Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa
File:                     21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa (raw, json)
Hash identifier:          j6hr1PpJwIXV0GQF1m8uRchdyVn0cxL8IDo9HvRbN5o=
Subject key identifier:   CA:7A:3F:8D:80:08:FA:93:DC:49:1C:21:9C:5D:50:22:8E:A0:B5:CA
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540B7EBE789B92B0D17FA93C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa
Signing time:             Mon 18 Mar 2024 22:08:23 +0000
ROA not before:           Mon 18 Mar 2024 22:08:23 +0000
ROA not after:            Sun 16 Jun 2024 22:08:23 +0000
asID:                     36040
IP address blocks:        136.22.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:eb:e7:89:b9:2b:0d:17:fa:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:08:23 2024 GMT
            Not After : Jun 16 22:08:23 2024 GMT
        Subject: CN=a7f52941-71ee-43bc-a710-f236c3b207a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:3d:f8:db:73:24:36:46:fd:c3:23:dc:bc:
                    52:8a:d6:1e:2e:46:e6:9e:34:e2:9d:74:87:6e:2d:
                    b3:96:b6:a3:95:98:b5:3a:33:2a:57:dd:c1:98:26:
                    cf:2b:73:43:04:55:9e:44:36:6d:16:6a:f2:3f:07:
                    ac:18:26:0e:26:06:b7:08:cb:3d:ec:b0:e9:15:63:
                    27:dd:18:bd:42:27:53:3f:ec:c7:aa:ab:a0:c4:43:
                    cf:4c:a3:50:df:22:d5:18:66:52:50:cc:84:0a:95:
                    7c:d3:33:1f:8d:75:1c:23:94:9a:62:07:9e:9f:4d:
                    ab:3d:ae:1a:ae:91:b1:e6:2d:02:47:de:e2:87:e0:
                    4c:2b:07:28:c9:66:56:4b:9a:07:0c:2c:63:bc:27:
                    c6:f5:cf:64:e6:8c:ff:b3:e1:a5:dc:48:59:3b:d2:
                    10:cd:65:4f:c9:af:cc:3a:3e:ae:e1:74:b2:49:a6:
                    64:2d:3d:71:7b:ae:f3:40:83:5a:74:f9:f5:81:57:
                    df:ed:19:09:a2:df:3e:f7:14:13:69:6f:2f:09:fe:
                    db:80:a5:b5:61:02:ba:5d:d5:6a:20:a2:3f:e0:89:
                    e1:79:d4:1f:e8:c0:32:bf:13:4c:30:28:bb:44:48:
                    38:4b:d1:62:7f:27:e4:87:cb:39:62:7a:cc:56:d4:
                    6d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7A:3F:8D:80:08:FA:93:DC:49:1C:21:9C:5D:50:22:8E:A0:B5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:2c:4e:b6:c0:d6:15:45:33:12:32:b3:ef:a3:84:18:3a:
         38:6c:6a:c6:58:9e:b5:e5:a2:b3:1d:0d:f2:be:38:fd:59:aa:
         b5:68:d4:b1:02:93:0f:1f:b2:60:51:6e:79:ec:8d:5d:a0:1a:
         3c:47:c2:a2:59:c0:10:9d:87:51:bf:9b:8c:94:26:83:73:47:
         f8:50:ba:34:04:af:3f:db:9d:2e:ad:62:ef:1a:1d:4b:73:b0:
         00:bb:27:da:2c:5e:69:d1:12:9c:24:7d:83:f6:ee:b9:a1:89:
         7d:5a:be:d8:d6:4d:c8:6d:37:39:ed:69:4b:a1:2f:30:85:71:
         2b:2d:c6:d5:85:be:21:85:7c:51:79:73:96:2f:1b:ea:cc:29:
         9f:37:95:4c:9f:c7:47:90:2b:0c:0b:37:2f:97:aa:73:4b:bd:
         84:5d:2d:bf:4f:c9:84:64:b4:12:84:ec:c6:2e:cb:2f:a2:fb:
         71:b9:a9:5d:2a:64:01:4d:0f:44:7e:41:ad:8d:9c:22:c8:ae:
         f8:ed:5f:82:55:e6:92:e5:d9:68:4b:fc:b3:2c:e4:47:fb:ec:
         86:8a:40:07:df:36:f5:64:74:3b:78:1d:6a:50:5c:3e:be:98:
         e2:ba:8a:08:21:df:7d:3e:c1:fb:8b:88:32:04:5c:e9:3f:b2:
         23:ae:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:25 2024 by rpki-client on console-fra.rpki-client.org