Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17022886-1432-374e-99e8-7da57cfb3a83.roa
File:                     17022886-1432-374e-99e8-7da57cfb3a83.roa (raw, json)
Hash identifier:          HmTLOj4emu4bYyNef1fiPZY4wO39ZKN3crXUDAVFoks=
Subject key identifier:   9A:D8:36:0C:B5:36:FA:0B:3C:8B:46:94:3D:27:1B:0C:D3:DF:51:58
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E094EEABBB30CB0F48DDC8C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17022886-1432-374e-99e8-7da57cfb3a83.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ee:ab:bb:30:cb:0f:48:dd:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=66d1b241-ef1e-4358-9baf-8f195f9e1b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a3:9c:ba:a9:42:b1:ab:f9:bf:f8:dd:fe:b5:
                    ac:e9:0c:45:f6:29:e9:5d:62:00:36:57:f1:9c:5c:
                    68:44:52:fd:74:3c:68:04:ed:26:79:3e:46:db:2d:
                    64:e5:48:fd:7a:39:97:af:33:bb:7a:44:b9:bf:a6:
                    e9:08:4f:21:2e:c0:6f:b0:86:b0:38:ed:15:dc:43:
                    3c:41:ef:02:f8:74:59:70:11:c2:ff:0b:72:f4:49:
                    54:a7:c2:22:90:ef:a1:92:b6:0d:cb:c9:41:6c:cc:
                    50:e5:eb:74:b5:48:fc:a6:9c:2c:f2:30:a3:a2:d3:
                    65:29:b5:d2:8a:4a:65:71:23:4e:6f:7f:be:8b:3f:
                    59:c2:2f:ba:24:fe:59:e9:c2:55:02:05:6b:90:55:
                    89:d5:b2:db:f1:bc:c8:14:c7:a0:8e:f3:e9:8f:7b:
                    6f:2d:8b:f2:31:db:57:45:82:27:02:fa:a5:5c:39:
                    73:6e:3a:bf:4e:2f:3b:29:db:21:b6:88:36:13:b0:
                    c4:a5:61:4a:a5:e4:f5:ed:2a:0a:7c:6e:24:80:15:
                    29:c1:14:8e:d0:f7:3e:82:f7:75:23:78:14:20:55:
                    03:20:20:9f:3b:6d:3e:71:13:a2:a2:d5:c3:e1:c3:
                    41:3f:b0:56:3f:64:24:29:22:8d:eb:ee:c9:a8:ed:
                    ad:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D8:36:0C:B5:36:FA:0B:3C:8B:46:94:3D:27:1B:0C:D3:DF:51:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17022886-1432-374e-99e8-7da57cfb3a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1d:2e:a4:cc:87:0e:7f:2b:6e:51:db:15:0f:a6:b6:54:35:
         ad:58:4b:ca:d7:52:a8:74:19:a2:e3:fb:1b:99:6a:ae:05:f0:
         bc:a3:47:11:6d:43:f8:bb:d9:7d:59:b2:85:2d:0b:cb:1f:52:
         43:e3:cb:1b:4c:39:b0:82:b0:83:23:29:6f:06:8b:04:b9:9e:
         b2:70:42:77:a1:6f:2f:60:cc:e7:7e:ef:19:a2:f3:6a:52:1f:
         d2:ea:56:aa:05:0b:4c:42:a7:1f:11:62:86:f0:92:be:67:92:
         0c:8a:1a:5a:f9:13:91:f0:c4:fb:d0:10:ba:d5:b3:ec:25:70:
         0f:9b:ad:4b:e2:32:b3:c5:28:f2:b8:81:2c:9c:05:c6:a9:3e:
         64:65:f1:10:9f:7c:a1:29:11:63:63:6d:d7:f0:94:1e:aa:45:
         5e:99:f3:b7:69:f4:36:62:1d:28:3e:57:d2:d9:e6:32:96:f5:
         1c:47:d3:b4:bf:81:93:ca:69:b7:ed:3c:7a:9e:2d:bb:ac:df:
         dc:f6:bc:18:28:05:e9:ae:da:4f:d4:dc:a9:dc:a8:4d:cd:db:
         f0:4d:ed:47:d4:66:6a:37:71:79:71:71:ff:37:30:5d:83:e8:
         1f:03:7a:1e:75:54:f1:14:ba:a7:2e:14:db:53:e5:cd:e5:0f:
         12:8d:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:48 2024 by rpki-client on console-fra.rpki-client.org