Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa
File:                     340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa (raw, json)
Hash identifier:          w3dq6rQ3KvGhD4PCIhvtzszbn+DTsB3PQyjovokNBoE=
Subject key identifier:   C9:AA:FE:B9:B0:E9:ED:91:05:6E:72:E8:54:7D:F0:74:8D:AD:10:B7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62B398C528F8B70130F8900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:39:8c:52:8f:8b:70:13:0f:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b4feec07-8d44-4d7b-b859-10a351b892e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0b:a3:1c:a6:aa:b5:f3:da:a1:4c:b3:8a:84:
                    f9:27:7d:bd:58:a5:50:a6:36:d9:de:98:8c:97:03:
                    5a:8f:17:ab:c7:df:f1:62:0b:5e:f6:6b:56:31:3c:
                    2b:ab:46:f5:45:65:8e:90:de:c1:30:93:d1:99:b5:
                    b7:87:ef:03:11:60:01:33:62:1c:47:78:5e:db:7f:
                    b9:62:70:be:5f:97:f4:d2:29:62:16:9c:af:f2:c1:
                    f8:bc:d3:4d:95:72:38:08:0f:25:85:72:0e:dd:d2:
                    d0:20:91:0e:02:ae:18:ff:d6:29:44:82:54:d0:7f:
                    df:08:eb:54:80:4d:1f:6f:2a:01:8e:58:d4:bc:ac:
                    ac:d9:ce:75:7d:12:b8:21:42:43:e7:6e:29:46:98:
                    14:74:07:ad:c4:f8:8a:b6:38:b6:27:a3:49:f1:04:
                    ee:98:63:d3:ec:fa:f1:a6:ef:47:55:d0:fd:69:76:
                    55:11:e8:15:10:ba:92:97:cd:69:13:bd:80:5e:60:
                    73:26:21:06:7a:ec:3d:4e:39:6c:df:69:05:bc:95:
                    41:80:2f:c7:45:99:61:ce:54:f6:b8:e4:6b:e9:17:
                    fa:be:a0:ac:0e:c4:aa:7a:6e:26:bd:2d:49:60:fb:
                    e2:e6:ef:50:5c:2a:bb:58:5e:14:ef:be:56:43:b7:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AA:FE:B9:B0:E9:ED:91:05:6E:72:E8:54:7D:F0:74:8D:AD:10:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:6c:15:8a:3a:85:26:f0:df:bd:46:86:91:0d:8d:10:80:d2:
         04:e6:79:65:44:d2:ae:12:48:4d:6b:d8:8c:87:06:c3:5d:08:
         7e:4d:b0:6d:bf:46:71:6a:ef:1e:fe:53:de:8e:67:14:8d:22:
         2a:2b:70:01:f3:d4:c7:33:d6:c7:5d:20:30:03:71:1c:d0:f3:
         c6:93:79:ee:00:a9:b3:2d:2e:43:41:df:e9:64:1c:6c:8d:47:
         c5:c9:f3:b1:ae:a3:4c:21:1f:cd:78:2e:1c:fb:b8:12:f1:6f:
         b9:ef:26:64:79:7b:01:c0:92:33:49:c4:af:6a:ab:a1:9a:2e:
         67:a6:ba:7e:7a:4b:5f:54:fd:00:76:3c:1a:8e:83:43:ed:93:
         db:23:35:e1:01:1c:ff:01:14:a8:19:21:bf:0d:19:1d:da:fe:
         50:b3:27:f0:12:14:13:6c:c4:68:78:ba:f1:29:2d:17:f3:37:
         eb:46:3a:1b:5f:86:09:c0:9b:00:c9:df:9c:17:eb:25:a0:da:
         03:aa:ac:a2:cc:c7:d7:a5:37:81:89:2c:c9:c3:7a:a9:0b:4e:
         87:93:0a:b2:0d:36:7b:02:93:c6:7a:3c:08:0d:9e:eb:62:f6:
         f9:d8:8e:cd:25:3b:83:ad:c0:93:59:a4:63:b2:7a:e9:51:e6:
         7b:d1:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:54 2024 by rpki-client on console-fra.rpki-client.org