Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/79d750cb-a210-3bcf-8c3f-c6c03cb7e60a.roa
File:                     79d750cb-a210-3bcf-8c3f-c6c03cb7e60a.roa (raw, json)
Hash identifier:          uiSxdzYEeRJ+ftlgxKYcqHrkDe6UFZqzjDJ0PuMzfhU=
Subject key identifier:   3C:D6:55:8E:DD:29:85:6C:94:2A:A7:20:D0:F3:6F:E6:B2:21:4D:87
Certificate issuer:       /CN=93c28a85-3c1d-4c8d-acda-3352597574a0
Certificate serial:       010D0C9F43285847CFD4AB9496B0D781D23AC900
Authority key identifier: D8:68:1D:93:17:DF:0D:69:D2:67:57:83:43:FF:51:AF:EA:71:C8:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/79d750cb-a210-3bcf-8c3f-c6c03cb7e60a.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     5786
IP address blocks:        136.145.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/93c28a85-3c1d-4c8d-acda-3352597574a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/93c28a85-3c1d-4c8d-acda-3352597574a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ab:94:96:b0:d7:81:d2:3a:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c28a85-3c1d-4c8d-acda-3352597574a0
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=0263b72f-5735-4ad0-87db-e2c09365f66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:42:ad:27:8f:5a:cb:f4:4f:79:81:d8:2d:
                    ef:b3:5a:0d:27:c2:7f:02:34:84:86:02:4a:93:43:
                    c5:36:17:94:ce:a2:d0:3d:c5:ce:68:09:04:df:12:
                    29:a2:c9:16:86:94:45:56:97:e7:5d:de:9f:8a:ba:
                    de:72:c9:59:ec:e4:2c:9e:8a:f9:6a:fc:51:64:6d:
                    fa:de:1e:2e:74:18:4c:2e:b1:44:d1:34:bc:44:f7:
                    74:17:b8:da:5c:c7:d4:78:c4:94:59:88:cb:32:ec:
                    48:d8:ad:0f:0d:c8:b5:aa:da:78:53:1d:8a:58:7b:
                    e9:29:71:68:77:85:13:b4:52:65:19:28:52:29:c5:
                    1e:36:8a:5d:44:01:ec:87:97:12:55:bd:e3:4f:e8:
                    97:46:e4:bb:e4:0e:ad:e3:31:40:0c:e7:4e:3a:f3:
                    4d:74:34:3f:f0:bb:cf:a8:41:e9:16:46:c4:79:0c:
                    f9:5f:c7:0c:76:ee:05:cf:83:d6:0f:30:38:a0:d2:
                    4c:d8:57:24:f8:6b:57:45:2e:db:7d:0e:79:c8:60:
                    7b:e5:a8:dc:49:34:e1:d2:9a:65:73:d9:ba:13:27:
                    52:b0:d7:92:08:ff:80:9b:f9:6f:e7:f3:cd:1a:ec:
                    e2:50:4f:58:64:b2:f1:61:1c:88:c0:55:f5:e7:0a:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D6:55:8E:DD:29:85:6C:94:2A:A7:20:D0:F3:6F:E6:B2:21:4D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/79d750cb-a210-3bcf-8c3f-c6c03cb7e60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0/93c28a85-3c1d-4c8d-acda-3352597574a0.crl

            X509v3 Authority Key Identifier:
