Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS36139.roa
File:                     AS36139.roa (raw, json)
Hash identifier:          tUXC2LRmavm7iebaKA138ZwUI3Eir/vo/nbtPvIsXUM=
Subject key identifier:   F7:BA:AA:48:1F:2D:A9:F9:41:3C:8A:F6:C0:73:7C:FA:66:6A:CB:13
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       401D22CDB098AFE19F2A1EDC08E754C794A07EC1
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS36139.roa
Signing time:             Wed 17 Jan 2024 05:47:36 +0000
ROA not before:           Wed 17 Jan 2024 05:42:36 +0000
ROA not after:            Wed 15 Jan 2025 05:47:36 +0000
asID:                     36139
IP address blocks:        74.43.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1d:22:cd:b0:98:af:e1:9f:2a:1e:dc:08:e7:54:c7:94:a0:7e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 17 05:42:36 2024 GMT
            Not After : Jan 15 05:47:36 2025 GMT
        Subject: CN=F7BAAA481F2DA9F9413C8AF6C0737CFA666ACB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:7c:cb:cd:f3:58:fd:80:e7:80:99:90:fb:
                    c4:36:c6:ce:91:66:0c:c8:da:02:44:1c:28:7d:a7:
                    d6:e5:eb:93:66:be:09:ab:06:c6:81:65:c0:1c:97:
                    76:50:e4:1f:a1:cb:50:39:9b:ad:74:bf:78:6a:71:
                    a0:da:4e:9f:77:a5:bb:3d:37:d9:ae:b1:0c:0c:26:
                    7a:a8:52:9d:d6:44:c7:49:81:a5:15:9e:a6:e9:d4:
                    c4:ee:ce:38:bb:b0:f8:f5:b6:d5:c0:bc:a0:4e:91:
                    3a:c3:e2:69:6b:c4:b9:aa:9c:cf:2b:41:23:bb:71:
                    24:c0:08:52:cc:24:76:77:68:69:4f:3a:d3:5a:1b:
                    b6:af:f3:7d:07:78:df:58:83:4e:49:5f:c3:47:ea:
                    7f:1c:68:d8:81:b5:7c:e3:f9:04:c8:49:3c:15:06:
                    21:c5:49:fe:37:fc:c1:10:ea:06:73:95:4d:70:2a:
                    70:ce:ba:09:5d:52:31:ce:d4:3d:92:59:3a:e0:c5:
                    4e:4c:bd:8f:0c:64:c0:1a:64:67:65:f6:50:75:f6:
                    fa:21:bc:e8:59:44:5e:3b:55:1a:f2:95:81:cd:28:
                    8e:55:0a:a6:ea:bc:e5:ff:0e:ae:a6:2f:64:f3:20:
                    03:06:d0:0a:b1:f6:f4:d7:95:5a:59:1d:8a:b2:7b:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BA:AA:48:1F:2D:A9:F9:41:3C:8A:F6:C0:73:7C:FA:66:6A:CB:13
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS36139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.43.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:2b:47:4d:99:cd:4a:32:6b:87:12:08:b7:b1:4c:15:76:a8:
         fd:47:93:40:a2:98:4e:f6:11:b3:9f:9b:fc:7e:3d:89:fe:da:
         23:17:ff:80:3d:9d:c0:53:4d:cc:a9:1a:59:87:e7:54:96:3f:
         e4:bb:42:ac:4a:5e:81:d6:67:aa:07:e9:12:3c:08:9a:9f:fa:
         d6:a4:9e:cd:75:f5:a2:be:c3:04:5c:25:38:c4:ef:8c:b5:b5:
         7f:41:7f:e5:73:2b:50:05:47:1f:3e:b7:c1:ae:03:d8:16:58:
         13:97:c5:03:09:50:5a:ab:95:32:7a:71:eb:f9:61:7a:3f:90:
         dd:ba:57:88:09:b6:21:a0:12:44:5e:94:a7:9e:54:2f:a6:43:
         fc:3c:02:7f:cf:37:a1:0b:7a:77:26:01:86:79:dc:29:80:c0:
         7d:50:82:e5:ab:93:95:6b:c1:43:a5:b3:9a:80:83:78:0b:cf:
         ab:6a:c7:75:3c:0a:22:5b:8f:66:81:01:c9:75:06:74:d8:f1:
         9f:be:25:bb:d9:51:65:9f:e7:b5:bc:26:2f:9a:4f:64:3e:2e:
         54:0c:17:48:1a:44:00:16:85:76:cd:22:f9:6d:d0:01:d9:aa:
         f3:f9:27:22:da:0a:f9:9b:d4:b3:be:9d:43:8d:29:af:24:37:
         18:ad:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org