Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/207b0b02-d2ae-31b3-8963-2358230fe3b3.roa
File:                     207b0b02-d2ae-31b3-8963-2358230fe3b3.roa (raw, json)
Hash identifier:          wd1XATG+4CrlAUgcrmr8KkHignuR7IsGQQ2rhK3rTOU=
Subject key identifier:   BD:6A:4E:D8:67:0A:75:25:4B:B7:C1:E9:F8:B5:0D:CC:91:79:9D:67
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E094C86A1AB9100F6D321240
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/207b0b02-d2ae-31b3-8963-2358230fe3b3.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c8:6a:1a:b9:10:0f:6d:32:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=7d2234c3-2c4d-4531-aa85-26c003f54261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:7b:02:bd:bf:bf:b2:81:8f:cd:ff:61:0d:
                    88:ed:3e:72:08:6a:5c:e9:e7:04:49:52:e6:ed:ba:
                    32:7b:13:80:22:17:6e:e6:21:12:3a:2e:91:7c:51:
                    23:a8:c9:02:61:1e:22:97:d7:05:8f:f7:01:0a:c6:
                    ac:c1:74:0d:25:fd:bf:8f:b2:f0:61:3c:e7:ec:12:
                    10:9a:2b:58:84:a3:af:88:9b:0c:bc:e0:c6:67:ca:
                    24:67:e5:d8:6c:bc:02:4e:26:7a:93:fa:72:2e:0b:
                    4d:c1:b6:6b:64:4e:6c:8e:d1:66:18:c1:8e:db:f4:
                    6c:7f:20:e5:9d:6c:5d:25:1f:d9:1c:c8:93:34:a8:
                    06:2d:77:f9:7e:fe:1b:75:93:7e:63:6b:43:54:aa:
                    ed:25:a9:d9:3c:30:08:3a:9f:05:a6:28:7d:33:94:
                    f6:90:96:88:8e:a0:df:eb:7f:ee:63:93:d7:58:16:
                    b3:5c:c5:72:7c:63:a6:f1:01:f5:78:41:1e:8e:76:
                    fb:d7:68:df:13:1f:d8:e5:f2:5a:db:0c:fb:46:ff:
                    1b:c1:2a:de:63:a1:50:00:45:cd:59:d5:b2:83:1e:
                    b4:ab:59:66:ec:f0:94:e9:ea:48:a3:8c:d8:4b:8f:
                    bf:43:28:1b:64:e5:ca:e2:b1:81:7e:1f:df:60:d4:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:4E:D8:67:0A:75:25:4B:B7:C1:E9:F8:B5:0D:CC:91:79:9D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/207b0b02-d2ae-31b3-8963-2358230fe3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:72:1a:6f:f9:cb:5c:85:23:26:b0:2a:62:d1:74:0e:8e:
         0d:d2:f3:72:d1:fb:f8:e8:7b:18:d2:ef:08:41:8e:21:28:37:
         69:ed:3d:51:21:6b:d6:0f:72:6f:bf:5a:52:74:46:73:b1:6c:
         34:a7:8c:b0:ad:71:9d:b7:9a:2c:b7:ff:3f:c7:b2:96:f6:0a:
         4c:f5:e0:8c:e8:9f:34:c3:30:e4:e4:08:2f:c8:a8:89:7e:20:
         fb:09:c9:56:e8:f6:66:40:0c:41:f6:17:ba:c7:93:aa:67:f8:
         ff:96:26:df:a1:b7:f7:17:e1:b2:06:8e:90:a2:62:92:18:0d:
         76:0f:35:90:94:98:79:51:de:da:d1:e2:b7:20:47:d3:1a:21:
         9d:f4:13:6a:ef:99:2b:96:e0:72:2c:4c:8d:90:35:96:7d:bf:
         01:b3:60:d8:99:54:79:4d:5e:5e:b6:c6:5b:8a:c1:91:e2:2a:
         b6:e0:03:5f:76:f5:58:1d:99:16:45:55:3a:76:ad:a4:1d:72:
         8a:c3:d7:c2:d4:96:03:9d:0a:86:98:a9:f5:38:7c:18:e7:99:
         99:83:d8:40:af:11:70:37:63:15:9b:10:0f:5b:79:0a:6d:e0:
         64:24:0d:c1:14:cd:72:b9:68:3b:18:aa:2a:1c:6a:a0:3c:da:
         22:a8:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:48 2024 by rpki-client on console-fra.rpki-client.org