                keyid:D8:68:1D:93:17:DF:0D:69:D2:67:57:83:43:FF:51:AF:EA:71:C8:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/93c28a85-3c1d-4c8d-acda-3352597574a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:f7:a2:54:d0:be:15:a9:dc:5c:e2:6a:b7:a1:ef:f7:be:
         cc:5b:23:25:48:66:af:c6:4f:b6:37:f7:d2:ac:6b:76:e5:c5:
         c0:45:a4:de:08:c9:75:ee:58:d6:af:50:f4:65:5b:dc:99:f8:
         e5:d3:35:ac:1e:1d:7f:91:28:6e:9b:9a:25:44:26:6f:24:fb:
         22:46:e0:71:84:42:23:b6:40:2e:2c:43:1c:41:eb:ed:17:44:
         fe:5e:57:18:c7:81:cb:1c:7a:03:bd:42:ed:7b:23:1a:db:68:
         b5:29:19:10:64:36:3f:21:e5:a4:19:ca:78:6a:82:f8:07:25:
         21:9a:ed:90:30:89:07:76:1b:3a:5f:d3:3d:84:5c:da:85:b0:
         95:12:c1:ce:c1:0f:22:16:b2:9a:60:30:b5:64:ff:3a:ea:12:
         95:d7:ef:d8:52:49:d4:c2:48:4b:f8:50:47:a1:f7:5c:dc:8a:
         e5:4b:12:0b:9f:2c:8d:3e:01:b3:f7:cc:e4:67:d5:f4:7e:d0:
         40:1e:df:5b:8e:90:00:af:6c:c6:03:a6:10:57:87:49:49:7b:
         19:1f:4b:13:ff:bc:e7:e9:4d:1b:1e:83:60:34:49:38:58:00:
         68:11:d3:c0:83:e7:b9:ba:bd:06:63:dc:8f:11:e8:fc:ee:a5:
         a4:ac:fb:29
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfP1KuUlrDXgdI6yQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTNjMjhhODUtM2MxZC00YzhkLWFjZGEtMzM1MjU5NzU3
NGEwMB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk
MDI2M2I3MmYtNTczNS00YWQwLTg3ZGItZTJjMDkzNjVmNjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqxCrSePWsv0T3mB2C3vs1oNJ8J/AjSEhgJK
k0PFNheUzqLQPcXOaAkE3xIposkWhpRFVpfnXd6firrecslZ7OQsnor5avxRZG36
3h4udBhMLrFE0TS8RPd0F7jaXMfUeMSUWYjLMuxI2K0PDci1qtp4Ux2KWHvpKXFo
d4UTtFJlGShSKcUeNopdRAHsh5cSVb3jT+iXRuS75A6t4zFADOdOOvNNdDQ/8LvP
qEHpFkbEeQz5X8cMdu4Fz4PWDzA4oNJM2Fck+GtXRS7bfQ55yGB75ajcSTTh0ppl
c9m6EydSsNeSCP+Am/lv5/PNGuziUE9YZLLxYRyIwFX15woUWwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDzWVY7dKYVslCqnINDzb+ayIU2HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85M2My
OGE4NS0zYzFkLTRjOGQtYWNkYS0zMzUyNTk3NTc0YTAvNzlkNzUwY2ItYTIxMC0z
YmNmLThjM2YtYzZjMDNjYjdlNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTNjMjhhODUtM2MxZC00YzhkLWFj
ZGEtMzM1MjU5NzU3NGEwLzkzYzI4YTg1LTNjMWQtNGM4ZC1hY2RhLTMzNTI1OTc1
NzRhMC5jcmwwHwYDVR0jBBgwFoAU2GgdkxffDWnSZ1eDQ/9Rr+pxyNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85M2MyOGE4NS0zYzFkLTRjOGQtYWNkYS0zMzUy
NTk3NTc0YTAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiJEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAN/n3olTQvhWp3Fziareh7/e+zFsjJUhmr8ZPtjf30qxrduXFwEWk3gjJ
de5Y1q9Q9GVb3Jn45dM1rB4df5EobpuaJUQmbyT7IkbgcYRCI7ZALixDHEHr7RdE
/l5XGMeByxx6A71C7XsjGttotSkZEGQ2PyHlpBnKeGqC+AclIZrtkDCJB3YbOl/T
PYRc2oWwlRLBzsEPIhaymmAwtWT/OuoSldfv2FJJ1MJIS/hQR6H3XNyK5UsSC58s
jT4Bs/fM5GfV9H7QQB7fW46QAK9sxgOmEFeHSUl7GR9LE/+85+lNGx6DYDRJOFgA
aBHTwIPnubq9BmPcjxHo/O6lpKz7KQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org