Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/64ac54ef-441a-315c-a15a-4f7da8504a58.roa
File:                     64ac54ef-441a-315c-a15a-4f7da8504a58.roa (raw, json)
Hash identifier:          2I/Z/c9G+IR65YQFyqkUQgFMxloeajMa+jCMdn/vwBQ=
Subject key identifier:   CD:AE:A1:9A:3A:48:92:96:4F:95:2D:E2:93:42:57:76:D6:81:D1:64
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540B65CB4CDDAB5DE81D69400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/64ac54ef-441a-315c-a15a-4f7da8504a58.roa
Signing time:             Mon 18 Mar 2024 22:05:15 +0000
ROA not before:           Mon 18 Mar 2024 22:05:15 +0000
ROA not after:            Sun 16 Jun 2024 22:05:15 +0000
asID:                     36040
IP address blocks:        136.22.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:5c:b4:cd:da:b5:de:81:d6:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:05:15 2024 GMT
            Not After : Jun 16 22:05:15 2024 GMT
        Subject: CN=578dc972-6b00-4f68-8b1e-a29e48e9a674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:db:7f:f2:2a:6e:c7:e9:9e:47:92:d6:ea:
                    63:24:18:d9:94:a9:25:a5:4c:c2:2a:c0:0c:0b:b3:
                    84:b6:0a:31:ba:ea:a7:0b:4d:76:43:5b:b7:ea:fd:
                    1b:83:2a:7e:81:5e:9f:97:fe:06:14:d4:7f:79:c6:
                    9c:29:42:67:0c:fa:0f:3e:02:86:1c:56:46:62:22:
                    48:34:e9:1f:10:88:40:0e:6f:d6:88:77:97:2a:eb:
                    75:fe:81:84:a3:83:57:9b:32:f4:d1:07:54:44:2f:
                    e3:4f:d0:b4:06:d8:8e:eb:ff:70:4c:c8:04:b3:b8:
                    22:5e:32:83:14:59:4c:18:96:a6:8c:fa:aa:e2:00:
                    9c:55:41:42:44:e2:dd:ce:1d:a3:42:31:15:3a:44:
                    13:75:2f:eb:00:8e:2b:0a:95:cb:dc:57:15:b1:d9:
                    b8:be:d7:7d:21:13:8b:3b:f8:ff:c5:73:fe:e2:03:
                    c5:c3:92:d4:c8:56:cf:02:cc:38:2d:18:36:03:ac:
                    22:79:1d:e3:94:fe:3a:38:d7:36:49:e8:44:bc:75:
                    88:6d:61:09:03:83:cb:c1:b2:8f:fb:01:34:73:20:
                    c3:8f:64:d7:6c:88:93:9a:2d:d8:96:e6:62:44:a2:
                    58:f1:37:e7:f6:1e:3a:66:4a:0e:4d:e3:1d:fa:99:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AE:A1:9A:3A:48:92:96:4F:95:2D:E2:93:42:57:76:D6:81:D1:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/64ac54ef-441a-315c-a15a-4f7da8504a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:f8:0c:3d:cb:7b:78:24:3d:5c:69:fd:aa:cd:51:fa:3d:
         ff:c0:93:61:e8:ed:17:1f:7e:b9:57:96:60:a1:f6:ac:58:3a:
         f0:06:3a:0c:3e:5f:fb:02:5c:11:41:99:ff:9b:82:8b:35:a9:
         64:ee:a2:89:d9:6f:5e:95:aa:46:35:a0:42:64:a3:1b:af:4c:
         cc:47:12:26:e5:65:08:20:68:53:02:e4:a1:ed:b4:55:6a:29:
         17:9d:9c:07:19:4f:dc:4e:ae:93:b9:15:5b:6f:9f:39:9c:99:
         64:0f:4e:8a:67:c9:e5:3f:6e:d9:31:15:7b:e8:20:c9:a6:49:
         ce:1a:c2:06:96:ff:0f:2f:3a:f9:d0:d2:43:c0:c4:aa:9e:6e:
         55:70:69:74:47:ad:0e:9d:71:ec:72:fe:40:40:47:db:b6:bc:
         a6:e4:06:b9:5b:f9:6e:fe:24:ac:09:4f:77:20:8d:4d:5c:ee:
         0f:1b:c7:34:c8:0f:37:2d:37:0e:dc:ba:9c:ac:1b:54:cf:3e:
         69:43:9f:39:a7:9f:ce:7e:48:98:2d:a2:b4:34:b1:c6:c9:ac:
         e6:0e:97:4a:c3:02:e0:e5:8e:71:e5:c6:8b:d3:0d:14:14:71:
         48:47:c7:ad:99:e0:61:c4:1a:c8:8c:ce:14:66:d0:a6:df:ce:
         9a:b9:f7:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAtly0zdq13oHWlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI0MDMxODIyMDUxNVoXDTI0MDYxNjIyMDUxNVowLzEtMCsGA1UEAxMk
NTc4ZGM5NzItNmIwMC00ZjY4LThiMWUtYTI5ZTQ4ZTlhNjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ7bf/IqbsfpnkeS1upjJBjZlKklpUzCKsAM
C7OEtgoxuuqnC012Q1u36v0bgyp+gV6fl/4GFNR/ecacKUJnDPoPPgKGHFZGYiJI
NOkfEIhADm/WiHeXKut1/oGEo4NXmzL00QdURC/jT9C0BtiO6/9wTMgEs7giXjKD
FFlMGJamjPqq4gCcVUFCROLdzh2jQjEVOkQTdS/rAI4rCpXL3FcVsdm4vtd9IROL
O/j/xXP+4gPFw5LUyFbPAsw4LRg2A6wieR3jlP46ONc2SehEvHWIbWEJA4PLwbKP
+wE0cyDDj2TXbIiTmi3YluZiRKJY8Tfn9h46ZkoOTeMd+pmx/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2uoZo6SJKWT5Ut4pNCV3bWgdFkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjRhYzU0ZWYtNDQxYS0z
MTVjLWExNWEtNGY3ZGE4NTA0YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG95+Aw9y3t4JD1caf2qzVH6Pf/Ak2Ho7RcffrlXlmCh9qxYOvAGOgw+
X/sCXBFBmf+bgos1qWTuoonZb16VqkY1oEJkoxuvTMxHEiblZQggaFMC5KHttFVq
KRednAcZT9xOrpO5FVtvnzmcmWQPTopnyeU/btkxFXvoIMmmSc4awgaW/w8vOvnQ
0kPAxKqeblVwaXRHrQ6dcexy/kBAR9u2vKbkBrlb+W7+JKwJT3cgjU1c7g8bxzTI
DzctNw7cupysG1TPPmlDnzmnn85+SJgtorQ0scbJrOYOl0rDAuDljnHlxovTDRQU
cUhHx62Z4GHEGsiMzhRm0Kbfzpq59y8=
-----END CERTIFICATE-----
Generated at Sun May 19 07:42:42 2024 by rpki-client on console-fra.rpki-client.org