Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/de0ff785-dd97-30be-81b9-8447796afc11.roa
File:                     de0ff785-dd97-30be-81b9-8447796afc11.roa (raw, json)
Hash identifier:          dZU98husa8mB4CyAk8XelmBn/DNBIY2tG3r8PYlYQ6k=
Subject key identifier:   E5:B7:8B:A5:10:F5:BF:77:EF:75:9A:C9:F2:23:C2:89:A2:19:B8:28
Certificate issuer:       /CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
Certificate serial:       010D0C9F43285845963340FE3D4629331AD21680
Authority key identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/de0ff785-dd97-30be-81b9-8447796afc11.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     25956
IP address blocks:        136.175.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:40:fe:3d:46:29:33:1a:d2:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=784afbf3-4d42-4480-b6c1-c09119741cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:6f:41:c9:7b:29:9a:d6:6f:84:6f:02:ff:
                    7e:d1:fd:72:2c:91:01:43:06:75:80:c9:47:fd:02:
                    86:3c:e8:d4:de:39:17:13:db:51:b6:b6:d5:10:a7:
                    f7:c0:12:fa:83:de:33:26:ba:83:e4:c3:f4:e4:43:
                    fa:69:15:d7:b2:90:d2:e2:9f:3b:e5:1d:50:55:f6:
                    d4:c2:57:aa:74:c2:15:fe:78:cc:a4:cc:f4:f1:0e:
                    de:b6:5d:5b:b7:f0:c4:08:a0:a4:f2:b4:b4:82:8d:
                    75:e8:9b:5c:56:2e:fc:f0:6f:67:d4:8c:0a:8c:28:
                    f6:5d:60:f1:36:b5:96:5b:81:da:64:eb:26:9a:fc:
                    79:3c:79:c0:5e:98:ea:bb:d2:a5:6b:51:14:81:2e:
                    72:64:cf:2f:ff:62:7a:ee:20:31:cc:14:12:e9:be:
                    80:d8:7c:7e:f1:e8:64:50:f0:9c:41:39:1c:46:eb:
                    47:5f:9a:88:ec:9a:99:53:b3:17:95:7a:fd:5e:9b:
                    81:99:38:d7:7f:62:58:cb:d7:cf:55:09:ad:ab:e9:
                    95:6a:53:fc:3f:d9:e3:59:6f:8d:49:6c:9d:23:57:
                    06:ef:e6:b3:77:60:3b:d0:0d:95:38:4a:d4:bc:47:
                    5d:6c:f3:29:01:d7:df:e1:e9:72:4a:5b:62:d6:a5:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B7:8B:A5:10:F5:BF:77:EF:75:9A:C9:F2:23:C2:89:A2:19:B8:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/de0ff785-dd97-30be-81b9-8447796afc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl

            X509v3 Authority Key Identifier:
                keyid:A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:93:14:09:47:91:da:27:7d:1a:42:a5:f0:8c:77:d1:90:ec:
         db:3e:d6:f3:e5:3c:74:14:be:7c:d1:5a:f6:33:48:77:24:a8:
         15:2c:5f:97:bc:04:dd:5c:54:ce:f8:c2:95:93:d4:dc:2d:41:
         0e:49:31:43:0e:25:6e:8c:82:0c:bd:de:b5:18:49:21:45:11:
         24:3a:4a:80:5b:d1:68:e6:ee:f2:cf:1d:5b:16:46:9c:b7:4e:
         8a:f0:6d:54:d7:86:8f:e1:2f:47:dc:12:4f:8f:6c:cc:4f:45:
         90:90:09:d8:b8:a0:9e:b8:09:fd:8a:29:20:6a:be:6d:f1:25:
         04:2a:85:65:12:24:65:87:d3:c1:04:87:b3:36:d7:a5:34:55:
         25:02:bb:80:2a:be:d5:36:43:9b:34:9f:e3:14:8c:b7:14:10:
         2a:f9:58:41:8f:59:f4:aa:27:91:ed:17:a8:79:d9:5e:15:6f:
         54:d1:c3:06:3c:0b:3d:d9:6d:74:72:3d:0c:76:d7:01:7e:ca:
         48:d5:24:e0:76:f0:62:e0:7f:8b:a2:df:2a:d2:07:4a:5f:3e:
         ab:e3:c4:d5:18:14:da:af:ef:52:4b:d6:9a:b0:67:c2:32:ac:
         98:3a:7f:11:40:ed:e5:a4:aa:3f:6f:a7:ca:df:bb:e7:9d:ef:
         2c:18:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:44 2024 by rpki-client on console-fra.rpki-client.org