Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/8983653f-7534-3c16-93d0-78e539d747fd.roa
File:                     8983653f-7534-3c16-93d0-78e539d747fd.roa (raw, json)
Hash identifier:          37iKalEWIS4tlCZvMqu5JLmB5VGe4dkbRn5j9QqJv3Y=
Subject key identifier:   2A:80:0A:2D:4C:E3:98:F3:DC:A7:3D:A3:17:9C:7F:E3:99:5A:9A:24
Certificate issuer:       /CN=bcc3c2b1-4073-40d5-bff6-495413d86664
Certificate serial:       010D0C9F43285847362B4C0699D7DDFD11196700
Authority key identifier: 3F:0C:46:74:7A:1F:18:39:17:85:08:8E:FA:90:37:20:35:1F:07:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/8983653f-7534-3c16-93d0-78e539d747fd.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     54746
IP address blocks:        136.175.128.0/22 maxlen: 22
                          136.175.128.0/24 maxlen: 24
                          136.175.129.0/24 maxlen: 24
                          136.175.130.0/24 maxlen: 24
                          136.175.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/bcc3c2b1-4073-40d5-bff6-495413d86664.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/bcc3c2b1-4073-40d5-bff6-495413d86664.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:4c:06:99:d7:dd:fd:11:19:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc3c2b1-4073-40d5-bff6-495413d86664
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=5cbc0ba8-21f2-4fb5-b2af-52b4eff1ba85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:cf:b7:3b:1f:3f:cc:32:e2:a4:3a:03:8e:
                    56:60:54:24:9f:64:b0:6a:40:11:b8:66:de:b7:4a:
                    b8:55:8c:30:41:61:1b:da:cc:d5:3f:71:89:44:f1:
                    8f:c1:e8:87:26:b4:be:02:c3:4e:c7:3a:d6:94:c7:
                    d7:86:42:07:dd:e1:47:8b:a7:93:71:5a:69:62:15:
                    66:e3:3d:75:d7:84:ea:2d:5b:c3:85:6e:87:e3:8d:
                    09:1a:cb:a6:3c:5d:3d:ac:8c:62:42:2f:2c:4e:ec:
                    53:1c:22:75:5d:e9:80:36:aa:8e:30:46:99:21:d3:
                    a3:e9:bc:b1:65:b4:51:d0:10:ce:b8:c1:43:08:71:
                    d6:50:80:df:57:c4:36:b5:26:4b:7f:3a:f0:1e:49:
                    bf:03:c9:e3:4a:c1:ef:b3:70:de:11:e8:7e:3e:d3:
                    e7:b2:1a:0f:4c:77:6b:c7:6a:3f:7a:ee:a0:0a:b1:
                    04:8d:28:20:ca:c9:cb:2c:b7:9b:af:ed:49:00:be:
                    48:e6:22:d2:35:b5:86:87:9f:a7:e4:b7:cb:94:ad:
                    c8:cd:2a:39:02:c9:67:fb:1b:bf:f5:46:b5:b2:73:
                    ee:c4:e2:1d:5d:c3:64:43:52:e9:cc:24:f3:26:3d:
                    86:50:37:ba:2d:4d:d1:f6:f0:f5:9f:74:d8:a7:f0:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:80:0A:2D:4C:E3:98:F3:DC:A7:3D:A3:17:9C:7F:E3:99:5A:9A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/8983653f-7534-3c16-93d0-78e539d747fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/bcc3c2b1-4073-40d5-bff6-495413d86664.crl

            X509v3 Authority Key Identifier:
                keyid:3F:0C:46:74:7A:1F:18:39:17:85:08:8E:FA:90:37:20:35:1F:07:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:87:a3:23:16:91:d2:10:87:16:26:88:5e:44:91:53:ac:a5:
         fa:c7:55:ff:a1:ae:a6:38:e8:ac:bf:d1:3a:aa:c7:5a:ef:6f:
         fe:9f:a4:da:b6:bf:6d:56:3f:5f:81:39:d9:7a:92:68:9c:20:
         68:2e:70:60:32:f2:16:c7:00:44:89:c6:f3:71:88:b3:3b:c0:
         2d:04:ef:b0:b4:90:34:fc:6b:8b:a1:ac:66:38:30:dc:70:6d:
         ec:8b:e6:05:84:4a:08:6c:9a:b2:5e:92:f4:9b:03:0f:02:9c:
         db:8f:9c:12:36:cc:6b:c7:83:24:1a:ac:88:06:d0:d8:15:c8:
         60:4f:0c:0e:dd:96:e4:79:6f:0c:e9:66:0f:e8:76:61:cf:79:
         f1:53:28:51:3e:29:ef:b0:d0:60:57:dc:0a:72:63:62:dc:1f:
         4c:12:ba:bb:4d:0e:21:be:69:29:74:33:b7:1f:7e:fc:fe:6d:
         a5:b5:a7:b6:20:d7:f7:56:fe:d2:f7:02:de:ee:fb:61:4c:18:
         b6:d1:74:40:c8:f7:51:56:ec:57:6d:d4:55:fe:f4:0c:60:21:
         ef:e8:36:1e:a2:74:16:4e:64:8e:6b:fa:44:1d:44:28:76:35:
         f2:98:9a:2d:69:28:96:73:50:fb:30:33:d5:c6:5d:a6:4f:bf:
         f4:dd:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:03 2024 by rpki-client on console-ams.rpki-client.org