Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sTjQG_Ka9lHr9dL1OOmZ4SI8UJQ.roa
File:                     sTjQG_Ka9lHr9dL1OOmZ4SI8UJQ.roa (raw, json)
Hash identifier:          G3FvE9Ii+Jogr+tFaOYPMjr3RK+sHsvHbq4h2QJ7jNc=
Subject key identifier:   B1:38:D0:1B:F2:9A:F6:51:EB:F5:D2:F5:38:E9:99:E1:22:3C:50:94
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       01957F539A54B3E6608668D77AB81A82B23C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sTjQG_Ka9lHr9dL1OOmZ4SI8UJQ.roa
Signing time:             Mon 10 Mar 2025 09:12:20 +0000
ROA not before:           Mon 10 Mar 2025 09:12:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        37.202.205.0/24 maxlen: 24
                          37.202.210.0/24 maxlen: 24
                          37.202.212.0/23 maxlen: 24
                          37.202.223.0/24 maxlen: 24
                          151.240.0.0/24 maxlen: 24
                          151.240.1.0/24 maxlen: 24
                          151.240.2.0/24 maxlen: 24
                          151.240.3.0/24 maxlen: 24
                          151.240.4.0/24 maxlen: 24
                          151.240.5.0/24 maxlen: 24
                          151.240.6.0/24 maxlen: 24
                          151.240.7.0/24 maxlen: 24
                          151.240.8.0/24 maxlen: 24
                          151.240.9.0/24 maxlen: 24
                          151.240.10.0/24 maxlen: 24
                          151.240.11.0/24 maxlen: 24
                          151.240.12.0/24 maxlen: 24
                          151.240.13.0/24 maxlen: 24
                          151.240.14.0/24 maxlen: 24
                          151.240.15.0/24 maxlen: 24
                          151.240.16.0/24 maxlen: 24
                          151.240.17.0/24 maxlen: 24
                          151.240.18.0/24 maxlen: 24
                          151.240.19.0/24 maxlen: 24
                          151.240.20.0/24 maxlen: 24
                          151.240.21.0/24 maxlen: 24
                          151.240.22.0/24 maxlen: 24
                          151.240.23.0/24 maxlen: 24
                          151.240.24.0/24 maxlen: 24
                          151.240.25.0/24 maxlen: 24
                          151.240.26.0/24 maxlen: 24
                          151.240.27.0/24 maxlen: 24
                          151.240.28.0/24 maxlen: 24
                          151.240.29.0/24 maxlen: 24
                          151.240.30.0/24 maxlen: 24
                          151.240.31.0/24 maxlen: 24
                          151.240.32.0/24 maxlen: 24
                          151.240.33.0/24 maxlen: 24
                          151.240.34.0/24 maxlen: 24
                          151.240.35.0/24 maxlen: 24
                          151.240.36.0/24 maxlen: 24
                          151.240.37.0/24 maxlen: 24
                          151.240.38.0/24 maxlen: 24
                          151.240.39.0/24 maxlen: 24
                          151.240.40.0/24 maxlen: 24
                          151.240.41.0/24 maxlen: 24
                          151.240.42.0/24 maxlen: 24
                          151.240.43.0/24 maxlen: 24
                          151.240.44.0/24 maxlen: 24
                          151.240.45.0/24 maxlen: 24
                          151.240.46.0/24 maxlen: 24
                          151.240.47.0/24 maxlen: 24
                          151.240.48.0/24 maxlen: 24
                          151.240.49.0/24 maxlen: 24
                          151.240.50.0/24 maxlen: 24
                          151.240.51.0/24 maxlen: 24
                          151.240.52.0/24 maxlen: 24
                          151.240.53.0/24 maxlen: 24
                          151.240.54.0/24 maxlen: 24
                          151.240.55.0/24 maxlen: 24
                          151.240.56.0/24 maxlen: 24
