Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa
File:                     89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa (raw, json)
Hash identifier:          QtpGlsP6Y2wlKBf6C4EitdQJUPDrk5F2trQ9AwGoXVI=
Subject key identifier:   43:58:25:AE:C8:46:54:C6:6A:0E:57:9E:5C:3C:B4:1B:A4:17:DB:E6
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540B80B9A4141FCF998131180
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa
Signing time:             Mon 18 Mar 2024 22:08:38 +0000
ROA not before:           Mon 18 Mar 2024 22:08:38 +0000
ROA not after:            Sun 16 Jun 2024 22:08:38 +0000
asID:                     36040
IP address blocks:        136.22.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:0b:9a:41:41:fc:f9:98:13:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:08:38 2024 GMT
            Not After : Jun 16 22:08:38 2024 GMT
        Subject: CN=07bf9dac-957d-423f-849a-2b6fdf1003b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:f3:54:26:cf:29:05:fa:7a:58:25:76:70:
                    7a:e6:88:dd:f2:ea:74:03:53:b8:46:03:17:c0:0e:
                    06:54:42:95:c6:ff:85:37:90:05:ec:81:5a:b6:39:
                    2a:f1:cb:d7:04:da:9b:f0:7d:0b:d4:ac:57:7d:bd:
                    0b:19:fb:17:cc:56:14:11:9e:78:fb:26:c3:9f:de:
                    74:f1:dd:f6:94:5d:85:80:72:97:6e:24:bc:6b:2b:
                    9e:5d:0c:ee:69:8c:32:cb:e6:3f:b6:dc:f6:7f:89:
                    1b:36:31:e9:76:7f:97:03:11:31:6e:aa:22:5d:24:
                    32:2c:d6:08:78:df:3c:d1:f2:18:2d:cd:f5:7f:e8:
                    59:d0:f3:28:77:90:e8:f1:87:ef:54:bf:9f:55:86:
                    71:67:41:2d:0c:ca:16:e5:38:2b:29:16:d2:7d:4d:
                    0e:56:aa:d2:c8:20:96:03:e8:6d:03:5f:39:86:03:
                    aa:8c:d6:f5:fb:ff:f4:2e:a0:56:94:82:b9:0d:38:
                    77:01:bd:62:47:cf:f5:51:7c:1a:d3:79:02:db:99:
                    93:a9:03:44:4f:3a:b7:8b:b5:c2:2c:bf:d6:02:10:
                    aa:72:b8:28:f3:82:7a:0e:75:65:83:98:e6:7a:58:
                    c6:ee:71:71:e4:05:4f:e4:e3:8b:83:2d:bd:88:ab:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:58:25:AE:C8:46:54:C6:6A:0E:57:9E:5C:3C:B4:1B:A4:17:DB:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:52:89:79:44:fd:26:9c:dd:d1:c6:93:cf:e7:da:d8:18:d7:
         74:6d:42:0c:ea:26:a6:d1:e2:37:92:19:d9:62:2d:86:4c:f9:
         00:83:69:d4:1e:13:47:3a:64:a8:e0:51:7c:0b:f4:80:49:ed:
         c4:b0:43:c7:4f:f3:29:de:d4:07:db:4e:55:ac:99:82:ac:13:
         cb:1a:7c:c6:b6:78:59:8e:12:26:3f:24:c4:1c:39:8d:5b:5b:
         90:44:17:09:55:5e:89:91:95:fd:a5:ca:6d:ed:17:6b:96:bf:
         2f:5f:8b:aa:1e:c6:b5:a6:1d:01:db:99:dd:e9:ba:2d:03:ed:
         13:96:4d:f6:84:8f:59:dc:4c:f6:ba:f0:43:e7:ca:f7:4f:13:
         1a:2c:d0:0a:f6:68:a3:4a:b5:d5:b8:d2:fc:e7:67:a8:da:78:
         ca:11:de:cf:00:58:4f:b2:5e:99:bd:86:b9:0c:4b:2f:7d:e6:
         db:39:cc:1d:7b:23:be:7f:87:a1:af:fb:75:31:90:ca:68:5f:
         a2:a7:e4:e9:c4:de:b9:71:9a:7a:76:9e:eb:f0:cb:56:bd:59:
         bf:a1:35:44:1f:6e:b5:47:84:e9:a1:40:89:3f:79:79:62:2a:
         b3:71:98:19:06:ea:f7:77:77:5c:1d:b3:43:68:2c:96:71:51:
         03:6b:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 08:13:09 2024 by rpki-client on console-ams.rpki-client.org