Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1cdfd7df-3c2b-3661-b33d-998bf52749c7.roa
File:                     1cdfd7df-3c2b-3661-b33d-998bf52749c7.roa (raw, json)
Hash identifier:          ei97ZKdJFBfTsQBL3svxwRxrNRysb5UgAUWloH1J0KU=
Subject key identifier:   0B:89:1D:EA:18:17:30:94:46:04:36:E1:0C:B8:30:86:82:8D:3F:CB
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62B353FDAD4582961EBF380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1cdfd7df-3c2b-3661-b33d-998bf52749c7.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:35:3f:da:d4:58:29:61:eb:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=7d633c73-d103-40ee-93ac-18be2c18bbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:62:e4:66:de:c6:17:5a:8a:79:f4:54:91:
                    8b:33:25:48:cc:87:41:05:ea:33:09:b0:9b:09:5e:
                    31:24:3f:72:eb:ef:85:9a:3c:03:b0:8a:a1:a7:73:
                    3c:4b:97:52:42:f2:97:a5:4b:ae:6c:20:f0:fd:5d:
                    c3:f0:ff:4c:52:e7:10:85:08:04:e2:02:aa:0d:be:
                    18:89:6a:c1:27:a1:0e:12:8d:c9:78:45:25:94:fa:
                    72:fd:99:a4:3b:cb:06:1f:16:96:46:a9:21:a1:71:
                    de:3d:7b:d6:8b:51:32:bb:f3:9e:65:c8:9e:ba:90:
                    2f:cd:34:05:54:c9:14:3d:79:e0:99:18:eb:7d:ae:
                    79:2c:c5:d4:df:bb:02:c9:91:4e:62:db:f0:02:10:
                    90:67:37:a3:c7:26:b0:15:a7:62:5c:e3:6b:39:28:
                    00:a2:4a:2c:27:1b:b2:8d:eb:ec:c9:ca:8e:a7:67:
                    45:b1:0b:ea:a9:4c:ea:cc:8d:d7:c9:42:cd:97:9c:
                    41:54:e5:1d:d4:24:06:f2:cf:52:01:4b:4d:a2:a1:
                    5b:f2:25:45:c4:9c:c1:30:b9:03:e1:8b:ad:81:38:
                    34:5b:7d:f0:f7:e3:f4:80:b1:62:d1:1c:3c:32:3d:
                    af:2b:74:0d:09:1e:0c:72:ef:fe:8a:29:e4:e1:42:
                    98:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:89:1D:EA:18:17:30:94:46:04:36:E1:0C:B8:30:86:82:8D:3F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1cdfd7df-3c2b-3661-b33d-998bf52749c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d3:65:b7:e2:35:7c:8d:28:64:99:11:c6:58:29:8b:ce:4d:
         cf:f7:f1:1a:1d:e6:14:fe:9a:ad:65:b3:cd:d0:d9:fe:fd:9c:
         94:3d:4d:3b:2d:cb:3c:a1:e4:cd:e3:c2:7b:29:3a:88:18:42:
         90:e3:a0:9f:7c:37:b8:be:1c:6a:bd:b9:78:04:8a:32:88:81:
         82:0f:55:ed:1c:13:86:31:52:1e:77:b2:2d:03:99:0b:57:96:
         8a:f8:f4:08:7d:fe:8a:c4:97:de:4f:0c:77:d2:a9:6a:29:7c:
         e7:e9:d4:cd:58:ea:01:78:cd:97:94:70:c0:62:2a:e6:fc:35:
         8d:05:41:dd:9c:aa:2f:37:65:d3:e1:d1:ad:72:90:b4:d5:c5:
         17:e6:0a:43:69:46:df:59:b3:1c:6b:74:3c:08:10:ae:7b:92:
         57:f7:3e:b4:21:7f:0b:02:fa:df:3b:af:31:4c:d4:6b:58:48:
         63:8e:89:5b:5c:60:2a:8d:dc:45:e7:be:84:4a:1c:1b:c3:f5:
         c9:71:53:8f:af:e0:21:cf:59:d5:ed:a8:0b:98:0f:37:32:b5:
         ed:30:dd:9a:14:3e:36:d5:b3:e6:90:ad:db:4d:80:2b:16:40:
         5e:94:77:9b:ca:fe:34:ae:e3:c8:da:74:56:43:5f:3f:37:16:
         18:2d:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:13 2024 by rpki-client on console-ams.rpki-client.org