Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/454f1cc4-b48d-3411-844d-c9a3f81eef50.roa
File:                     454f1cc4-b48d-3411-844d-c9a3f81eef50.roa (raw, json)
Hash identifier:          vdR+hkueq5vXHrNyzvKQfBeORF9eEQ4r9SJZUgGxvfY=
Subject key identifier:   36:9D:D9:B4:F2:1D:C3:1F:00:F4:5D:A4:EC:B4:30:0F:EE:99:EE:F3
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540B99135CB85E69DF3311440
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/454f1cc4-b48d-3411-844d-c9a3f81eef50.roa
Signing time:             Mon 18 Mar 2024 22:11:42 +0000
ROA not before:           Mon 18 Mar 2024 22:11:42 +0000
ROA not after:            Sun 16 Jun 2024 22:11:42 +0000
asID:                     36040
IP address blocks:        136.22.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b9:91:35:cb:85:e6:9d:f3:31:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:11:42 2024 GMT
            Not After : Jun 16 22:11:42 2024 GMT
        Subject: CN=65945029-61c2-4bcf-aca4-8f5697336b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:b6:a7:d5:ef:14:be:ad:8e:51:6a:16:1d:
                    03:3b:0b:f2:73:70:ba:7b:b6:66:1e:3c:8f:ac:05:
                    07:65:5b:14:d8:53:28:76:72:72:c7:1d:6a:aa:88:
                    1f:98:10:df:e8:aa:c0:7d:c9:20:50:49:eb:b0:6a:
                    84:46:fe:46:76:9b:af:98:e2:20:52:49:aa:0c:ec:
                    b1:a6:95:38:78:54:ff:d1:9f:0b:ce:32:43:fb:de:
                    2f:5c:ff:72:69:54:70:34:90:5c:34:5a:53:cb:f1:
                    f7:31:fb:0c:2c:23:62:6e:da:fe:33:6f:4a:aa:1b:
                    77:4d:9b:f0:a9:1a:dc:c1:45:15:70:f0:ab:d7:eb:
                    1d:ff:18:a6:6c:03:7c:20:8a:0b:74:c0:71:bd:02:
                    fb:ae:26:53:6c:7b:b2:7e:60:e3:39:21:53:ae:6d:
                    31:57:dc:78:9b:d0:b5:ba:0d:b5:4c:49:c0:5a:9d:
                    7f:99:dd:34:ab:80:74:d4:ad:9c:ff:a3:4c:b4:2c:
                    4c:e0:2e:c4:77:72:f0:fe:ce:59:71:3c:d2:2c:6d:
                    db:3f:34:c2:92:bd:8f:6b:b1:6c:88:ca:cf:f2:bf:
                    a6:a2:77:4c:19:e3:2a:c4:15:f6:1f:68:f3:65:2d:
                    1e:62:73:86:80:83:e0:d9:f5:34:ca:19:47:ed:f9:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9D:D9:B4:F2:1D:C3:1F:00:F4:5D:A4:EC:B4:30:0F:EE:99:EE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/454f1cc4-b48d-3411-844d-c9a3f81eef50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:12:41:25:ce:92:95:ca:51:49:6c:16:de:72:de:0c:19:1a:
         61:a8:dd:c2:a7:bc:48:2a:1b:47:ad:2a:ed:54:17:c5:d2:c4:
         f2:b2:91:93:1a:7d:7e:fa:04:11:e5:99:ab:59:0c:b7:d1:c9:
         bd:d9:28:5e:51:8f:de:46:be:4b:36:c2:2e:bf:e1:a9:05:dd:
         08:a0:2a:41:6c:7d:fa:91:bb:7a:6e:d5:06:9a:97:55:36:cd:
         94:5d:b5:d5:c2:34:22:ae:bc:89:02:60:2f:e2:93:a5:95:1a:
         a1:69:cb:61:3f:b1:a2:dd:05:d7:fa:50:68:24:16:67:ce:6d:
         c8:14:e8:cd:75:89:f9:92:19:8c:ff:a5:bb:ca:bc:3b:37:c1:
         24:ac:59:3c:a6:b3:58:1e:82:fb:50:77:d8:54:ed:22:3b:5f:
         b9:9f:a2:86:b8:e1:76:5c:93:12:3c:87:da:ec:91:ab:83:a5:
         66:c3:77:f9:3c:d4:67:2f:88:db:e5:eb:75:fa:53:53:ad:f3:
         a1:dc:12:2a:37:99:e0:44:ce:d5:fa:4f:e2:79:b6:7b:13:29:
         76:56:eb:1b:78:b6:80:8d:9a:9b:24:b7:05:e0:e1:8d:49:9b:
         db:3e:5c:98:66:51:0a:14:30:8b:d8:bf:2d:27:6e:13:13:61:
         59:2b:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:12:17 2024 by rpki-client on console-ams.rpki-client.org