Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa
File:                     20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa (raw, json)
Hash identifier:          2of4IbuZ5UJOsJdXpDIrB1tNbssjZltRvwypWu6TLEI=
Subject key identifier:   55:C2:61:29:0B:D9:EE:C9:CA:9C:26:E8:2F:D4:C9:42:FF:F4:35:EE
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62AA224A52F122B134E8080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:a2:24:a5:2f:12:2b:13:4e:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0808b9b6-97b1-4166-a15b-19a97206dda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:43:4a:4e:5c:5d:7b:c6:0e:f6:16:43:fa:
                    89:fa:d8:4f:e7:b3:d3:53:2d:97:cf:f3:4c:6a:f6:
                    d4:17:9e:c1:57:85:cc:67:0b:3e:db:c5:1d:0c:08:
                    fb:aa:a6:4f:6d:6c:1a:7e:e7:4c:a0:b4:59:15:36:
                    29:96:b8:88:04:0f:45:7d:60:e3:08:3f:72:70:da:
                    46:bf:e8:8e:77:0b:76:97:cf:d5:74:77:8d:0f:bd:
                    c9:a7:e9:f7:9e:62:bc:0d:9c:24:96:6f:23:77:5d:
                    a7:58:e6:17:cd:c4:4a:7b:ec:78:5f:be:b7:4b:98:
                    be:82:91:83:7e:62:46:12:40:9d:b0:5b:40:89:a6:
                    44:65:2a:02:72:01:db:65:3c:f1:3e:f7:94:a2:df:
                    1b:21:4a:92:76:fc:4c:76:03:6d:9f:56:ad:40:1f:
                    cf:03:3d:04:9a:80:43:f7:9a:1f:ad:8f:d6:b9:d0:
                    e2:3b:da:06:30:3f:f1:14:f5:ba:93:20:97:94:90:
                    a5:b6:6f:07:32:ed:ff:7b:e1:10:22:25:e1:4b:36:
                    7b:ce:91:d2:e4:f4:63:48:25:c2:b1:59:31:1b:7a:
                    a8:75:dc:6a:0f:ee:5f:e3:c5:85:23:9e:46:6b:ff:
                    3c:fd:9e:5b:58:f7:b8:dd:9f:8d:8c:fa:06:e1:a3:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:61:29:0B:D9:EE:C9:CA:9C:26:E8:2F:D4:C9:42:FF:F4:35:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:21:86:1f:17:1a:69:b2:71:e5:45:8c:94:ce:d3:09:38:11:
         95:57:96:51:0f:6c:b6:16:89:74:6f:e2:f2:4c:b8:1b:69:27:
         9a:a1:1d:83:a1:a4:fe:99:cb:8e:d0:d3:48:ab:88:cb:70:0d:
         c8:c9:ee:39:51:45:20:73:b7:c4:ff:b8:3b:55:7a:ed:7e:a2:
         27:5f:db:7a:cc:b2:30:28:6c:76:db:db:45:1c:d9:77:94:59:
         34:72:ec:a3:d2:de:48:c6:53:82:b5:f6:4b:ca:e5:59:b9:ea:
         60:33:73:9a:d6:58:c9:ec:6a:bc:75:c4:14:70:c0:96:27:ad:
         39:8c:d5:d9:f6:82:9f:cc:83:25:91:fe:40:1f:13:44:3d:88:
         ab:a2:cb:bb:4f:2a:bd:43:55:7d:83:0f:76:3e:7e:37:4b:d1:
         16:b6:a8:05:2e:43:f5:3f:38:83:89:83:78:65:b2:b3:48:a3:
         81:a4:9e:76:79:3f:cc:ae:e0:5f:d4:fd:b8:3e:63:52:71:bd:
         d5:89:25:6e:37:2c:85:e3:ed:99:23:8c:24:a4:7e:62:2e:e4:
         b1:6f:b9:0b:ef:bc:7a:23:53:75:5a:99:73:cd:2b:02:f7:cc:
         da:91:51:a8:74:ca:d2:04:70:87:c1:9f:c4:18:82:16:1f:5c:
         a5:c2:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:48 2024 by rpki-client on console-fra.rpki-client.org