Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17022886-1432-374e-99e8-7da57cfb3a83.roa
File:                     17022886-1432-374e-99e8-7da57cfb3a83.roa (raw, json)
Hash identifier:          VQrFYgYWPVktDDPHzn+TebhJp/YQixFNf/oewXGZpw4=
Subject key identifier:   F2:5B:BF:3F:0D:50:EB:AC:78:B4:EF:E8:D4:72:29:9C:28:11:ED:4E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540B74F09C6D3169D92A2FDC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17022886-1432-374e-99e8-7da57cfb3a83.roa
Signing time:             Mon 18 Mar 2024 22:07:09 +0000
ROA not before:           Mon 18 Mar 2024 22:07:09 +0000
ROA not after:            Sun 16 Jun 2024 22:07:09 +0000
asID:                     36492
IP address blocks:        136.22.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:4f:09:c6:d3:16:9d:92:a2:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:07:09 2024 GMT
            Not After : Jun 16 22:07:09 2024 GMT
        Subject: CN=2fb03e00-0704-4143-ae69-8bc0630a6e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:d3:5c:2a:32:82:0b:21:a0:a0:d4:0c:11:
                    01:37:32:c6:08:ff:fa:f0:15:59:b0:89:07:6b:30:
                    cb:e9:f7:f2:95:f1:96:48:1b:45:fc:e4:4d:c7:26:
                    d7:87:91:2c:24:78:2b:01:06:b5:57:78:95:3f:f3:
                    92:68:4e:ca:f5:7e:b8:25:37:48:d7:08:e6:5a:8d:
                    7e:b5:f2:39:21:d6:f7:72:17:65:da:18:92:2a:0f:
                    47:49:1a:4b:85:1f:d3:3d:53:75:42:ed:06:7b:de:
                    3d:9a:20:ef:f3:6b:2d:cd:19:a2:20:dc:8d:10:81:
                    f7:ad:dc:d6:58:b7:6b:5a:2c:50:f1:07:40:3c:b0:
                    57:fd:16:be:3a:52:4b:77:fd:b9:a0:a8:40:cc:47:
                    e4:8f:c1:cf:64:ed:c4:63:d0:8b:1f:91:18:f2:7d:
                    10:70:46:ef:85:c7:24:d8:dd:08:80:a4:d6:3d:3a:
                    bc:ff:e0:f3:ab:28:de:db:62:c1:c8:f6:78:31:84:
                    ea:d5:3d:21:5a:4c:e6:de:6d:99:63:62:7d:fa:e8:
                    d3:50:a8:71:fe:15:91:36:08:ae:7f:d0:40:0c:c4:
                    ae:5d:86:e7:3b:66:6e:d0:6a:2c:f5:35:18:f9:f3:
                    93:11:24:7a:c3:e4:50:d5:55:dd:d2:1f:11:c9:3e:
                    55:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5B:BF:3F:0D:50:EB:AC:78:B4:EF:E8:D4:72:29:9C:28:11:ED:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17022886-1432-374e-99e8-7da57cfb3a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:2d:6d:0a:96:78:29:13:8d:0d:45:60:29:c8:de:a6:f9:
         72:66:0a:6c:f6:63:be:44:fc:ce:42:02:a9:2e:17:a6:31:32:
         64:47:eb:71:84:ff:54:2b:4a:82:19:f2:18:60:4e:2e:1a:aa:
         ee:72:2f:a0:ec:66:0a:b4:69:96:6f:dd:07:fc:c2:b1:d8:f6:
         47:b1:54:b5:91:44:b5:db:56:15:93:41:43:95:e1:f0:e4:54:
         de:69:2a:a6:43:15:73:6e:1b:77:88:e3:37:23:27:47:a5:bd:
         e6:1a:95:29:2d:71:b5:0e:65:cf:54:ae:ba:c4:d2:ef:bd:2d:
         97:c5:71:fb:79:5b:49:23:f8:d9:39:ba:f7:a5:58:92:8d:5d:
         ed:fd:0d:68:0a:d9:21:ec:ba:0e:fa:3b:8c:6b:db:f1:23:f0:
         ad:e7:f9:1a:ce:61:42:81:10:b4:e0:e6:80:e4:46:a3:49:c0:
         ca:c8:b3:ac:1e:08:aa:5a:34:d0:4b:92:f7:d7:31:e9:c3:28:
         f2:3b:28:07:78:a0:5c:64:bd:c9:70:70:54:c4:29:43:17:a4:
         2d:45:cd:d0:19:82:a3:6a:a5:81:e9:bf:09:46:a0:5d:9b:26:
         99:b5:a3:7f:b3:8e:30:bd:f4:a7:8c:37:a2:fd:de:7d:2f:74:
         c1:73:9a:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAt08JxtMWnZKi/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMxODIyMDcwOVoXDTI0MDYxNjIyMDcwOVowLzEtMCsGA1UEAxMk
MmZiMDNlMDAtMDcwNC00MTQzLWFlNjktOGJjMDYzMGE2ZTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/XTXCoyggshoKDUDBEBNzLGCP/68BVZsIkH
azDL6ffylfGWSBtF/ORNxybXh5EsJHgrAQa1V3iVP/OSaE7K9X64JTdI1wjmWo1+
tfI5Idb3chdl2hiSKg9HSRpLhR/TPVN1Qu0Ge949miDv82stzRmiINyNEIH3rdzW
WLdrWixQ8QdAPLBX/Ra+OlJLd/25oKhAzEfkj8HPZO3EY9CLH5EY8n0QcEbvhcck
2N0IgKTWPTq8/+Dzqyje22LByPZ4MYTq1T0hWkzm3m2ZY2J9+ujTUKhx/hWRNgiu
f9BADMSuXYbnO2Zu0Gos9TUY+fOTESR6w+RQ1VXd0h8RyT5VIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJbvz8NUOuseLTv6NRyKZwoEe1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMTcwMjI4ODYtMTQzMi0z
NzRlLTk5ZTgtN2RhNTdjZmIzYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQ8LW0KlngpE40NRWApyN6m+XJmCmz2Y75E/M5CAqkuF6YxMmRH63GE
/1QrSoIZ8hhgTi4aqu5yL6DsZgq0aZZv3Qf8wrHY9kexVLWRRLXbVhWTQUOV4fDk
VN5pKqZDFXNuG3eI4zcjJ0elveYalSktcbUOZc9UrrrE0u+9LZfFcft5W0kj+Nk5
uvelWJKNXe39DWgK2SHsug76O4xr2/Ej8K3n+RrOYUKBELTg5oDkRqNJwMrIs6we
CKpaNNBLkvfXMenDKPI7KAd4oFxkvclwcFTEKUMXpC1FzdAZgqNqpYHpvwlGoF2b
Jpm1o3+zjjC99KeMN6L93n0vdMFzmqA=
-----END CERTIFICATE-----
Generated at Thu May 2 08:04:35 2024 by rpki-client on console-ams.rpki-client.org