Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/1c546b48-3aa0-3de4-aa7b-6482aa00a219.roa
File:                     1c546b48-3aa0-3de4-aa7b-6482aa00a219.roa (raw, json)
Hash identifier:          b5aeE1bGpfa6jtd+FKcugUnNXntwo0V5R7G9ROKu/tM=
Subject key identifier:   C0:8B:F3:00:F6:99:0A:64:72:9C:C1:D1:32:3B:88:EE:A3:AB:04:C1
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F432858457A487B4C8D925653B4858DE0
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/1c546b48-3aa0-3de4-aa7b-6482aa00a219.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     400329
IP address blocks:        136.175.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:7b:4c:8d:92:56:53:b4:85:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=a927f4e1-9b64-4bdd-a914-b9dca0f797aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:24:5e:20:ff:d0:3e:a1:ed:dc:c2:34:fc:
                    bf:51:a7:ad:55:46:8b:4f:2d:3b:27:4b:10:66:ee:
                    47:64:9a:d3:ad:98:c5:4f:48:e9:ea:f4:f3:63:e0:
                    00:0b:c3:45:d8:c6:a5:ca:95:16:ff:a2:c6:04:18:
                    0a:60:2a:c0:02:ff:32:2d:3c:29:0f:6f:f7:e5:0c:
                    ae:ea:b1:d8:89:a9:f9:fa:21:7c:13:5b:69:d2:80:
                    31:02:65:5f:11:81:05:dd:5d:e6:23:86:3e:c5:fa:
                    f6:02:66:2e:62:2b:ea:48:05:53:68:cb:e9:61:03:
                    95:80:6d:fd:58:6e:fd:50:52:47:95:e4:fe:ae:db:
                    c4:e4:3a:d5:af:b8:3f:9a:84:60:fd:9f:27:ee:fe:
                    0f:07:ee:25:4f:9b:ca:ea:24:35:65:f7:d5:0a:1c:
                    d4:b0:4b:28:7f:33:22:e9:f0:33:8c:4a:d5:88:6d:
                    ab:df:e3:40:36:6e:3d:f8:df:95:95:4d:1a:14:b2:
                    cf:f4:20:f0:b7:83:15:6c:15:04:d2:d4:b3:c7:e4:
                    c1:c9:65:ce:f8:5d:8e:d9:75:45:8e:79:47:64:b5:
                    41:e9:5c:99:3f:1d:cd:3a:91:ec:dd:08:e0:43:60:
                    78:05:df:21:0b:12:5f:9d:f4:92:7f:d3:f9:8d:51:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8B:F3:00:F6:99:0A:64:72:9C:C1:D1:32:3B:88:EE:A3:AB:04:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/1c546b48-3aa0-3de4-aa7b-6482aa00a219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:92:5e:87:c1:13:8f:78:df:37:f5:72:b5:f6:84:0b:01:2a:
         e3:1d:98:3e:14:34:f0:95:24:b8:4d:94:88:65:34:71:3a:3e:
         b1:2b:1e:09:8e:c5:c2:e8:b8:19:f2:7e:ce:b6:bb:27:18:40:
         7f:7b:26:21:a8:d7:5f:79:d4:f0:a3:08:d8:b7:99:43:9c:ed:
         4e:c9:9a:11:08:cc:6d:0c:d6:9c:26:19:83:2f:c8:6d:1f:ae:
         7f:7b:c2:25:16:d4:ea:5e:8a:79:7c:07:46:4a:b0:b6:b9:55:
         0d:f1:90:9a:0c:de:c3:4e:0f:dd:a5:dd:e4:30:8b:c5:b7:6a:
         41:2c:a5:5e:8f:41:47:aa:c1:e9:8b:50:ec:92:42:28:8e:2d:
         a0:3e:46:9a:17:d6:12:44:19:84:94:b5:63:39:46:a7:3d:af:
         ee:19:ff:e5:6e:25:59:a1:cc:0a:fa:f3:cd:ad:8c:c0:16:74:
         84:77:a5:0e:32:00:e6:45:3f:b6:77:d1:54:14:ed:6c:8c:e7:
         8b:0b:7b:dc:6e:46:ac:4b:ac:7e:24:69:79:96:e5:1c:55:8c:
         f3:4a:22:1e:f3:a3:90:00:22:82:fa:4c:7c:3b:ca:c6:ab:02:
         0b:ce:94:22:f2:2c:34:47:d4:44:56:35:3c:e7:3c:8c:16:7b:
         f2:63:13:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:41 2024 by rpki-client on console-ams.rpki-client.org