Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/45269fb1-032b-3c72-98d5-215161171331.roa
File:                     45269fb1-032b-3c72-98d5-215161171331.roa (raw, json)
Hash identifier:          ktqJDlhKxepeZKkmnBeZPU4xjS17OzcOpy4Ll1UGaG0=
Subject key identifier:   03:B2:35:A9:A4:94:62:A5:27:8D:00:F1:A8:38:40:8C:73:20:FD:2B
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858471345A2833879F87A63844400
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/45269fb1-032b-3c72-98d5-215161171331.roa
Signing time:             Mon 02 Sep 2024 01:00:31 +0000
ROA not before:           Mon 02 Sep 2024 01:00:31 +0000
ROA not after:            Sun 01 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        136.245.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:13:45:a2:83:38:79:f8:7a:63:84:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  2 01:00:31 2024 GMT
            Not After : Dec  1 02:00:31 2024 GMT
        Subject: CN=ba7e3440-7c3d-4168-b826-bf0953dce4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:06:65:9d:29:42:73:13:89:a7:4c:dc:60:
                    f2:a2:74:de:84:15:5e:b2:ad:fe:e4:8f:d0:ea:27:
                    ee:f4:7d:f0:24:6d:3a:a9:50:d9:d5:6c:57:83:b8:
                    02:2b:e2:eb:d0:60:8c:6c:73:31:6d:6d:fa:df:84:
                    ab:55:b4:df:1f:80:17:da:0b:4b:cf:9d:d1:08:55:
                    1d:eb:57:91:f7:28:82:ca:ac:4e:e3:28:ab:19:75:
                    81:74:47:c7:ed:10:21:80:d8:c1:a3:3d:e3:82:ed:
                    17:7e:58:43:73:be:ee:8b:6a:73:e7:99:80:df:e4:
                    29:09:a2:8d:16:4e:dd:5a:cb:8f:b6:fd:e4:a6:69:
                    70:4e:57:37:e2:5f:2e:fc:ca:b9:19:41:40:cc:ec:
                    fd:f4:09:ae:0f:f4:65:c4:4f:a5:a2:ac:f9:a9:bf:
                    02:eb:67:5f:cf:a7:fb:1a:96:45:60:5d:eb:22:12:
                    00:34:52:6d:88:d1:72:c9:d7:f5:a2:bf:b5:0f:62:
                    94:f3:91:3e:9e:b8:0d:df:d3:22:ed:9e:3b:10:6f:
                    4f:1c:13:bd:49:9b:fd:2d:69:3a:b6:3f:8b:64:2d:
                    85:49:95:d0:83:6a:e7:81:a4:65:ae:61:51:2d:0b:
                    89:5c:4d:d3:f4:d0:d4:a2:cb:d3:f4:93:5f:cb:d0:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B2:35:A9:A4:94:62:A5:27:8D:00:F1:A8:38:40:8C:73:20:FD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/45269fb1-032b-3c72-98d5-215161171331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:13:74:c3:53:de:be:e5:b6:5c:6d:dd:01:62:45:fb:3f:d4:
         91:dd:31:9f:d6:51:da:b1:e4:fb:51:f2:e3:ca:9b:48:40:b9:
         fc:94:c9:20:a8:af:60:fd:15:9f:3f:1c:f4:8c:8f:09:cd:f2:
         d0:dd:49:a7:2b:9a:78:ad:3b:79:5c:e4:1f:f4:e8:7c:26:cb:
         68:eb:80:c8:cc:84:ad:06:72:7a:52:25:61:d1:75:76:c2:5e:
         ee:cc:1f:a4:99:14:21:8f:86:d9:cb:de:24:1e:ee:1d:2e:9e:
         a0:64:17:b6:77:02:bd:ff:76:6f:94:c2:9d:64:82:89:93:57:
         44:d5:06:d6:f7:33:ce:e9:ef:f4:fd:45:70:75:08:79:33:a5:
         2d:e8:d4:c1:2e:d7:1d:36:0e:cd:0b:75:fa:90:33:50:f6:e1:
         7d:b9:28:c6:84:06:62:27:8b:c0:02:fb:66:4c:34:43:81:22:
         16:7d:13:9f:d0:c0:3a:10:6a:7e:8b:4a:3f:77:37:39:04:2f:
         a9:39:2c:af:d4:73:93:52:86:b4:2a:5d:b3:08:31:10:58:b9:
         4d:b5:73:46:19:e7:44:d7:13:17:89:90:4e:c8:1a:05:5e:27:
         61:cb:a9:4d:09:62:0a:28:8c:ea:26:e0:4f:cc:f3:a2:80:fe:
         e1:62:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:42 2024 by rpki-client on console-fra.rpki-client.org