                          151.240.57.0/24 maxlen: 24
                          151.240.58.0/24 maxlen: 24
                          151.240.59.0/24 maxlen: 24
                          151.240.60.0/24 maxlen: 24
                          151.240.61.0/24 maxlen: 24
                          151.240.62.0/24 maxlen: 24
                          151.240.63.0/24 maxlen: 24
                          151.240.64.0/24 maxlen: 24
                          151.240.65.0/24 maxlen: 24
                          151.240.66.0/24 maxlen: 24
                          151.240.67.0/24 maxlen: 24
                          151.240.68.0/24 maxlen: 24
                          151.240.69.0/24 maxlen: 24
                          151.240.70.0/24 maxlen: 24
                          151.240.71.0/24 maxlen: 24
                          151.240.72.0/24 maxlen: 24
                          151.240.73.0/24 maxlen: 24
                          151.240.74.0/24 maxlen: 24
                          151.240.75.0/24 maxlen: 24
                          151.240.76.0/24 maxlen: 24
                          151.240.77.0/24 maxlen: 24
                          151.240.78.0/24 maxlen: 24
                          151.240.79.0/24 maxlen: 24
                          151.240.80.0/24 maxlen: 24
                          151.240.81.0/24 maxlen: 24
                          151.240.82.0/24 maxlen: 24
                          151.240.83.0/24 maxlen: 24
                          151.240.84.0/24 maxlen: 24
                          151.240.85.0/24 maxlen: 24
                          151.240.86.0/24 maxlen: 24
                          151.240.87.0/24 maxlen: 24
                          151.240.88.0/24 maxlen: 24
                          151.240.89.0/24 maxlen: 24
                          151.240.90.0/24 maxlen: 24
                          151.240.91.0/24 maxlen: 24
                          151.240.92.0/24 maxlen: 24
                          151.240.93.0/24 maxlen: 24
                          151.240.94.0/24 maxlen: 24
                          151.240.95.0/24 maxlen: 24
                          151.240.96.0/24 maxlen: 24
                          151.240.97.0/24 maxlen: 24
                          151.240.98.0/24 maxlen: 24
                          151.240.99.0/24 maxlen: 24
                          151.240.100.0/24 maxlen: 24
                          151.240.101.0/24 maxlen: 24
                          151.240.102.0/24 maxlen: 24
                          151.240.103.0/24 maxlen: 24
                          151.240.104.0/24 maxlen: 24
                          151.240.105.0/24 maxlen: 24
                          151.240.106.0/24 maxlen: 24
                          151.240.107.0/24 maxlen: 24
                          151.240.108.0/24 maxlen: 24
                          151.240.109.0/24 maxlen: 24
                          151.240.110.0/24 maxlen: 24
                          151.240.111.0/24 maxlen: 24
                          151.240.128.0/24 maxlen: 24
                          151.240.129.0/24 maxlen: 24
                          151.240.130.0/24 maxlen: 24
                          151.240.131.0/24 maxlen: 24
                          151.240.132.0/24 maxlen: 24
                          151.240.133.0/24 maxlen: 24
                          151.240.134.0/24 maxlen: 24
                          151.240.135.0/24 maxlen: 24
                          151.240.136.0/24 maxlen: 24
                          151.240.137.0/24 maxlen: 24
                          151.240.138.0/24 maxlen: 24
                          151.240.139.0/24 maxlen: 24
                          151.240.140.0/24 maxlen: 24
                          151.240.141.0/24 maxlen: 24
                          151.240.142.0/24 maxlen: 24
                          151.240.143.0/24 maxlen: 24
                          151.240.144.0/24 maxlen: 24
