Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3d176fe3-5cc0-31db-ac0a-835672685d6c.roa
File:                     3d176fe3-5cc0-31db-ac0a-835672685d6c.roa (raw, json)
Hash identifier:          D5CUfde2JjYRXq+3xIJ6jCuIUJejGHx8QjbW8OYepM0=
Subject key identifier:   06:23:8A:22:94:22:1C:0C:E2:75:AB:02:89:92:3C:68:FC:C7:77:7D
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584799466F45EF3BC6A523CEE280
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3d176fe3-5cc0-31db-ac0a-835672685d6c.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     16509
IP address blocks:        136.245.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:6f:45:ef:3b:c6:a5:23:ce:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=96267ac5-94f2-47e9-a1e4-8963962a60eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:45:f0:73:e0:75:74:b6:5c:f2:f8:c4:e6:
                    3c:12:d1:82:49:fb:69:28:79:73:a6:dd:c6:08:49:
                    e3:bd:04:37:f5:85:01:e7:cd:89:1d:22:55:46:de:
                    e4:f5:bd:3f:37:fc:f1:72:9e:12:2c:10:a7:6a:5e:
                    45:27:df:80:c3:4d:56:01:06:eb:cd:8c:09:44:b2:
                    8a:fb:b6:59:22:36:30:f3:c1:c8:18:a8:3f:3e:8a:
                    48:61:50:c8:01:e5:56:b6:b4:b7:26:aa:3e:99:df:
                    2c:86:d2:43:09:5e:67:8a:2c:2a:ac:a6:1d:30:1c:
                    17:80:fd:6a:2c:b8:9f:49:cb:09:83:2a:bf:d9:ae:
                    fc:65:d5:60:34:5a:dc:b6:af:d6:8e:53:78:36:5c:
                    a2:85:c8:ff:27:42:4c:33:8d:ca:b1:cf:2a:14:9e:
                    96:46:c5:4d:6e:08:b4:05:82:66:da:98:79:e6:97:
                    6b:0d:de:b3:38:7d:3c:3b:cc:84:fe:70:d5:91:8c:
                    99:98:2d:3d:9e:fb:4e:4d:55:d7:44:24:19:59:4e:
                    01:a0:39:3f:ec:63:8e:4b:72:d4:5f:6d:5b:9b:57:
                    68:43:26:3b:02:90:52:14:01:14:b9:92:96:ca:42:
                    8e:f9:48:30:15:db:80:93:79:8f:c7:75:d3:92:13:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:23:8A:22:94:22:1C:0C:E2:75:AB:02:89:92:3C:68:FC:C7:77:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3d176fe3-5cc0-31db-ac0a-835672685d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:92:69:43:bc:3d:6e:25:50:bd:ab:6d:22:fb:f9:16:85:81:
         0f:12:8d:00:72:bd:81:61:a8:31:b5:5e:68:06:1c:12:b7:59:
         f2:1d:1b:ab:9d:0f:45:a4:99:e4:8c:87:28:b9:50:3a:56:68:
         cf:46:45:bd:be:0d:d8:17:9a:43:08:4d:40:e5:ab:1f:25:7b:
         46:17:02:c5:81:38:df:01:67:25:cd:7c:8f:c4:2d:4f:06:ec:
         02:77:70:04:a3:d2:cf:1c:12:c5:f8:2c:f5:ea:10:d3:1a:e0:
         0a:01:2f:99:55:b4:f8:d4:2d:d2:8d:65:58:3c:fb:4d:d9:ae:
         41:a4:35:cc:3f:9f:46:30:c0:03:ef:c5:dc:83:2d:be:d1:c3:
         3c:77:26:cd:08:3e:73:77:2a:ad:ca:1b:02:50:ed:54:dd:d8:
         dc:f9:84:88:78:5a:9e:69:ae:b1:6e:6a:ea:7f:18:40:61:5e:
         6c:c0:fb:2b:92:15:da:3e:25:4e:86:63:10:38:f8:59:4c:27:
         f1:db:10:d2:1d:25:54:99:d9:f6:ae:03:77:fc:3b:2a:05:96:
         d1:01:07:95:f8:c8:67:09:eb:e8:49:3f:c6:f6:99:49:51:d6:
         b8:bf:ef:82:cd:a8:aa:9d:fc:b2:ee:2f:99:05:de:46:d1:83:
         2d:da:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:25 2024 by rpki-client on console-ams.rpki-client.org