Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1874d847-1229-3448-8d81-30a2059e41a0.roa
File:                     1874d847-1229-3448-8d81-30a2059e41a0.roa (raw, json)
Hash identifier:          GRgSiKfUuSVL/7d5EHrrBGQiWbk6EyOpFqcNHxIZM5M=
Subject key identifier:   97:7F:29:54:6E:0C:61:29:76:A4:5D:DD:43:B0:D0:90:B3:C1:3D:5F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462DB4570A074D62F8FC5D00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1874d847-1229-3448-8d81-30a2059e41a0.roa
Signing time:             Wed 20 Mar 2024 21:04:45 +0000
ROA not before:           Wed 20 Mar 2024 21:04:45 +0000
ROA not after:            Tue 18 Jun 2024 21:04:45 +0000
asID:                     36492
IP address blocks:        136.22.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:b4:57:0a:07:4d:62:f8:fc:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 21:04:45 2024 GMT
            Not After : Jun 18 21:04:45 2024 GMT
        Subject: CN=3b8f0152-7839-4a18-9fe0-c16f5d8cae04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:64:d4:6d:18:60:5d:7a:94:33:c0:2f:7f:
                    7e:d2:c6:7a:c8:0d:61:ab:c5:fd:24:c8:8b:23:96:
                    01:4c:9d:77:37:d6:1f:d8:51:92:49:26:20:3e:79:
                    32:7b:de:32:c7:e3:22:0d:25:32:eb:cd:63:d2:73:
                    24:d7:81:29:91:99:32:82:e7:7c:86:65:b7:63:7a:
                    db:ef:f9:4d:2b:a1:eb:ef:1f:f5:86:a9:3d:5b:1c:
                    4d:7a:8b:4d:76:4c:cb:53:53:fa:af:b8:bf:06:f2:
                    06:a9:48:31:f9:d8:32:69:e4:89:3d:8d:b0:53:92:
                    b3:e0:db:a2:40:06:80:5b:64:00:4c:ce:65:1b:06:
                    6d:1e:31:51:fe:41:06:01:ce:77:2b:ed:0f:2a:9d:
                    cd:1c:50:45:dc:df:6a:66:2a:be:e1:cf:31:c0:17:
                    d5:ab:4b:90:83:3c:93:39:3e:55:88:45:92:e8:7f:
                    5c:4c:d1:07:6d:84:95:37:ba:5b:f1:00:d8:99:05:
                    ec:f8:fc:46:a6:e4:6a:f3:57:8f:7e:33:31:86:19:
                    95:7f:fb:f5:77:0b:6b:bd:00:f6:f6:cb:d0:20:63:
                    61:e7:c0:1b:78:ea:21:41:72:7c:84:fd:8f:5a:81:
                    01:6b:16:08:8b:be:ba:72:06:d3:95:4a:15:05:80:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7F:29:54:6E:0C:61:29:76:A4:5D:DD:43:B0:D0:90:B3:C1:3D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1874d847-1229-3448-8d81-30a2059e41a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:50:17:49:dd:b0:f9:5e:c5:55:db:08:f5:ce:f8:ba:cc:6e:
         b3:65:10:be:21:38:db:2c:32:07:7c:bf:a3:db:34:5e:e6:de:
         10:5a:09:ff:05:9c:f9:a5:78:1d:e6:2e:7e:2e:87:91:92:d5:
         20:38:10:46:cc:e3:4a:82:0e:10:ea:d2:49:e5:f2:c2:c3:f9:
         7f:78:19:3d:d6:91:a6:72:f0:e4:ce:2b:2b:9a:1f:72:2e:43:
         5c:be:83:cd:cb:bb:d5:ad:0d:3c:28:20:68:fc:a6:35:21:67:
         cc:75:7c:1d:ab:50:7b:a3:75:5b:36:16:2e:00:c0:6c:d6:50:
         db:42:aa:c7:0a:1a:0a:f5:db:0a:17:19:1f:03:d1:0b:39:62:
         2f:31:82:3a:44:44:c5:50:05:09:03:76:e7:57:3c:75:02:3b:
         0f:27:f0:3e:19:64:25:9f:8f:8f:dc:ca:76:3c:b4:14:ac:81:
         4f:65:a3:63:0d:4c:d6:4b:23:c5:8b:0c:f1:6a:99:33:d3:94:
         89:52:1b:45:d0:b3:e1:ef:85:25:ce:da:ec:07:d9:12:1b:de:
         7b:8e:ed:ed:3f:c5:4b:0f:e6:a9:82:fa:bf:5a:1f:ce:63:c9:
         58:5c:c2:9d:a4:c5:ac:21:42:d5:bd:e5:ac:aa:94:f0:ab:44:
         a1:f3:ec:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLbRXCgdNYvj8XQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMyMDIxMDQ0NVoXDTI0MDYxODIxMDQ0NVowLzEtMCsGA1UEAxMk
M2I4ZjAxNTItNzgzOS00YTE4LTlmZTAtYzE2ZjVkOGNhZTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSVk1G0YYF16lDPAL39+0sZ6yA1hq8X9JMiL
I5YBTJ13N9Yf2FGSSSYgPnkye94yx+MiDSUy681j0nMk14EpkZkygud8hmW3Y3rb
7/lNK6Hr7x/1hqk9WxxNeotNdkzLU1P6r7i/BvIGqUgx+dgyaeSJPY2wU5Kz4Nui
QAaAW2QATM5lGwZtHjFR/kEGAc53K+0PKp3NHFBF3N9qZiq+4c8xwBfVq0uQgzyT
OT5ViEWS6H9cTNEHbYSVN7pb8QDYmQXs+PxGpuRq81ePfjMxhhmVf/v1dwtrvQD2
9svQIGNh58AbeOohQXJ8hP2PWoEBaxYIi766cgbTlUoVBYCb/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJd/KVRuDGEpdqRd3UOw0JCzwT1fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMTg3NGQ4NDctMTIyOS0z
NDQ4LThkODEtMzBhMjA1OWU0MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpQF0ndsPlexVXbCPXO+LrMbrNlEL4hONssMgd8v6PbNF7m3hBaCf8F
nPmleB3mLn4uh5GS1SA4EEbM40qCDhDq0knl8sLD+X94GT3WkaZy8OTOKyuaH3Iu
Q1y+g83Lu9WtDTwoIGj8pjUhZ8x1fB2rUHujdVs2Fi4AwGzWUNtCqscKGgr12woX
GR8D0Qs5Yi8xgjpERMVQBQkDdudXPHUCOw8n8D4ZZCWfj4/cynY8tBSsgU9lo2MN
TNZLI8WLDPFqmTPTlIlSG0XQs+HvhSXO2uwH2RIb3nuO7e0/xUsP5qmC+r9aH85j
yVhcwp2kxawhQtW95ayqlPCrRKHz7Ag=
-----END CERTIFICATE-----
Generated at Thu May 2 08:54:18 2024 by rpki-client on console-fra.rpki-client.org