                          151.240.145.0/24 maxlen: 24
                          151.240.146.0/24 maxlen: 24
                          151.240.147.0/24 maxlen: 24
                          151.240.148.0/24 maxlen: 24
                          151.240.149.0/24 maxlen: 24
                          151.240.150.0/24 maxlen: 24
                          151.240.151.0/24 maxlen: 24
                          151.240.152.0/24 maxlen: 24
                          151.240.153.0/24 maxlen: 24
                          151.240.154.0/24 maxlen: 24
                          151.240.155.0/24 maxlen: 24
                          151.240.156.0/24 maxlen: 24
                          151.240.157.0/24 maxlen: 24
                          151.240.158.0/24 maxlen: 24
                          151.240.159.0/24 maxlen: 24
                          151.240.160.0/24 maxlen: 24
                          151.240.161.0/24 maxlen: 24
                          151.240.162.0/24 maxlen: 24
                          151.240.163.0/24 maxlen: 24
                          151.240.164.0/24 maxlen: 24
                          151.240.165.0/24 maxlen: 24
                          151.240.166.0/24 maxlen: 24
                          151.240.167.0/24 maxlen: 24
                          151.240.168.0/24 maxlen: 24
                          151.240.169.0/24 maxlen: 24
                          151.240.170.0/24 maxlen: 24
                          151.240.171.0/24 maxlen: 24
                          151.240.172.0/24 maxlen: 24
                          151.240.173.0/24 maxlen: 24
                          151.240.174.0/24 maxlen: 24
                          151.240.175.0/24 maxlen: 24
                          151.240.176.0/24 maxlen: 24
                          151.240.177.0/24 maxlen: 24
                          151.240.178.0/24 maxlen: 24
                          151.240.179.0/24 maxlen: 24
                          151.240.180.0/24 maxlen: 24
                          151.240.181.0/24 maxlen: 24
                          151.240.182.0/24 maxlen: 24
                          151.240.183.0/24 maxlen: 24
                          151.240.184.0/24 maxlen: 24
                          151.240.185.0/24 maxlen: 24
                          151.240.186.0/24 maxlen: 24
                          151.240.187.0/24 maxlen: 24
                          151.240.188.0/24 maxlen: 24
                          151.240.189.0/24 maxlen: 24
                          151.240.190.0/24 maxlen: 24
                          151.240.191.0/24 maxlen: 24
                          151.240.192.0/24 maxlen: 24
                          151.240.193.0/24 maxlen: 24
                          151.240.194.0/24 maxlen: 24
                          151.240.195.0/24 maxlen: 24
                          151.240.196.0/24 maxlen: 24
                          151.240.197.0/24 maxlen: 24
                          151.240.198.0/24 maxlen: 24
                          151.240.199.0/24 maxlen: 24
                          151.240.200.0/24 maxlen: 24
                          151.240.201.0/24 maxlen: 24
                          151.240.202.0/24 maxlen: 24
                          151.240.203.0/24 maxlen: 24
                          151.240.204.0/24 maxlen: 24
                          151.240.205.0/24 maxlen: 24
                          151.240.206.0/24 maxlen: 24
                          151.240.207.0/24 maxlen: 24
                          151.240.208.0/24 maxlen: 24
                          151.240.209.0/24 maxlen: 24
                          151.240.210.0/24 maxlen: 24
                          151.240.211.0/24 maxlen: 24
                          151.240.212.0/24 maxlen: 24
                          151.240.213.0/24 maxlen: 24
                          151.240.214.0/24 maxlen: 24
                          151.240.215.0/24 maxlen: 24
                          151.240.216.0/24 maxlen: 24
