:0b:74:a8:d6:c4:5f:be:14:f3:24:
                    91:0f:4d:b5:fd:00:dd:c2:a3:58:a3:69:0a:e8:54:
                    29:dd:b1:82:29:20:28:9c:52:4f:95:55:87:c4:bd:
                    9b:50:66:9e:79:db:b7:04:e6:1a:15:f9:4a:ea:7f:
                    7a:0a:7d:12:a4:82:5b:a4:4d:77:8a:20:52:5f:bb:
                    72:d9:1a:39:3b:e2:c7:ed:29:36:c0:3b:20:8b:43:
                    36:46:ff:4d:71:5e:b6:04:4b:54:ed:b7:a8:09:54:
                    64:36:cf:48:1c:6f:cc:b2:50:5f:f3:0e:0e:5b:87:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1E:66:66:DC:C8:97:2A:CA:DC:E3:8E:B7:E1:24:61:A6:80:F9:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4f05f23-a5a9-3434-9812-19103f5b19f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d8:9f:b2:47:6b:8e:49:b6:66:cf:ee:a7:55:d7:cc:4d:af:
         6f:ef:46:cc:db:94:a2:90:44:89:04:f5:a8:12:aa:df:b8:42:
         09:b0:22:35:14:53:bc:00:cf:ae:c7:a8:f8:88:00:f9:b9:f9:
         71:76:21:77:75:e3:a9:e2:65:d8:d1:53:ff:05:77:52:80:ac:
         c7:eb:7b:04:04:6b:79:78:d0:05:73:a1:30:63:46:9f:0c:85:
         ef:1a:d0:39:ef:e4:16:65:16:89:30:89:71:9d:8f:67:cf:d6:
         53:f0:f7:0a:a3:fa:e8:4e:1e:ab:f9:43:43:97:ea:45:bc:7c:
         03:36:1b:27:10:0b:ab:5f:57:e0:92:60:3c:c2:9e:10:87:99:
         bc:a1:9b:49:83:8c:5c:8e:ef:87:f8:2f:07:82:f0:cc:80:b1:
         f7:2e:27:ae:80:46:89:13:2f:38:31:f4:03:fa:de:5d:5d:21:
         8b:08:7d:c5:82:dd:b1:f4:44:f1:71:c7:01:4b:44:57:25:4d:
         38:3b:38:07:47:ca:16:0e:52:df:32:26:99:f6:ad:dd:b7:41:
         e6:19:2b:ec:08:9a:0c:2d:c8:e2:ef:fd:99:e8:5b:34:f9:ce:
         03:f8:6f:be:4e:d7:79:04:84:93:21:67:17:54:b2:b4:aa:22:
         ed:b9:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:58 2024 by rpki-client on console-fra.rpki-client.org