Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa
File:                     31cbf703-1c8e-324a-8b08-26fde1392750.roa (raw, json)
Hash identifier:          cgV3PdtsFu6VRLqY1cvMNUafo8iz6EXk7OU1BWxlDjY=
Subject key identifier:   1D:37:8E:9F:25:BB:B3:10:C7:16:1A:07:55:20:E4:F9:CE:7C:CB:FB
Certificate issuer:       /CN=3f36b13d-55d3-434f-95fc-91af494e0add
Certificate serial:       010D0C9F43285847EEA1283889910845E43E22E0
Authority key identifier: DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa
Signing time:             Tue 19 Nov 2024 14:47:03 +0000
ROA not before:           Tue 19 Nov 2024 14:47:03 +0000
ROA not after:            Mon 17 Feb 2025 14:47:03 +0000
asID:                     32225
IP address blocks:        136.228.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:a1:28:38:89:91:08:45:e4:3e:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f36b13d-55d3-434f-95fc-91af494e0add
        Validity
            Not Before: Nov 19 14:47:03 2024 GMT
            Not After : Feb 17 14:47:03 2025 GMT
        Subject: CN=138dd811-7495-46b1-8d61-aa17dc022bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:39:4d:ac:c4:61:b9:1f:92:83:6e:f8:25:
                    05:ab:08:b0:df:66:77:ff:8d:14:19:52:b6:e3:36:
                    00:0e:29:07:79:a1:87:fd:0c:d6:5d:30:08:ea:11:
                    34:2e:4e:27:27:eb:87:8f:f4:d2:ae:24:ad:90:f1:
                    50:d3:c3:13:30:da:a1:24:a8:10:a3:17:cd:7c:42:
                    7f:e0:9a:2d:b1:03:83:12:f8:a7:b1:72:02:f1:1e:
                    59:76:8c:cb:e7:a1:e8:25:9a:45:0f:49:4d:7b:68:
                    31:a2:67:ac:29:db:eb:e7:fd:aa:33:db:b4:91:6b:
                    3a:87:70:3e:f8:f9:33:38:c6:5f:b1:10:aa:d2:6b:
                    25:54:22:27:3e:c1:1a:bb:c8:25:cf:14:ac:be:82:
                    a9:09:58:6f:ae:e0:29:4f:cb:46:45:6d:7c:d3:e8:
                    53:41:33:3f:85:c2:a4:35:3a:5d:ea:60:90:11:c3:
                    97:10:c8:7a:54:bc:12:65:3b:98:b9:9b:b2:07:65:
                    ad:d1:2c:56:5c:41:89:12:01:92:6d:2b:d7:d8:cc:
                    df:cf:48:e8:f4:34:b0:62:9e:74:71:e1:60:48:b5:
                    17:70:22:71:b5:96:9a:d0:0c:1e:ec:97:69:79:13:
                    d4:fb:d4:f5:5c:83:f7:90:23:f5:9b:2f:79:bc:35:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:8E:9F:25:BB:B3:10:C7:16:1A:07:55:20:E4:F9:CE:7C:CB:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl

            X509v3 Authority Key Identifier:
                keyid:DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:6c:25:d0:d4:2f:cf:e5:b6:e2:a5:fd:ec:ce:e6:8b:ac:
         18:3a:4d:81:8b:b1:65:37:c0:59:1a:06:cd:dc:bd:94:0b:e1:
         ef:f5:fb:3c:b9:0b:dc:ad:9f:8f:a2:77:92:6f:4a:44:6a:2e:
         fe:14:40:76:73:a9:54:27:95:a0:29:92:62:15:22:27:14:c8:
         04:2e:2c:f8:6e:a3:fe:d0:ea:f9:3c:9c:00:b0:6e:5c:c8:1b:
         31:1f:1c:d6:6c:af:fb:2a:5b:ed:75:f7:e1:89:8b:48:34:0e:
         6c:44:a8:21:9e:fc:54:4b:dd:5b:c9:68:99:09:3e:1b:05:a0:
         69:fe:9e:6d:fc:c7:37:ed:cb:96:f3:29:37:62:d1:4e:0b:57:
         1b:41:52:f0:8d:b7:6d:f9:86:5d:96:aa:cf:ae:54:d4:76:1f:
         ab:31:59:fb:26:61:d9:d3:e8:1a:93:38:d9:bd:c6:b5:0e:b1:
         1a:93:94:67:b6:49:ca:c7:f2:72:56:63:93:05:c5:3c:10:a8:
         ad:b8:b8:3b:01:b6:89:bc:de:4d:c9:09:3e:03:48:15:27:f1:
         6a:4d:6c:79:de:47:43:c0:ad:04:2a:a1:87:e6:15:4b:fc:e1:
         59:b4:b8:2c:3a:4f:bd:8f:5f:58:d5:88:b0:b3:7a:56:a1:12:
         19:c0:f9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org