Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/c7156cc8-0146-3a9d-9e53-76bf4a0064d1.roa
File:                     c7156cc8-0146-3a9d-9e53-76bf4a0064d1.roa (raw, json)
Hash identifier:          n+lYgrOC6/yefiPA5/bfzpzd4NDVTtzMv3ccAA4XtmE=
Subject key identifier:   BF:44:6E:13:95:D6:2D:79:B0:9D:6C:30:AB:CE:66:E8:22:1D:95:FA
Certificate issuer:       /CN=050335c5-eabd-457a-a0b3-c677e99e9ba6
Certificate serial:       010D0C9F43285845A6F360AF09D4A0277A7A2F20
Authority key identifier: 94:5A:0D:DF:E4:1E:16:93:F9:30:6B:D4:D4:8C:76:8F:2F:1C:19:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/c7156cc8-0146-3a9d-9e53-76bf4a0064d1.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     6939
IP address blocks:        134.195.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/050335c5-eabd-457a-a0b3-c677e99e9ba6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/050335c5-eabd-457a-a0b3-c677e99e9ba6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:60:af:09:d4:a0:27:7a:7a:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050335c5-eabd-457a-a0b3-c677e99e9ba6
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=95da84d6-bae2-42c3-893b-ea8b26ef2be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:95:37:74:ee:33:c4:93:0b:a3:af:68:8e:
                    ae:eb:ea:3b:6e:0b:10:ef:1f:65:c9:93:22:d5:6d:
                    ce:65:c2:ff:25:66:b4:96:6a:82:e0:de:e8:cd:9a:
                    33:5c:a0:40:d0:1c:a1:3c:07:4e:a6:ba:bd:a9:0e:
                    d2:43:22:4d:d2:96:39:91:85:7d:78:61:3b:35:c0:
                    b2:0f:64:e9:ff:8b:2f:a0:af:90:6e:e1:1b:32:c4:
                    3b:9a:d9:13:22:58:cf:21:f7:d0:8f:90:5e:4b:a3:
                    65:dd:88:e7:ca:46:70:da:93:13:9d:97:eb:54:e7:
                    92:91:d9:36:4c:7f:e4:6e:57:3f:91:b1:bb:7e:2a:
                    ee:64:6b:fd:1e:f2:d8:74:16:91:e6:4b:29:19:d3:
                    22:6d:25:f3:9f:e4:1f:8c:65:3c:ad:4c:0b:5b:81:
                    2a:4f:60:ba:0e:e9:9e:da:e4:f9:22:15:68:b0:04:
                    3b:89:30:6b:b8:33:6b:50:df:67:c2:8b:8d:ac:3b:
                    5f:4c:c6:85:62:f9:a8:20:8f:fb:21:a1:cb:fa:57:
                    f5:fd:6c:b8:07:34:d3:d8:a3:97:38:48:89:95:dc:
                    b9:7a:8b:7d:23:e8:d1:2b:ee:a2:68:23:90:c4:fb:
                    a8:b8:87:c6:ea:6f:6b:58:e8:44:0b:fb:87:6f:79:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:44:6E:13:95:D6:2D:79:B0:9D:6C:30:AB:CE:66:E8:22:1D:95:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/c7156cc8-0146-3a9d-9e53-76bf4a0064d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6/050335c5-eabd-457a-a0b3-c677e99e9ba6.crl

            X509v3 Authority Key Identifier:
                keyid:94:5A:0D:DF:E4:1E:16:93:F9:30:6B:D4:D4:8C:76:8F:2F:1C:19:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/050335c5-eabd-457a-a0b3-c677e99e9ba6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:77:94:c2:65:54:67:86:87:4c:a9:62:f1:83:87:7c:c7:89:
         d1:71:60:a0:bd:e1:d6:64:5c:73:95:95:cc:22:f2:ce:6d:58:
         dd:4c:43:8c:5b:0e:a9:57:0d:ba:a1:41:80:ff:27:47:cd:58:
         08:62:7a:a6:01:69:3c:65:0d:f1:7a:f6:38:db:a2:22:94:dc:
         4e:7e:c7:c9:87:02:91:54:0d:71:61:5a:18:14:f2:11:cf:48:
         8a:eb:17:7d:58:06:3f:0d:84:4a:7e:b8:c6:83:ea:35:a0:6f:
         49:5d:f0:2c:aa:c0:45:1b:28:c6:2a:92:f3:cd:c2:08:e9:b2:
         e7:3f:90:b9:3e:fe:ac:15:ef:38:5b:ad:a6:39:6e:71:ba:ad:
         23:68:66:2c:cc:58:73:f3:a2:4f:85:40:00:22:1e:f5:eb:31:
         aa:5f:c5:1f:08:77:01:29:09:44:8d:ec:b4:21:21:2f:c1:5f:
         7d:0c:cb:1e:43:15:d3:47:aa:ee:73:ed:2c:25:d9:d2:7e:c5:
         ac:af:a9:d9:be:03:af:24:84:ab:f0:61:16:01:ca:9b:6a:08:
         bf:16:8b:18:87:0e:c0:a7:42:0d:aa:1b:16:c9:fd:bb:5c:4e:
         64:c5:f1:e1:bf:f1:9b:b0:91:31:94:18:88:8f:ef:db:46:f4:
         03:62:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:39:32 2024 by rpki-client on console-ams.rpki-client.org