Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/28d6deac-c048-3de6-a65b-745142ffb645.roa
File:                     28d6deac-c048-3de6-a65b-745142ffb645.roa (raw, json)
Hash identifier:          tpAiLldjLHn3DM32qg7ukLvW17sFt+T+co1VgZwkld4=
Subject key identifier:   EC:6C:A4:F4:81:2C:22:44:04:15:75:AA:EE:F8:73:7B:F6:38:B9:E5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584546230A4F7690F20BF543BB80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/28d6deac-c048-3de6-a65b-745142ffb645.roa
Signing time:             Wed 20 Mar 2024 20:43:16 +0000
ROA not before:           Wed 20 Mar 2024 20:43:16 +0000
ROA not after:            Tue 18 Jun 2024 20:43:16 +0000
asID:                     36492
IP address blocks:        136.22.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:0a:4f:76:90:f2:0b:f5:43:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:43:16 2024 GMT
            Not After : Jun 18 20:43:16 2024 GMT
        Subject: CN=70d67369-33e8-4ba6-9a14-eec0adf2b09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:28:8c:3a:e1:b1:06:0d:93:f2:f5:56:c1:
                    b8:11:80:e2:3e:05:bf:7a:5a:da:03:4a:b4:35:2f:
                    5c:e9:79:af:71:e7:8d:14:b1:cb:e8:e6:41:ee:36:
                    5c:48:7f:70:93:f6:61:b3:7a:de:a5:88:82:1f:1e:
                    5e:97:5e:b8:bd:3d:d5:46:37:e9:01:28:52:d7:1c:
                    c2:03:be:b2:ec:3d:5a:e0:dc:36:b6:31:6f:b0:02:
                    87:d8:02:d7:65:6b:26:e5:32:ba:ed:95:9e:3e:76:
                    85:af:34:1e:c9:ff:44:bd:13:57:cb:fd:35:9a:86:
                    dc:d7:0e:f5:64:f1:f9:ff:78:3e:2e:4c:44:33:4c:
                    f8:ca:e2:f2:90:ce:49:f1:b8:0d:71:28:03:e3:f9:
                    41:0b:b0:e0:b9:d4:45:42:57:dc:4a:37:2e:e6:fd:
                    77:b4:8f:75:f9:a4:16:09:ca:b4:37:84:50:b7:c5:
                    f7:b4:26:5f:09:0a:80:67:66:d4:c0:39:1e:f3:5b:
                    db:81:ad:a1:4e:64:4b:cb:a1:96:3c:20:fc:f6:f9:
                    d2:ec:d9:b1:98:fd:93:45:cc:ed:3f:ea:90:95:06:
                    8c:0a:f5:f9:44:b6:dc:05:fc:3f:60:c2:98:be:97:
                    da:85:61:90:35:45:35:22:2e:02:d2:89:2a:f7:69:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:A4:F4:81:2C:22:44:04:15:75:AA:EE:F8:73:7B:F6:38:B9:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/28d6deac-c048-3de6-a65b-745142ffb645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:50:ce:f7:44:88:9a:b1:1b:3f:0e:10:21:93:44:8e:50:a2:
         5c:80:d6:97:68:38:79:01:ae:90:31:e7:1d:a9:64:2a:49:8f:
         a1:d4:3f:89:52:1f:f4:43:60:b2:cc:43:9c:61:90:f6:cc:08:
         bf:03:16:78:3c:d3:a6:d4:b8:1c:f6:c6:b4:92:63:9a:44:de:
         dc:86:a5:ed:ec:c6:35:24:e6:c9:26:1a:5c:51:5e:54:52:90:
         b3:c0:c4:36:46:81:17:11:0f:94:94:cc:00:0c:d8:58:0c:02:
         b0:07:b9:59:cf:b8:6f:10:a9:5d:ab:85:90:fd:4d:7a:2f:f1:
         a3:5d:de:fb:89:02:45:e2:97:a1:64:6d:ed:ac:74:e3:59:25:
         7e:99:6e:a7:57:f9:be:70:d5:ea:cf:2b:a0:38:09:9d:07:cd:
         90:b9:51:99:24:81:0c:e4:54:14:66:22:b0:de:3f:3b:97:dc:
         ec:8c:a6:57:eb:45:3c:3c:7b:78:df:dc:e7:7e:d2:57:e3:f1:
         f5:1a:a5:b5:15:65:3c:a9:7b:20:f6:d3:49:f9:d1:05:f9:89:
         55:4b:78:bd:f9:d4:4c:ed:c0:0d:a8:52:d3:50:ca:b3:90:35:
         a6:bb:cd:d4:44:97:fe:cb:40:9a:72:31:a6:4a:39:02:87:d4:
         75:7a:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:18 2024 by rpki-client on console-fra.rpki-client.org