Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
File:                     0aace9ba-23a4-31b7-b17e-fca13712192f.roa (raw, json)
Hash identifier:          zM9TzY5QcgznETgfjdkr94tLcBoF54j18cyaWmSp1ZQ=
Subject key identifier:   9D:8D:FD:49:1B:AF:02:2B:E4:8E:0C:88:FA:F0:9B:1F:43:D2:7E:8B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858454628F3A03438970C22581AA0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
Signing time:             Wed 20 Mar 2024 20:55:10 +0000
ROA not before:           Wed 20 Mar 2024 20:55:10 +0000
ROA not after:            Tue 18 Jun 2024 20:55:10 +0000
asID:                     36492
IP address blocks:        136.22.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:f3:a0:34:38:97:0c:22:58:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:55:10 2024 GMT
            Not After : Jun 18 20:55:10 2024 GMT
        Subject: CN=e7899569-3b92-4dcd-9068-b661cc40625b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:f2:fc:fe:18:01:ee:fb:b5:bd:f7:0e:52:
                    46:38:88:72:05:d4:14:12:9a:86:45:f2:7d:90:a8:
                    df:8f:5c:c6:53:02:8c:3f:38:aa:2b:d3:31:5e:f0:
                    02:4b:41:1e:b3:90:f0:40:fe:21:aa:58:f4:99:ba:
                    94:43:ee:a2:88:36:de:ed:d7:7f:e2:9c:4b:e6:96:
                    8b:ff:7d:70:14:dc:73:fe:d5:ed:ea:9a:f6:33:b1:
                    c2:32:ba:f0:21:d1:e7:40:b2:62:69:3c:3c:eb:79:
                    3e:36:21:d7:a1:43:9b:29:f5:67:28:91:a0:c4:fa:
                    1e:1f:a9:19:ec:dc:20:92:e2:34:b3:6e:7f:ba:b1:
                    7e:99:f1:f9:f8:9d:27:9e:c7:58:e6:8f:00:aa:ab:
                    ba:a6:00:56:f9:1c:f7:29:d9:61:44:05:82:6d:09:
                    d2:d1:60:25:3d:87:4e:31:dd:ed:9c:ac:7e:24:15:
                    76:81:58:d5:f8:cb:ce:79:ed:81:cb:a4:fd:2f:92:
                    63:73:88:14:cc:9a:f1:73:24:10:ee:22:1a:28:b2:
                    c3:47:ae:83:d7:54:64:b7:01:db:bd:ad:35:de:f1:
                    7c:95:ad:5b:bd:fc:2d:a6:72:76:d6:e3:f3:15:57:
                    fc:30:50:60:a4:ec:29:89:a2:80:01:88:b4:c5:f4:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8D:FD:49:1B:AF:02:2B:E4:8E:0C:88:FA:F0:9B:1F:43:D2:7E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d1:21:13:d5:fa:e8:90:5b:1a:8c:f8:54:b3:b8:31:2c:db:
         c6:16:3b:ec:e8:51:b1:6f:61:56:b4:95:51:98:75:cc:52:8b:
         0a:3c:07:88:de:0c:89:3d:c9:5a:8f:53:88:77:5c:01:84:41:
         93:c6:05:b4:34:0f:88:12:a2:ee:4a:5f:4c:e4:c3:16:d9:7f:
         9e:91:e3:d3:2c:fa:05:b3:27:dd:fc:f3:9a:ec:6b:2d:e5:8c:
         fe:b4:ef:13:51:7a:57:d4:c8:1c:d7:b5:46:4c:b2:17:de:df:
         90:96:df:ea:5d:85:28:1c:0a:88:70:5c:7b:85:66:ad:ed:c8:
         69:37:2e:16:e4:df:14:e4:f4:38:f5:da:98:06:13:55:1e:c0:
         7a:91:1c:03:7d:4f:43:97:4b:77:c0:80:b9:89:bd:07:6b:19:
         5f:66:3e:78:de:f3:1c:9f:5d:23:92:7d:5e:2c:12:77:db:c4:
         69:66:35:c8:09:2c:06:a5:49:ab:7a:25:ca:30:f7:10:cb:d3:
         b4:f2:92:84:08:9f:61:8a:f8:5d:15:40:ab:f0:3e:10:a7:97:
         75:ce:7c:f0:7d:49:c9:90:e8:6a:7b:08:9c:dc:e7:7a:f8:cf:
         bf:e7:fc:d3:ac:2e:75:a7:8b:d1:5e:44:7e:e4:01:d8:ad:5f:
         c8:95:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:55 2024 by rpki-client on console-ams.rpki-client.org