Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/f9cd334d-ccdf-3ec8-a403-a3381226990d.roa
File:                     f9cd334d-ccdf-3ec8-a403-a3381226990d.roa (raw, json)
Hash identifier:          izH/s2tbUyem1NXkJWdwW4pVfHkCf6wQA59tnFr0ErY=
Subject key identifier:   AF:3E:E0:45:02:09:3D:75:34:1B:3E:18:3D:8F:DE:99:AB:E7:28:8C
Certificate issuer:       /CN=3f36b13d-55d3-434f-95fc-91af494e0add
Certificate serial:       010D0C9F43285847EEA193A6F9457D205B3B2780
Authority key identifier: DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/f9cd334d-ccdf-3ec8-a403-a3381226990d.roa
Signing time:             Tue 19 Nov 2024 14:47:54 +0000
ROA not before:           Tue 19 Nov 2024 14:47:54 +0000
ROA not after:            Mon 17 Feb 2025 14:47:54 +0000
asID:                     32225
IP address blocks:        136.228.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:a1:93:a6:f9:45:7d:20:5b:3b:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f36b13d-55d3-434f-95fc-91af494e0add
        Validity
            Not Before: Nov 19 14:47:54 2024 GMT
            Not After : Feb 17 14:47:54 2025 GMT
        Subject: CN=25557003-077d-464e-bb92-d94beda5079f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:1e:a7:39:38:5d:cf:bc:88:18:41:fd:8e:
                    07:55:4a:92:05:29:37:75:d9:6f:01:8d:ac:68:76:
                    8c:47:30:80:72:5a:5b:04:b7:23:aa:6f:c5:7a:9f:
                    59:45:b2:76:da:6b:c9:7f:91:8a:26:8e:4a:0e:12:
                    25:ca:34:d6:0b:1e:58:43:25:52:66:cf:82:12:ff:
                    a8:d8:24:17:c0:69:e2:98:eb:46:0b:de:c7:a0:c7:
                    86:d8:00:db:1f:d8:65:ea:4c:d6:d7:2d:58:5e:65:
                    29:f5:04:22:ca:79:79:17:6a:39:e8:c8:9b:d0:96:
                    5e:c7:51:c3:58:fb:0d:1d:a4:5d:82:a9:86:4f:ad:
                    cb:7b:d6:a1:af:b0:a3:58:91:21:50:9b:52:d1:d5:
                    9e:1e:44:05:29:65:f0:65:fe:98:55:0d:b9:18:12:
                    41:e1:b3:fd:9a:a5:c6:1f:0a:9f:46:c1:2c:f9:d7:
                    05:28:c9:f6:3f:3f:b7:6f:18:76:e3:ff:e5:cc:f3:
                    3d:65:97:3a:c6:c6:ca:f0:48:52:c8:cb:26:fc:47:
                    59:0d:91:5d:2b:0d:6a:e1:c7:b1:c2:a2:55:54:d9:
                    dd:f9:7e:cb:66:31:09:a7:08:7d:88:1f:c9:d2:1c:
                    94:d6:09:ec:57:4b:b1:eb:4d:b4:cb:5f:c4:ec:27:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3E:E0:45:02:09:3D:75:34:1B:3E:18:3D:8F:DE:99:AB:E7:28:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/f9cd334d-ccdf-3ec8-a403-a3381226990d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl

            X509v3 Authority Key Identifier:
                keyid:DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:4e:ea:42:2a:ca:2f:61:ac:02:68:7f:3e:a4:94:63:01:
         dd:45:2e:a9:9b:52:91:47:08:94:b8:1a:77:6d:a1:33:a4:63:
         7a:67:d8:7b:16:8b:7f:0d:4d:e7:62:5f:d8:e4:ea:f8:0e:23:
         03:44:97:f4:22:b7:1b:f1:9d:31:c8:55:13:3e:42:12:4f:29:
         ab:9d:c7:ee:04:cb:f5:c6:bf:6d:48:4d:45:22:72:4b:6e:e8:
         7f:73:07:b8:e3:98:55:63:4e:35:29:0a:5d:81:6f:04:05:7c:
         9b:a9:dc:4d:5d:2e:5f:ba:93:53:ef:cc:39:ba:5a:38:a4:1c:
         f9:f6:46:5a:98:58:df:e4:ce:a5:ff:e7:65:29:0a:41:90:17:
         e0:bc:89:a8:3b:51:3e:90:8a:59:ba:be:79:61:fd:10:71:05:
         32:6d:72:23:e0:ae:0a:c5:dc:e1:1d:c3:87:a7:2a:7b:f0:e9:
         2b:9b:4b:2b:4a:d5:c3:6c:78:d5:82:12:a9:9d:37:e8:cf:0b:
         e7:29:63:1c:c9:40:00:1f:1c:91:85:0c:d7:ce:39:05:a4:5b:
         a4:cf:0b:f7:7d:04:fe:0a:e6:10:d1:0b:83:76:78:6c:f9:04:
         b9:28:df:9a:ff:b2:84:81:8f:a9:e9:34:e1:08:25:6e:b0:e0:
         2e:41:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org