Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa
File:                     c96f3789-8034-380c-9379-7cb735811c20.roa (raw, json)
Hash identifier:          kXhBvn2acsK6Tr1xF2Ow+AHRGO78+WPw36Y3cmJk61A=
Subject key identifier:   53:3E:56:24:DC:67:8F:13:BB:54:E9:A6:60:BD:97:AB:F6:2B:24:D3
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540B8F8C1C6E22F06998BCD40
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa
Signing time:             Mon 18 Mar 2024 22:10:30 +0000
ROA not before:           Mon 18 Mar 2024 22:10:30 +0000
ROA not after:            Sun 16 Jun 2024 22:10:30 +0000
asID:                     36040
IP address blocks:        136.22.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:f8:c1:c6:e2:2f:06:99:8b:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:10:30 2024 GMT
            Not After : Jun 16 22:10:30 2024 GMT
        Subject: CN=fe9a3334-200a-4015-b98b-7040c69945cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:6c:7d:77:1b:fe:71:6b:a1:8f:36:c2:54:
                    71:b6:90:7d:a1:c3:85:b1:1c:89:aa:3c:d3:3f:e7:
                    1f:b9:9d:5a:d2:f5:65:b1:98:d8:66:27:63:d1:0e:
                    1e:4f:c6:5c:e5:79:e2:49:d0:e8:af:92:6b:7b:b8:
                    bc:59:d7:74:ee:45:81:e5:05:a0:80:33:36:79:2f:
                    10:89:39:8e:0a:71:13:cd:c5:12:fd:dd:d3:4d:8f:
                    72:6a:81:3a:62:07:bc:48:87:4b:9a:cb:5d:56:cc:
                    bf:bd:4b:3e:37:cf:b9:2c:66:a6:36:3d:6f:51:c3:
                    ec:9a:e9:2f:44:f4:05:8b:bc:a2:15:4b:e7:c5:70:
                    d0:65:c7:aa:dc:63:53:46:b7:0b:ae:b0:46:73:1f:
                    28:8f:81:53:84:cc:ba:3b:b4:a9:48:c0:13:df:57:
                    b6:2b:a9:8e:6b:2b:09:bc:f1:17:09:ff:da:5c:9e:
                    e7:05:bf:fc:e5:06:68:37:d9:98:99:a2:f3:9b:eb:
                    a4:6e:11:cc:fc:5b:4c:5f:85:8a:d3:60:53:4d:12:
                    f4:ad:74:c7:14:a7:78:f4:a0:c8:7e:24:db:ef:96:
                    dd:d8:b7:9f:bb:c9:94:08:0a:cc:01:08:85:40:3d:
                    3c:4f:1e:01:e8:37:3d:c7:11:e5:1d:99:da:87:4e:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3E:56:24:DC:67:8F:13:BB:54:E9:A6:60:BD:97:AB:F6:2B:24:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:97:37:50:43:18:8f:e1:eb:14:eb:49:0e:0c:df:76:3d:37:
         31:84:58:68:60:6e:6d:fd:63:10:f8:03:df:a6:43:2b:69:c9:
         a7:62:e3:5c:d3:6b:09:8f:07:3d:f9:65:74:b2:f3:14:63:b8:
         3c:ab:07:43:32:0b:52:bc:14:49:e4:95:dd:bd:c7:ee:8d:a9:
         85:14:a5:86:f8:e9:43:32:d7:33:89:c1:71:8f:00:8b:46:ec:
         92:71:d4:05:c8:2f:ab:1c:6e:69:dc:6f:88:df:5a:79:df:f0:
         4e:fa:53:77:80:44:d7:a9:00:24:87:b2:de:7c:f1:a7:7a:25:
         49:bd:5a:bb:14:f5:61:a7:a4:d7:e6:65:17:07:ea:a1:7a:2c:
         26:28:ee:f3:03:f6:04:56:bf:63:dd:58:bf:a5:fe:9e:40:a9:
         9d:8b:b7:06:7e:dd:11:38:35:47:b5:79:57:e2:f1:4a:af:bb:
         fc:3c:cc:27:37:8e:23:6a:1d:55:ce:43:fd:d4:18:09:1b:a8:
         6d:d6:92:31:2f:ee:c0:97:b3:79:06:c6:85:c9:8f:1e:0e:c6:
         50:4a:0d:05:f0:b1:53:51:4b:b1:09:67:de:16:ef:c4:0d:2d:
         14:fc:5d:3c:e6:f5:2c:87:32:d6:0f:6a:4f:19:93:fb:2b:08:
         80:cb:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:08:11 2024 by rpki-client on console-ams.rpki-client.org