                          151.240.217.0/24 maxlen: 24
                          151.240.218.0/24 maxlen: 24
                          151.240.219.0/24 maxlen: 24
                          151.240.220.0/24 maxlen: 24
                          151.240.221.0/24 maxlen: 24
                          151.240.222.0/24 maxlen: 24
                          151.240.223.0/24 maxlen: 24
                          151.240.224.0/24 maxlen: 24
                          151.240.225.0/24 maxlen: 24
                          151.240.226.0/24 maxlen: 24
                          151.240.227.0/24 maxlen: 24
                          151.240.228.0/24 maxlen: 24
                          151.240.229.0/24 maxlen: 24
                          151.240.230.0/24 maxlen: 24
                          151.240.231.0/24 maxlen: 24
                          151.240.232.0/24 maxlen: 24
                          151.240.233.0/24 maxlen: 24
                          151.240.234.0/24 maxlen: 24
                          151.240.235.0/24 maxlen: 24
                          151.240.236.0/24 maxlen: 24
                          151.240.237.0/24 maxlen: 24
                          151.240.238.0/24 maxlen: 24
                          151.240.239.0/24 maxlen: 24
                          151.240.240.0/24 maxlen: 24
                          151.240.241.0/24 maxlen: 24
                          151.240.242.0/24 maxlen: 24
                          151.240.243.0/24 maxlen: 24
                          151.240.244.0/24 maxlen: 24
                          151.240.245.0/24 maxlen: 24
                          151.240.246.0/24 maxlen: 24
                          151.240.247.0/24 maxlen: 24
                          151.240.248.0/24 maxlen: 24
                          151.240.249.0/24 maxlen: 24
                          151.240.250.0/24 maxlen: 24
                          151.240.251.0/24 maxlen: 24
                          151.240.252.0/24 maxlen: 24
                          151.240.253.0/24 maxlen: 24
                          151.240.254.0/24 maxlen: 24
                          151.240.255.0/24 maxlen: 24
                          151.241.110.0/24 maxlen: 24
                          151.242.14.0/24 maxlen: 24
                          151.242.20.0/24 maxlen: 24
                          151.242.192.0/20 maxlen: 24
                          151.242.242.0/24 maxlen: 24
                          151.243.14.0/24 maxlen: 24
                          151.243.83.0/24 maxlen: 24
                          151.243.104.0/24 maxlen: 24
                          151.243.128.0/24 maxlen: 24
                          151.243.129.0/24 maxlen: 24
                          151.243.158.0/24 maxlen: 24
                          151.243.162.0/24 maxlen: 24
                          151.243.184.0/22 maxlen: 24
                          151.243.204.0/22 maxlen: 24
                          151.243.212.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7f:53:9a:54:b3:e6:60:86:68:d7:7a:b8:1a:82:b2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Mar 10 09:12:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b138d01bf29af651ebf5d2f538e999e1223c5094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:00:fe:e9:6c:fb:52:92:68:4b:54:cd:89:
                    76:fd:e6:f7:d1:92:16:69:ce:3d:b3:24:61:ef:6c:
                    8f:fc:86:a6:ea:36:c4:95:4d:f4:f5:96:52:ca:b7:
                    98:71:60:4b:13:c5:9b:53:5f:7e:5a:40:44:6f:dd:
                    d1:06:8a:76:8e:f5:7e:35:65:11:33:05:b7:e2:75:
                    d6:ef:f9:a9:e7:1d:0f:ff:53:dc:30:8e:4e:12:d3:
                    aa:a8:25:1a:c3:69:44:3e:bf:2a:0c:46:af:fc:ac:
                    92:a2:4e:51:ff:9a:8f:bd:4c:a1:18:77:8b:7e:d8:
                    22:d7:dc:11:e0:62:1c:2b:ac:10:a8:cf:99:a9:e1:
                    61:a1:2d:86:1d:1a:15:58:dc:3f:16:66:be:08:92:
