Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa
File:                     ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa (raw, json)
Hash identifier:          59huYwvorYj9FtdXzyfcUUU9/shZn6LV5jh1W6W1p1w=
Subject key identifier:   BC:92:65:3E:E3:6D:DE:DE:C9:1C:0C:02:8C:05:59:45:08:DA:D3:90
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540BB9DE9C418949F6022CA60
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa
Signing time:             Mon 18 Mar 2024 22:15:50 +0000
ROA not before:           Mon 18 Mar 2024 22:15:50 +0000
ROA not after:            Sun 16 Jun 2024 22:15:50 +0000
asID:                     36040
IP address blocks:        136.22.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:9d:e9:c4:18:94:9f:60:22:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:15:50 2024 GMT
            Not After : Jun 16 22:15:50 2024 GMT
        Subject: CN=08baf28d-9099-4182-ba8e-d51a4947c1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:f5:f0:31:84:0e:7e:63:74:14:1c:a8:6c:
                    12:8e:dc:2a:c3:ba:78:89:27:14:1d:b4:04:89:7d:
                    2d:d1:f9:70:2c:34:e4:00:2d:04:bc:cb:68:45:f2:
                    c7:4d:b6:e4:ab:a7:e7:59:fd:52:7b:5b:4c:fd:c3:
                    5d:16:8e:02:3b:ba:b9:ae:67:46:c6:09:89:a1:9e:
                    ac:22:b5:11:60:4b:43:20:25:2b:57:59:e1:d6:53:
                    13:76:68:bc:b2:46:19:51:fa:cd:a5:c2:b3:9a:41:
                    d1:2a:37:33:86:77:1a:fd:5e:63:7d:25:91:eb:eb:
                    a7:88:47:d0:e2:85:df:39:b1:e6:c0:ef:d6:c4:31:
                    d0:3f:ab:7f:7d:1b:66:3d:ae:7e:f9:5c:04:d7:a2:
                    2c:21:41:cc:5a:94:f1:38:f4:2c:5e:ab:37:62:ae:
                    48:4d:e8:cb:72:52:c0:29:27:a7:05:b4:18:a4:7d:
                    8a:47:45:b1:cb:65:14:3e:77:76:df:97:62:57:d1:
                    56:91:5d:d7:d4:05:4e:a8:28:e8:8a:03:69:78:b3:
                    5a:c1:6c:c3:83:d1:8f:3d:8f:ad:4b:7e:de:7a:7d:
                    76:1f:c1:28:f3:d4:df:ff:dc:c9:1f:20:1f:e8:0c:
                    d0:bd:96:f7:db:37:33:9b:4c:de:51:88:08:05:7b:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:92:65:3E:E3:6D:DE:DE:C9:1C:0C:02:8C:05:59:45:08:DA:D3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e6:91:34:a3:7b:ce:01:e6:b1:86:dd:97:94:b1:ba:80:00:
         ed:10:86:52:7c:b0:dd:df:83:22:ec:97:de:91:50:ad:e8:4d:
         ad:e0:83:43:9e:81:83:cc:6e:4e:a8:a2:c9:f0:c8:99:8c:b8:
         5b:14:6b:dc:46:a7:d1:84:9e:80:2a:70:5c:d9:af:94:e4:25:
         9c:88:2b:7e:e4:f6:a3:5e:46:06:99:e3:4c:77:19:32:46:12:
         a0:e2:09:74:20:87:f7:36:1a:80:3f:5e:8a:26:89:69:57:33:
         4a:bc:f9:ec:87:32:8d:4e:32:54:ea:d1:18:32:4c:68:a6:61:
         35:e4:98:f2:c9:fa:70:fc:9d:4a:47:f9:5f:51:3d:cf:fc:cc:
         30:a7:da:af:60:c0:c4:df:01:f6:6e:0c:b4:c2:f3:f9:b6:8d:
         73:8b:b2:4a:e2:3d:c5:2a:37:ec:25:c1:45:13:d4:f5:52:eb:
         c9:e3:48:09:25:06:7e:8a:fd:aa:77:e8:8f:41:41:a7:e1:ed:
         43:e2:6a:b6:9e:1e:bc:3a:49:6b:24:b1:4e:e1:68:ee:c0:01:
         03:cc:e5:52:45:6f:95:c4:ab:33:54:38:c3:5a:61:2e:6e:07:
         c9:4e:e0:75:c7:38:41:62:19:c2:03:1f:b7:66:8d:e8:0b:25:
         54:c6:e6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 08:13:09 2024 by rpki-client on console-ams.rpki-client.org