Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03c8fabe-e528-3da2-a792-bb61b7aa9d3d.roa
File:                     03c8fabe-e528-3da2-a792-bb61b7aa9d3d.roa (raw, json)
Hash identifier:          v2U4h48R/raDBZASm8/wmadIoQROtVb9Ul25R8U1t80=
Subject key identifier:   12:E7:AF:F2:05:DC:91:DD:D8:E6:AB:6B:AF:50:10:82:A3:78:0A:11
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462BABBC010810EE2D0AC750
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03c8fabe-e528-3da2-a792-bb61b7aa9d3d.roa
Signing time:             Wed 20 Mar 2024 21:00:39 +0000
ROA not before:           Wed 20 Mar 2024 21:00:39 +0000
ROA not after:            Tue 18 Jun 2024 21:00:39 +0000
asID:                     36492
IP address blocks:        136.22.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2b:ab:bc:01:08:10:ee:2d:0a:c7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 21:00:39 2024 GMT
            Not After : Jun 18 21:00:39 2024 GMT
        Subject: CN=435ac7b4-84f5-448a-ba30-375bc544dc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:67:30:a4:65:a2:5e:5b:f3:84:5a:5c:07:
                    f6:6c:1a:d5:ec:22:7d:82:d0:9d:62:be:ae:e5:3a:
                    93:96:19:31:04:b4:de:33:37:e7:da:9d:cf:12:35:
                    51:38:64:c0:08:16:27:c5:eb:ff:82:43:1c:99:fe:
                    89:22:dc:f8:c7:93:36:ac:58:3f:7b:b6:96:8d:97:
                    79:d2:3e:f7:fc:f5:1f:a6:98:aa:7a:8a:5b:3a:7b:
                    c7:14:68:16:fd:11:5a:43:6b:78:80:5e:cf:cf:33:
                    9f:25:7d:2f:ef:bc:40:b1:55:a0:7c:1a:b1:94:81:
                    d8:23:50:ec:87:8a:a5:80:21:39:d6:cc:c1:fd:6f:
                    41:e8:0f:3f:17:65:a6:f8:2c:7a:61:4b:49:f8:34:
                    2e:b9:4f:c9:be:94:ca:82:99:19:7a:47:3e:1f:f2:
                    c7:a6:6c:67:66:0a:8a:fc:26:a6:c2:a8:7a:80:0a:
                    bc:03:8e:76:a5:d3:ad:ab:3f:a4:87:62:88:96:75:
                    6a:93:f7:e4:9b:84:0f:33:93:12:f2:4c:af:3e:8d:
                    6b:3b:dd:5b:e7:cb:5f:ce:b9:e2:73:5d:27:49:44:
                    0c:56:41:20:4e:2f:45:ea:f4:40:da:e9:f3:51:a1:
                    67:51:cf:9f:c0:d3:9a:c0:4f:24:23:ec:c1:2f:e0:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E7:AF:F2:05:DC:91:DD:D8:E6:AB:6B:AF:50:10:82:A3:78:0A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03c8fabe-e528-3da2-a792-bb61b7aa9d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:4e:3e:2a:17:b8:9e:43:00:7b:69:c8:00:da:b4:c3:7d:
         32:93:e8:4a:69:60:38:e4:da:4f:10:00:e3:e2:13:eb:13:68:
         01:6d:a8:2d:ba:fa:57:9b:b1:1f:7d:65:6c:89:df:ec:56:39:
         15:53:e3:78:22:60:5b:77:bf:ce:93:0c:8b:a7:3e:57:23:58:
         cd:f1:eb:14:08:4c:ee:e1:97:66:4d:64:95:86:80:ed:83:a9:
         c8:96:ff:d3:0a:40:de:eb:b6:9b:ac:d6:35:64:7c:8d:0b:97:
         ec:12:ec:4f:8d:59:ef:79:14:4e:76:c3:01:44:20:c1:44:86:
         38:d3:45:aa:08:5c:18:61:f4:a1:15:ce:d2:a5:4b:16:26:cf:
         72:68:cb:02:0d:91:72:36:d1:65:e3:97:cc:85:4b:ac:5b:83:
         02:72:48:db:9e:99:27:43:fe:63:12:a8:28:24:8d:ed:11:17:
         30:26:6b:6f:2c:1f:a1:38:8d:55:6f:0c:9a:a6:96:38:a3:fc:
         8c:59:ff:31:e1:23:74:58:eb:2c:80:f6:db:6b:bf:2f:f7:c9:
         e0:f7:99:bf:21:3c:ef:c4:bd:16:2a:4f:e2:6a:a9:30:81:2d:
         44:11:77:f1:1d:1f:4d:00:f0:bb:d0:9c:ca:ab:22:29:88:5f:
         0d:6f:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:47 2024 by rpki-client on console-fra.rpki-client.org