                    9a:59:77:5a:b7:46:ff:5e:cb:eb:6e:e5:7c:cc:9d:
                    5e:04:14:90:bf:27:d3:66:75:f7:ba:ea:4c:d5:36:
                    1a:30:33:a0:48:1d:f6:cf:eb:92:cf:42:a3:57:ef:
                    c4:69:75:34:94:7d:3b:c0:0b:f7:49:d2:13:c0:fb:
                    83:19:78:fc:52:a9:d0:94:6b:98:66:bb:cf:71:55:
                    d4:0e:20:a0:f5:9c:9a:24:d2:93:59:57:4a:c6:d2:
                    5a:53:f4:84:86:5c:2e:6c:2b:30:38:66:d6:04:ab:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:38:D0:1B:F2:9A:F6:51:EB:F5:D2:F5:38:E9:99:E1:22:3C:50:94
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sTjQG_Ka9lHr9dL1OOmZ4SI8UJQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.202.205.0/24
                  37.202.210.0/24
                  37.202.212.0/23
                  37.202.223.0/24
                  151.240.0.0-151.240.111.255
                  151.240.128.0/17
                  151.241.110.0/24
                  151.242.14.0/24
                  151.242.20.0/24
                  151.242.192.0/20
                  151.242.242.0/24
                  151.243.14.0/24
                  151.243.83.0/24
                  151.243.104.0/24
                  151.243.128.0/23
                  151.243.158.0/24
                  151.243.162.0/24
                  151.243.184.0/22
                  151.243.204.0/22
                  151.243.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:ad:85:a1:3c:83:d5:ce:20:54:dd:ac:ad:e4:60:5d:61:90:
         27:f4:1f:aa:36:8d:4b:e9:d8:9b:0a:09:18:16:2f:92:e8:56:
         8b:20:6b:83:20:7c:96:b8:b8:4a:82:19:26:6e:cd:f3:bf:86:
         af:04:48:bf:c0:cd:ae:89:8f:26:93:44:fc:64:8f:c9:5a:38:
         c6:6d:07:ea:cd:bd:af:55:87:26:bc:4d:1d:11:98:b7:21:2a:
         0f:a1:e4:72:76:7d:f7:90:29:18:cd:37:f0:7d:22:6b:76:79:
         3b:16:0c:53:4f:4e:c0:31:80:cc:d2:1b:cd:b3:22:3b:af:36:
         e4:ef:d6:60:00:cb:12:9f:3e:82:ef:d8:45:29:f1:9b:a0:4b:
         b8:69:14:e2:21:cd:c4:df:c8:43:e3:1d:5b:d7:f6:7e:bc:5c:
         e8:be:22:e2:dc:66:06:a7:fd:25:31:7a:c1:07:88:f4:df:de:
         bc:72:c9:18:2c:7f:aa:49:ba:de:38:08:74:f8:e8:b4:95:1c:
         88:5c:8e:7e:3e:3c:4f:6f:b6:e4:8b:46:0a:29:b5:aa:bd:4f:
         d2:44:8f:37:c8:eb:cb:91:cf:93:2b:a7:2a:22:5e:42:c0:97:
         fe:6a:02:4b:a4:62:ed:a1:0a:84:61:8c:85:88:d5:cd:ee:97:
         e2:05:d9:24
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgISAZV/U5pUs+ZghmjXergagrI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzEwMDkxMjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTM4ZDAxYmYyOWFmNjUxZWJmNWQyZjUzOGU5OTllMTIyM2M1MDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmsA/uls+1KSaEtUzYl2/eb30ZIW
ac49syRh72yP/Iam6jbElU309ZZSyreYcWBLE8WbU19+WkBEb93RBop2jvV+NWUR
MwW34nXW7/mp5x0P/1PcMI5OEtOqqCUaw2lEPr8qDEav/KySok5R/5qPvUyhGHeL
ftgi19wR4GIcK6wQqM+ZqeFhoS2GHRoVWNw/Fma+CJKaWXdat0b/XsvrbuV8zJ1e
BBSQvyfTZnX3uupM1TYaMDOgSB32z+uSz0KjV+/EaXU0lH07wAv3SdITwPuDGXj8
UqnQlGuYZrvPcVXUDiCg9ZyaJNKTWVdKxtJaU/SEhlwubCswOGbWBKuoiQIDAQAB
o4IChjCCAoIwHQYDVR0OBBYEFLE40BvymvZR6/XS9TjpmeEiPFCUMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvc1RqUUdfS2E5bEhyOWRMMU9PbVo0U0k4VUpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGbBggrBgEFBQcBBwEB/wSBizCBiDCBhQQCAAEwfwMEACXK
zQMEACXK0gMEASXK1AMEACXK3zALAwMEl/ADBASX8GADBAeX8IADBACX8W4DBACX
8g4DBACX8hQDBASX8sADBACX8vIDBACX8w4DBACX81MDBACX82gDBAGX84ADBACX
854DBACX86IDBAKX87gDBAKX88wDBAGX89QwDQYJKoZIhvcNAQELBQADggEBABat
haE8g9XOIFTdrK3kYF1hkCf0H6o2jUvp2JsKCRgWL5LoVosga4MgfJa4uEqCGSZu
zfO/hq8ESL/Aza6JjyaTRPxkj8laOMZtB+rNva9Vhya8TR0RmLchKg+h5HJ2ffeQ
KRjNN/B9Imt2eTsWDFNPTsAxgMzSG82zIjuvNuTv1mAAyxKfPoLv2EUp8ZugS7hp
FOIhzcTfyEPjHVvX9n68XOi+IuLcZgan/SUxesEHiPTf3rxyyRgsf6pJut44CHT4
6LSVHIhcjn4+PE9vtuSLRgoptaq9T9JEjzfI68uRz5MrpyoiXkLAl/5qAkukYu2h
CoRhjIWI1c3ul+IF2SQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:47:27 2025 by rpki-client