Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7ee3c0b2-a7a3-3d6a-83c5-4cd09cb58e65.roa
File:                     7ee3c0b2-a7a3-3d6a-83c5-4cd09cb58e65.roa (raw, json)
Hash identifier:          NnPPnchUNcwQfVh3JFQCWyk35fUWtmUkC4BngwW/ISM=
Subject key identifier:   82:33:D9:A4:B4:11:19:43:9E:7C:D5:CB:38:B2:57:3B:05:1D:61:BB
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540B7DCE40E6D72CAA98ABA80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7ee3c0b2-a7a3-3d6a-83c5-4cd09cb58e65.roa
Signing time:             Mon 18 Mar 2024 22:08:16 +0000
ROA not before:           Mon 18 Mar 2024 22:08:16 +0000
ROA not after:            Sun 16 Jun 2024 22:08:16 +0000
asID:                     36040
IP address blocks:        136.22.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:dc:e4:0e:6d:72:ca:a9:8a:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:08:16 2024 GMT
            Not After : Jun 16 22:08:16 2024 GMT
        Subject: CN=09f234f4-c034-404f-8f62-e31154df5fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:d6:19:24:3d:66:39:19:9b:96:af:f7:a5:
                    6e:d4:65:3c:aa:77:fb:13:52:91:83:b1:a5:a0:1f:
                    2c:7d:6e:b5:10:50:01:2e:4b:13:d1:ae:b8:21:61:
                    ea:b3:4a:eb:4c:f0:17:04:e8:80:d5:46:14:19:e7:
                    78:ef:a3:6a:54:14:7d:d4:24:b5:a5:69:d7:ce:7b:
                    2f:53:c5:2a:18:7d:32:0c:bb:18:dd:51:d3:e5:be:
                    96:f4:1f:63:1c:49:aa:ce:20:0d:92:60:bf:d1:1e:
                    dd:ac:51:9a:ca:de:c5:80:22:36:41:bb:a4:65:f2:
                    21:cc:e6:49:b8:b1:8f:bf:09:5c:9a:a3:f7:f9:a3:
                    0b:b2:90:7f:4d:dc:1d:65:9e:16:0c:31:18:5b:2e:
                    0c:7e:8d:7f:f4:41:c7:a0:85:01:11:db:7d:c7:d6:
                    e4:1a:c2:71:9f:88:d7:ad:59:32:e5:db:1b:6a:38:
                    1a:8e:9d:44:56:05:b4:17:92:1d:fa:ca:12:97:d7:
                    0c:69:12:7a:a7:36:4e:98:4e:04:72:36:0b:c8:53:
                    7e:8c:1f:77:44:d6:37:ed:6d:e4:39:e3:e1:e0:d9:
                    cf:2e:45:c8:b6:b1:15:63:7b:e7:e5:34:c8:06:d7:
                    ea:c2:fe:58:5d:52:d6:63:95:c8:50:f4:e1:ec:91:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:33:D9:A4:B4:11:19:43:9E:7C:D5:CB:38:B2:57:3B:05:1D:61:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7ee3c0b2-a7a3-3d6a-83c5-4cd09cb58e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:21:b7:fe:f5:f7:e6:7a:46:5e:fa:2f:37:e8:7c:88:6a:
         50:f8:93:f2:bb:42:c6:ea:b1:82:70:f3:aa:63:81:2d:9f:bb:
         03:23:a6:59:7c:63:dc:3d:4a:e5:97:79:13:e9:12:b7:f6:89:
         ac:7e:df:c5:36:50:13:c2:17:f1:88:9e:86:dc:dc:49:d7:67:
         db:3c:42:e5:c5:5b:2d:53:0d:dc:e4:bb:66:d2:7e:e1:0a:5b:
         46:e7:40:3d:a5:6f:e4:b9:fb:ab:65:4a:35:5b:bb:ac:66:69:
         3a:63:60:1f:0b:df:c8:fc:cd:88:b3:60:97:b4:0c:8f:8e:cc:
         e0:3f:5e:d2:74:e6:8b:6c:37:4a:3c:e9:36:ff:6c:db:f3:a1:
         22:27:45:d9:ca:e5:4d:33:af:46:8a:76:c9:ce:15:31:1b:fc:
         6e:e0:f6:18:78:a1:45:b0:d0:a2:92:65:2a:e9:69:f9:bc:b4:
         3c:9e:68:18:a9:8d:9e:06:af:13:ee:6c:33:59:e7:d8:ed:8d:
         5b:78:75:dc:7d:2c:54:ec:7a:23:ea:1b:ed:33:53:0b:aa:7f:
         4f:1a:85:20:d3:1c:5e:1b:4a:98:7e:dc:c0:95:5a:9f:a9:69:
         49:aa:38:0c:f9:62:d9:11:14:7e:bf:55:bc:49:68:a1:cc:40:
         62:2a:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:00:29 2024 by rpki-client on console-ams.rpki-client.org