Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa
File:                     00254be6-db70-327f-95c7-76419c22955d.roa (raw, json)
Hash identifier:          5dkuHoyYA5Dk+6VMjxDegFSXJR/s+i9DO0doOg0k7Sw=
Subject key identifier:   3A:0B:B1:5E:4A:60:B2:18:67:09:A3:63:FE:74:4B:AE:F9:AD:4E:15
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540BC39F87B15E0BB10524D80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa
Signing time:             Mon 18 Mar 2024 22:17:04 +0000
ROA not before:           Mon 18 Mar 2024 22:17:04 +0000
ROA not after:            Sun 16 Jun 2024 22:17:04 +0000
asID:                     36492
IP address blocks:        136.22.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:39:f8:7b:15:e0:bb:10:52:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:17:04 2024 GMT
            Not After : Jun 16 22:17:04 2024 GMT
        Subject: CN=cf698c24-b4c8-4cfa-b897-e83745ff3f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:83:46:d7:97:67:db:ca:fa:9e:44:3f:fa:
                    20:46:81:16:b9:f6:25:88:20:7f:06:cd:84:7c:67:
                    64:5c:51:b6:cd:4e:4d:4e:c8:08:12:97:ad:af:66:
                    82:ae:97:6a:1e:6c:93:e1:77:e1:55:48:e8:4c:2b:
                    3f:f0:70:73:be:7a:b3:f1:a1:0b:93:4c:66:38:83:
                    73:0e:d7:64:2c:46:64:02:77:c7:db:04:70:df:41:
                    aa:1d:98:8f:7b:d0:3d:b3:12:05:64:de:08:26:5d:
                    a5:b1:03:f6:7e:b1:dd:87:de:92:83:a8:3d:93:f8:
                    f1:70:bd:82:93:e4:2a:5b:63:1b:e7:0d:07:e0:fc:
                    3c:8e:d2:b1:53:bb:02:b4:4c:df:e9:da:e1:ec:c1:
                    79:f7:50:71:74:ad:09:47:4a:76:eb:3b:9d:f4:e5:
                    f8:6f:6c:50:bb:d8:12:e6:72:c2:71:5a:29:1a:63:
                    11:95:3d:c4:8f:e6:8a:11:74:42:c9:b3:13:cd:5e:
                    ab:ee:0e:bf:0d:9f:e2:31:fe:bb:cc:17:44:a7:59:
                    33:4f:1a:58:bb:2f:10:83:61:26:55:6c:0d:b8:10:
                    82:7b:ee:65:fa:50:f1:99:73:ac:48:c0:97:f5:b5:
                    98:20:1b:c3:44:4b:7e:63:34:72:17:3d:70:f6:19:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0B:B1:5E:4A:60:B2:18:67:09:A3:63:FE:74:4B:AE:F9:AD:4E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:65:11:14:0f:2b:e3:84:7f:cd:46:9b:2a:b8:3f:53:3b:e1:
         19:e0:19:e5:e3:cc:27:2a:37:d8:e2:66:50:51:47:1b:92:9f:
         15:78:af:ef:f5:6d:1c:72:08:0a:3b:a0:8c:5a:54:1a:e6:3a:
         a4:2c:79:8f:9d:e8:0d:f0:5c:93:ba:e8:49:7c:2c:92:3c:84:
         ef:1d:4f:41:b3:95:e2:f9:63:75:41:03:ba:ff:27:0c:d3:a3:
         86:66:b4:c8:07:d1:ac:dc:a9:cb:3f:65:8f:60:f9:cf:47:ee:
         98:3a:33:22:4b:2c:12:77:9a:d4:a6:5c:a2:5a:4f:9e:79:65:
         e6:0c:e0:9f:36:6c:c5:1f:9c:3f:9a:63:ff:fb:10:c5:8f:22:
         1b:4c:33:2b:5d:db:cc:31:00:56:57:f8:ad:5d:6d:3a:e7:ea:
         e9:27:67:32:c3:da:9c:cd:22:5e:a8:8b:27:47:61:72:7c:cc:
         30:f7:93:02:26:f8:64:ab:85:86:d3:6c:bf:25:c1:97:1b:43:
         86:13:4f:b9:fa:f6:c3:6d:8b:97:4e:2a:71:d4:1f:e7:ee:0d:
         a5:36:98:4b:8e:60:0f:e8:d2:cd:d5:85:8b:6b:0a:f1:f3:d6:
         6c:39:3b:fd:c0:d1:b8:7f:b2:29:e8:b2:34:1e:df:27:a4:0e:
         f5:da:c5:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAvDn4exXguxBSTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMxODIyMTcwNFoXDTI0MDYxNjIyMTcwNFowLzEtMCsGA1UEAxMk
Y2Y2OThjMjQtYjRjOC00Y2ZhLWI4OTctZTgzNzQ1ZmYzZjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkySDRteXZ9vK+p5EP/ogRoEWufYliCB/Bs2E
fGdkXFG2zU5NTsgIEpetr2aCrpdqHmyT4XfhVUjoTCs/8HBzvnqz8aELk0xmOINz
DtdkLEZkAnfH2wRw30GqHZiPe9A9sxIFZN4IJl2lsQP2frHdh96Sg6g9k/jxcL2C
k+QqW2Mb5w0H4Pw8jtKxU7sCtEzf6drh7MF591BxdK0JR0p26zud9OX4b2xQu9gS
5nLCcVopGmMRlT3Ej+aKEXRCybMTzV6r7g6/DZ/iMf67zBdEp1kzTxpYuy8Qg2Em
VWwNuBCCe+5l+lDxmXOsSMCX9bWYIBvDREt+YzRyFz1w9hn8WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDoLsV5KYLIYZwmjY/50S675rU4VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMDAyNTRiZTYtZGI3MC0z
MjdmLTk1YzctNzY0MTljMjI5NTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHplERQPK+OEf81Gmyq4P1M74RngGeXjzCcqN9jiZlBRRxuSnxV4r+/1
bRxyCAo7oIxaVBrmOqQseY+d6A3wXJO66El8LJI8hO8dT0GzleL5Y3VBA7r/JwzT
o4ZmtMgH0azcqcs/ZY9g+c9H7pg6MyJLLBJ3mtSmXKJaT555ZeYM4J82bMUfnD+a
Y//7EMWPIhtMMytd28wxAFZX+K1dbTrn6uknZzLD2pzNIl6oiydHYXJ8zDD3kwIm
+GSrhYbTbL8lwZcbQ4YTT7n69sNti5dOKnHUH+fuDaU2mEuOYA/o0s3VhYtrCvHz
1mw5O/3A0bh/sinosjQe3yekDvXaxeU=
-----END CERTIFICATE-----
Generated at Wed May 1 16:30:47 2024 by rpki-client on console-fra.rpki-client.org