Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a683fcd7-0f78-3d40-9b36-768300e92db9.roa
File:                     a683fcd7-0f78-3d40-9b36-768300e92db9.roa (raw, json)
Hash identifier:          tW7D4AIOC2WmECaEvnL1Y2TnnwzS5JMhswCXXg5cEvQ=
Subject key identifier:   61:BF:91:13:33:1C:9A:8F:56:1B:70:7C:CA:55:C9:E7:F2:C8:73:DD
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F432858456A119529A1D7D7F44B682EE0
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a683fcd7-0f78-3d40-9b36-768300e92db9.roa
Signing time:             Tue 02 Apr 2024 17:37:11 +0000
ROA not before:           Tue 02 Apr 2024 17:37:11 +0000
ROA not after:            Mon 01 Jul 2024 17:37:11 +0000
asID:                     212669
IP address blocks:        136.175.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:11:95:29:a1:d7:d7:f4:4b:68:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Apr  2 17:37:11 2024 GMT
            Not After : Jul  1 17:37:11 2024 GMT
        Subject: CN=17a70e48-1729-4ee0-8f69-5a56c3c22a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:88:b7:56:13:5a:ef:98:f9:b4:98:e5:04:0f:
                    ae:2e:04:41:1e:8b:13:54:fd:05:f0:53:73:5c:10:
                    28:d7:c8:50:69:0b:36:a1:e7:10:f8:32:86:07:86:
                    ed:14:02:d2:fd:bc:63:61:b3:1c:54:21:dc:fe:f2:
                    15:d5:7a:4a:a8:64:ec:03:3d:77:b2:34:89:71:14:
                    70:d0:de:32:b6:21:74:fb:f4:ef:cf:45:33:6d:0d:
                    27:01:10:e5:4f:9f:7b:c5:0d:ad:6d:41:5f:1d:7e:
                    d0:6a:5d:b1:c2:75:bd:0f:cd:e9:4b:eb:e6:bd:e0:
                    2b:3f:50:c6:8c:92:ea:bd:0e:90:e6:76:cb:ce:a3:
                    24:b4:7f:c2:40:f6:02:4f:b3:da:d0:c1:d1:88:35:
                    67:2f:5a:b5:bc:9a:86:c7:ac:1d:e9:ad:83:40:60:
                    a9:57:1b:99:56:4e:74:a6:fa:b2:01:af:f8:23:60:
                    29:bc:c2:5c:31:ce:5d:eb:db:65:e3:a9:a0:46:6c:
                    32:24:46:6e:f5:c6:fa:bb:8a:92:99:07:5f:0a:a2:
                    96:5e:3a:0f:65:3a:0a:f4:53:19:88:07:45:7e:f5:
                    98:24:5f:9d:de:21:66:a6:5c:17:d4:09:7c:a5:47:
                    18:96:7f:2a:91:33:8f:ea:08:7e:e3:ae:5d:18:4d:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:91:13:33:1C:9A:8F:56:1B:70:7C:CA:55:C9:E7:F2:C8:73:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/a683fcd7-0f78-3d40-9b36-768300e92db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:fe:ef:9c:29:c5:29:14:28:68:7d:87:80:0e:aa:87:1e:
         8f:7a:a9:c7:c7:ab:0a:7c:30:51:2e:1c:f4:b4:83:2b:e0:de:
         cd:9b:06:2b:2e:cc:15:90:ca:12:a2:f2:e5:7a:f5:60:e4:42:
         02:70:ae:42:85:ae:f9:49:0e:2b:1a:df:29:6f:0e:d2:5d:0c:
         ad:af:ec:66:28:5c:64:a6:99:66:02:a8:35:1f:e5:4a:94:e7:
         d9:45:1a:92:cd:cf:2f:65:66:30:e2:65:48:e3:52:8d:92:23:
         f2:0b:4d:c8:1f:0b:26:7c:e2:55:fd:45:3f:6f:a5:72:fc:80:
         44:73:b1:0f:2e:aa:2e:a9:b8:8d:f4:c5:ba:ef:3f:52:64:f7:
         1e:38:ff:9c:48:4a:36:b7:6f:3d:a1:4d:58:7d:59:12:26:e0:
         55:6c:63:95:4e:ef:04:2c:15:a8:e6:a1:87:b4:1e:92:e4:91:
         e8:6e:b5:81:ce:0f:5e:56:60:8b:d9:cc:c2:de:8b:61:e7:21:
         3d:67:fd:0d:57:15:ca:db:ba:03:c2:22:78:3a:b9:fb:ac:87:
         36:22:79:94:d1:9e:db:fc:c0:8d:7c:5c:79:47:43:4b:70:5f:
         9b:e9:d7:67:30:ee:63:eb:76:3e:b3:36:41:c0:63:b8:64:2c:
         08:00:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 13:54:49 2024 by rpki-client on console-fra.rpki-client.org