Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa
File:                     f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa (raw, json)
Hash identifier:          2ft9Qkr7VmP7C+k4d++Oo+PEfmSnAsZLHLY6gR8h9eI=
Subject key identifier:   D1:93:E6:D0:90:DF:A0:7E:48:EA:EE:BA:1D:1B:EC:9F:17:0A:E5:C0
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540B8B70F15DC354C4840CBC0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa
Signing time:             Mon 18 Mar 2024 22:09:59 +0000
ROA not before:           Mon 18 Mar 2024 22:09:59 +0000
ROA not after:            Sun 16 Jun 2024 22:09:59 +0000
asID:                     36040
IP address blocks:        136.22.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:b7:0f:15:dc:35:4c:48:40:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:09:59 2024 GMT
            Not After : Jun 16 22:09:59 2024 GMT
        Subject: CN=3a1ccdd4-4998-468b-95eb-65fbe62d2935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:ef:39:8c:1e:c5:59:de:63:cf:f0:e0:67:
                    a8:c6:cb:7a:43:04:6c:5c:cf:55:63:09:f5:83:1d:
                    5e:ab:d2:37:05:32:02:46:91:2c:91:9c:5f:90:d5:
                    b6:d3:3c:a2:8f:bf:be:3c:63:75:43:bb:d3:b2:0f:
                    62:62:3d:2d:9f:46:a4:82:14:17:5f:30:f3:3c:bf:
                    b7:1f:ac:be:f9:7f:50:5e:5d:8c:8e:f6:d1:15:06:
                    99:5d:b2:17:6a:ca:79:14:5a:92:ad:8d:80:86:56:
                    f8:3b:80:19:8a:48:7c:12:38:53:32:16:5d:7a:c8:
                    fe:2c:35:45:29:a5:8b:a3:49:47:5c:77:8c:61:d5:
                    f8:a0:02:6c:41:ec:4b:d2:3f:d9:f7:f8:0f:ab:b3:
                    0b:37:fb:77:b8:24:eb:55:79:c7:10:8e:e6:3d:6d:
                    b0:8c:47:98:e2:df:57:52:93:17:00:a3:06:f3:71:
                    f7:31:c3:c0:1a:38:00:2e:05:e3:cc:12:cd:fb:41:
                    ca:ee:d3:4e:48:56:4a:47:f6:de:a9:9c:ca:02:1d:
                    8f:c6:3c:2e:bb:82:0b:7a:b9:c3:f6:af:bd:2e:a1:
                    fa:fb:79:b6:f7:c3:04:25:21:f0:4c:5b:73:4f:55:
                    d1:d6:00:94:6a:2a:50:aa:d4:d0:a5:a7:5d:30:f8:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:93:E6:D0:90:DF:A0:7E:48:EA:EE:BA:1D:1B:EC:9F:17:0A:E5:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e9:74:8e:ce:d3:f5:af:4f:fb:cf:6f:77:f2:39:a8:1b:9a:
         bd:d0:2e:c8:e8:72:0d:ec:8a:19:d5:99:b1:87:ed:72:87:d4:
         dc:db:3d:c8:ba:8c:ad:bc:30:b1:84:b0:0c:80:1d:a7:44:83:
         33:31:02:5e:46:07:1c:cb:15:2e:9c:7a:8f:83:39:cd:64:dc:
         72:22:86:89:18:5b:49:77:c1:2a:09:7c:78:ea:c7:ea:b6:6b:
         11:41:ef:5b:12:bc:be:92:0c:e2:cc:da:16:01:c0:c3:f2:3c:
         3b:b7:4e:92:57:67:3c:1a:6d:6c:ce:1e:fe:d5:07:9e:f5:03:
         34:39:41:8f:40:2f:f9:e4:d0:92:b0:f7:f8:bc:cf:8c:95:92:
         8c:b3:93:e3:b7:0a:35:c6:33:9d:04:cf:d5:78:35:a5:2d:a4:
         8b:9b:0f:15:34:2c:18:5d:d6:65:9d:c0:78:be:5c:94:57:2a:
         7f:05:5a:f2:1f:75:78:8e:ee:02:1c:c9:ba:8c:3b:b5:3e:66:
         14:4d:07:79:17:2e:09:e2:f1:73:92:22:a8:ba:8a:6e:93:c1:
         70:48:81:5a:3f:44:11:46:b6:14:df:3f:b8:f9:0c:ef:27:3a:
         f6:65:81:06:a5:81:a3:0d:72:4e:db:73:bb:8c:e5:3f:48:cf:
         05:4f:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:11:43 2024 by rpki-client on console-fra.rpki-client.org