Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0996875b-bd3d-3109-a784-6296a670aa78.roa
File:                     0996875b-bd3d-3109-a784-6296a670aa78.roa (raw, json)
Hash identifier:          GaUguMOxfYHxNVHM5B8sxUrrr5scN+e9eCayLdIEU8I=
Subject key identifier:   C5:6A:4A:0D:8F:6D:FC:EF:E2:93:30:CF:13:5F:58:20:BF:3A:D2:3C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858454626E26CCF3D39708F979A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0996875b-bd3d-3109-a784-6296a670aa78.roa
Signing time:             Wed 20 Mar 2024 20:51:00 +0000
ROA not before:           Wed 20 Mar 2024 20:51:00 +0000
ROA not after:            Tue 18 Jun 2024 20:51:00 +0000
asID:                     36492
IP address blocks:        136.22.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:e2:6c:cf:3d:39:70:8f:97:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:51:00 2024 GMT
            Not After : Jun 18 20:51:00 2024 GMT
        Subject: CN=88654377-d187-4714-a6b2-f7ef3518e047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:cc:d1:e9:d4:74:fa:6e:b1:ae:13:cf:aa:
                    95:30:e5:02:bf:99:8d:78:ce:f5:cd:9b:77:4a:0e:
                    45:21:5c:a6:2a:68:0f:68:39:0b:e5:ac:3d:e1:8d:
                    93:d3:c1:34:08:77:9c:f1:5e:04:17:2f:87:c1:61:
                    41:80:6e:e0:ab:3d:0b:a0:6a:be:ab:f5:8f:cd:56:
                    5d:43:65:b6:f1:cd:90:6b:c3:9c:72:46:55:a7:16:
                    08:8e:fe:25:70:e2:ca:d9:62:7e:c4:7b:3e:e0:fd:
                    7f:78:00:94:e7:50:c8:bd:a6:30:b6:24:af:81:12:
                    f5:33:b2:f7:4a:fe:f8:54:0d:a1:75:90:c1:7a:88:
                    44:12:7d:63:55:7b:b8:50:cf:b3:f6:17:0a:a8:90:
                    b0:dd:5e:86:66:c2:a5:b9:87:f0:7d:e0:3f:ff:d6:
                    f4:55:89:f4:40:26:86:2c:ba:b6:7e:ad:b4:0f:7c:
                    f3:94:c4:7c:99:ad:37:dd:81:f4:09:f8:50:22:23:
                    fb:d6:9e:b4:46:95:45:24:c8:9b:a8:91:06:72:c4:
                    13:f7:30:ae:e1:f7:fc:ce:84:af:6a:aa:87:e1:4f:
                    d5:cc:a8:53:49:f4:8e:4c:41:7a:51:6a:5f:aa:27:
                    af:30:84:70:56:b5:10:3b:02:d7:08:1a:8e:b8:71:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:4A:0D:8F:6D:FC:EF:E2:93:30:CF:13:5F:58:20:BF:3A:D2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0996875b-bd3d-3109-a784-6296a670aa78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:03:a0:1e:fd:16:c7:e1:8b:ab:ff:31:96:28:f1:95:b3:0c:
         65:53:81:bd:44:4b:71:f6:39:a2:5e:31:b2:04:cd:1e:b2:af:
         81:14:2b:72:89:67:a6:01:af:20:77:69:30:67:1a:61:e7:20:
         92:0b:e5:7e:c4:89:6d:82:f5:c1:af:27:28:52:01:c7:da:a3:
         07:2a:fd:e5:1f:05:0d:72:02:29:59:c3:c9:71:04:91:82:44:
         02:9c:c5:13:6c:7d:83:1a:8c:14:44:fc:a1:a8:e5:94:aa:1d:
         26:b7:b4:2d:1d:49:f0:db:97:81:9e:46:82:b7:7a:a8:83:a3:
         92:71:2b:04:ef:65:27:bb:49:5c:02:8e:c1:b1:ef:22:2f:9c:
         82:c5:a2:59:1d:47:c5:70:e6:3c:d8:06:90:fa:8a:c8:e7:b8:
         d2:e5:62:3b:68:52:dc:20:bc:82:be:ef:71:84:23:9c:dc:a3:
         4c:f3:ec:8e:e8:d2:11:8f:fa:f1:8a:2d:8e:0e:6d:39:19:68:
         66:26:9a:dd:4f:53:e4:94:48:74:2d:fe:aa:a1:12:93:a9:75:
         c0:de:1f:7b:c2:8d:17:32:ba:bb:4a:99:ae:f2:bf:3a:52:8a:
         88:c9:d2:4f:d9:77:82:8e:dd:2f:a1:35:aa:ed:d3:1f:f7:fc:
         8d:a4:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:37 2024 by rpki-client on console-fra.rpki-client.org