Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/19c65f5c-605d-3478-970e-f5cb26c087cc.roa
File:                     19c65f5c-605d-3478-970e-f5cb26c087cc.roa (raw, json)
Hash identifier:          /JvWxeE+iDKJGCzPNzkEW7FDE5ZcfQu7HhN+KkLxDd8=
Subject key identifier:   3E:4B:62:D6:98:B4:04:EF:F1:04:EF:93:4A:E7:9E:78:AC:4E:01:F1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462C9633154B909AED095640
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/19c65f5c-605d-3478-970e-f5cb26c087cc.roa
Signing time:             Wed 20 Mar 2024 21:02:30 +0000
ROA not before:           Wed 20 Mar 2024 21:02:30 +0000
ROA not after:            Tue 18 Jun 2024 21:02:30 +0000
asID:                     36492
IP address blocks:        136.22.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2c:96:33:15:4b:90:9a:ed:09:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 21:02:30 2024 GMT
            Not After : Jun 18 21:02:30 2024 GMT
        Subject: CN=0f2980e3-d09b-4b92-9c37-eae53c2e1fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:10:42:81:62:b8:1a:f2:a1:64:2d:89:69:
                    af:13:88:7e:c7:8a:64:e2:ec:d6:3c:c6:8a:1e:d4:
                    1a:db:eb:56:88:8c:e9:cf:73:64:30:23:ae:ea:25:
                    7b:94:15:67:96:55:40:67:25:fc:e4:fb:19:02:f9:
                    8a:8f:da:49:d5:cb:9a:e3:66:2e:7e:b9:e7:3d:8f:
                    bf:cb:9a:9c:41:eb:bd:1a:bd:6c:36:5c:41:fe:62:
                    0c:c9:94:ee:5a:24:1a:7a:da:49:4e:83:47:9d:6c:
                    e9:b6:ae:69:9a:d3:d4:3c:07:c7:19:3f:ec:ef:ee:
                    a6:85:dd:5e:76:fa:0a:e9:e8:c5:fd:a9:8b:a3:83:
                    a9:3c:b9:f2:93:d8:e6:42:dd:4d:a1:0f:a9:f1:08:
                    6b:0b:d0:5d:87:8f:a1:df:13:b7:a9:86:73:a2:26:
                    10:a4:31:2c:5c:61:9e:26:b3:64:dc:f5:40:87:bd:
                    34:b4:e8:7d:1f:4f:33:e1:5b:05:d9:9e:54:e5:07:
                    5d:bb:73:4e:b2:c4:1a:27:8a:d0:40:76:58:f4:5b:
                    c8:f9:39:4f:54:60:1d:b5:74:c5:1f:7d:e1:05:fb:
                    dd:ee:42:fb:e1:74:d6:fb:16:bb:49:1d:68:6f:f3:
                    49:91:c5:06:23:fd:2a:6d:ce:75:9b:17:c0:1e:70:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4B:62:D6:98:B4:04:EF:F1:04:EF:93:4A:E7:9E:78:AC:4E:01:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/19c65f5c-605d-3478-970e-f5cb26c087cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:11:11:50:81:03:70:75:6c:5c:26:14:a4:2a:4b:40:d0:c6:
         b5:38:d7:5e:37:23:bf:f9:e2:b7:fb:0a:13:ed:5d:5c:26:05:
         59:0a:55:ab:08:a8:0f:95:e9:96:2a:95:78:39:53:1d:79:b1:
         61:5e:04:56:05:a1:d9:dc:0a:17:1f:5c:e2:7e:9a:62:b2:e1:
         13:a5:4b:88:69:c0:2e:78:82:f2:64:60:4a:f4:92:66:9a:d8:
         67:d4:48:27:be:71:d4:28:53:45:ac:29:3c:c3:43:ac:cd:a0:
         3f:2e:96:2b:cc:5a:32:9d:08:f7:bc:89:07:8f:57:eb:81:35:
         0b:f9:cf:30:cd:49:f1:0a:30:31:d7:a4:b0:ec:b5:83:3d:39:
         88:19:57:5d:30:be:fa:93:9e:9e:e0:f1:05:7f:2a:4d:35:cf:
         6c:29:fe:d4:e6:a3:ce:03:e6:d3:40:d1:b6:77:e4:68:e6:06:
         b1:1f:e7:8b:c8:9a:8b:53:9c:5a:39:f1:45:96:fb:37:e9:08:
         c2:8b:81:a9:ff:f9:ef:22:2b:c0:8e:74:fa:2c:3b:d5:4e:1a:
         af:2e:2b:fd:e2:46:d0:50:36:27:08:df:ea:9f:81:bb:0a:b1:
         ec:19:bf:d0:7d:e0:74:58:fa:1e:1d:f5:42:3f:fa:c2:25:3c:
         aa:5f:08:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLJYzFUuQmu0JVkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMyMDIxMDIzMFoXDTI0MDYxODIxMDIzMFowLzEtMCsGA1UEAxMk
MGYyOTgwZTMtZDA5Yi00YjkyLTljMzctZWFlNTNjMmUxZmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnQQQoFiuBryoWQtiWmvE4h+x4pk4uzWPMaK
HtQa2+tWiIzpz3NkMCOu6iV7lBVnllVAZyX85PsZAvmKj9pJ1cua42YufrnnPY+/
y5qcQeu9Gr1sNlxB/mIMyZTuWiQaetpJToNHnWzptq5pmtPUPAfHGT/s7+6mhd1e
dvoK6ejF/amLo4OpPLnyk9jmQt1NoQ+p8QhrC9Bdh4+h3xO3qYZzoiYQpDEsXGGe
JrNk3PVAh700tOh9H08z4VsF2Z5U5Qddu3NOssQaJ4rQQHZY9FvI+TlPVGAdtXTF
H33hBfvd7kL74XTW+xa7SR1ob/NJkcUGI/0qbc51mxfAHnBDxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5LYtaYtATv8QTvk0rnnnisTgHxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMTljNjVmNWMtNjA1ZC0z
NDc4LTk3MGUtZjVjYjI2YzA4N2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQREVCBA3B1bFwmFKQqS0DQxrU41143I7/54rf7ChPtXVwmBVkKVasI
qA+V6ZYqlXg5Ux15sWFeBFYFodncChcfXOJ+mmKy4ROlS4hpwC54gvJkYEr0kmaa
2GfUSCe+cdQoU0WsKTzDQ6zNoD8ulivMWjKdCPe8iQePV+uBNQv5zzDNSfEKMDHX
pLDstYM9OYgZV10wvvqTnp7g8QV/Kk01z2wp/tTmo84D5tNA0bZ35GjmBrEf54vI
motTnFo58UWW+zfpCMKLgan/+e8iK8COdPosO9VOGq8uK/3iRtBQNicI3+qfgbsK
sewZv9B94HRY+h4d9UI/+sIlPKpfCDo=
-----END CERTIFICATE-----
Generated at Wed May 1 16:30:47 2024 by rpki-client on console-fra.rpki-client.org