Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa6c8d8e-a9ae-3ca8-a1a6-64ba46551880.roa
File:                     fa6c8d8e-a9ae-3ca8-a1a6-64ba46551880.roa (raw, json)
Hash identifier:          OZ2kPAtUjfFhJueiv0NEA4ubOT8gRpmlw15ubN21IvM=
Subject key identifier:   B3:67:86:B6:FF:5F:0F:BB:0D:72:9B:C2:4D:E0:54:4B:1F:D1:BA:85
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F634F72C5CD4D5EBCD0D10
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa6c8d8e-a9ae-3ca8-a1a6-64ba46551880.roa
Signing time:             Fri 12 Apr 2024 17:24:40 +0000
ROA not before:           Fri 12 Apr 2024 17:24:40 +0000
ROA not after:            Thu 11 Jul 2024 17:24:40 +0000
asID:                     7922
IP address blocks:        136.0.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:34:f7:2c:5c:d4:d5:eb:cd:0d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:40 2024 GMT
            Not After : Jul 11 17:24:40 2024 GMT
        Subject: CN=ebcce9c8-636c-41c7-a98b-b13f9c4da953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:e1:13:b2:20:f2:bd:12:56:a0:f2:b5:1b:
                    e9:e4:4f:72:eb:a9:e1:b4:d0:8c:9e:8e:33:1c:4c:
                    71:1a:e1:61:d7:15:0c:a9:a7:2e:ba:a1:ea:4f:61:
                    c6:dd:02:ee:6a:66:0d:89:58:46:b5:8e:e3:7e:9e:
                    b0:e4:f9:00:65:a5:18:37:08:38:7e:81:0f:9c:f2:
                    9a:d2:b4:13:2b:4f:61:ff:ec:ca:98:07:0a:46:e9:
                    76:67:43:a3:2e:67:c1:ac:e7:9b:a6:6d:5f:df:cf:
                    f6:c3:67:4f:6c:aa:21:7e:9d:1f:99:8b:2a:2c:51:
                    fb:52:3f:00:95:eb:43:07:e4:cc:e0:66:1a:5c:49:
                    c3:c0:6b:78:22:6c:37:27:b3:d7:ed:e5:b9:8a:1d:
                    e4:42:6b:f0:a3:6b:84:c1:d9:03:78:67:e0:e9:75:
                    bd:44:eb:d4:f0:35:1d:af:f5:30:13:4c:40:68:02:
                    86:ac:f2:9e:06:d5:ed:db:9c:76:89:6a:67:e8:e6:
                    29:69:5c:88:35:53:c9:24:09:bd:8d:bb:2e:db:9e:
                    5f:ad:89:3b:a3:65:c5:76:51:89:d5:19:54:e2:1b:
                    b1:aa:6d:da:2c:a5:60:99:5e:f3:33:9d:ae:9b:a7:
                    d0:45:aa:f9:e0:f7:f9:8b:3b:12:2e:bb:c0:ed:24:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:67:86:B6:FF:5F:0F:BB:0D:72:9B:C2:4D:E0:54:4B:1F:D1:BA:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa6c8d8e-a9ae-3ca8-a1a6-64ba46551880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:48:0b:a7:3c:b7:d9:8a:06:dd:66:c1:b8:1b:6a:7f:58:1e:
         87:fc:25:cb:64:42:f6:00:cf:09:83:5b:b2:a8:15:28:79:82:
         76:aa:8f:e1:09:e3:e9:0f:45:b6:47:07:68:c6:ec:4a:0e:ad:
         47:d9:77:32:89:e2:38:10:f4:a4:9e:e5:38:5a:72:d0:44:7a:
         82:12:9f:aa:76:53:99:8b:92:99:e5:de:45:13:20:d7:2a:62:
         bf:6e:07:8a:47:6b:3b:ae:13:f2:e0:8c:ce:bd:8c:2d:10:3c:
         92:45:d2:06:0c:33:d5:d4:a0:47:fe:db:c5:42:a0:dd:6d:0f:
         57:00:9e:25:57:17:a0:bd:cb:2e:32:b1:d6:cc:68:68:92:70:
         09:95:e9:92:10:77:fd:d2:74:98:d0:a4:f3:51:57:05:35:00:
         4f:63:ba:13:c2:03:db:eb:2b:00:c3:49:9c:ed:8b:61:d3:93:
         c4:3c:ac:2a:d4:0d:15:e9:23:93:14:92:c3:d5:6b:8f:8c:0c:
         64:af:46:1a:a7:39:e4:10:28:06:91:c0:fc:a0:c5:c4:a2:55:
         35:a5:05:2c:fe:0d:94:4e:4a:2f:da:13:4b:1d:3c:cc:7f:94:
         69:cc:b5:cb:04:47:7f:83:12:5c:d2:03:58:94:f7:20:ac:81:
         d3:36:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:11:16 2024 by rpki-client on console-fra.rpki-client.org